This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File:                     eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier:          Mo4XPEN3zaYU9aKBC5+mjQGdZ/xLy8T/mO5N3kMSlJE=
Subject key identifier:   3E:7D:C7:17:30:DC:52:F3:64:A0:DD:2B:1A:37:44:73:7F:79:5E:F9
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer:       /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial:       019B202AEA64DAA10E469430719BB6E68BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number:          0967
Signing time:             Mon 15 Dec 2025 04:00:41 +0000
Manifest this update:     Mon 15 Dec 2025 04:00:41 +0000
Manifest next update:     Tue 16 Dec 2025 04:00:41 +0000
Files and hashes:         1: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (hash: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=)
                          2: FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (hash: sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=)
                          3: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: lcFIOiMhAqTxnT2SXdfNHdJrOyJiNGY8qasQtGa6WbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:2a:ea:64:da:a1:0e:46:94:30:71:9b:b6:e6:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
        Validity
            Not Before: Dec 15 04:00:41 2025 GMT
            Not After : Dec 16 04:00:41 2025 GMT
        Subject: CN=3e7dc71730dc52f364a0dd2b1a3744737f795ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:09:dd:28:6b:40:32:28:b2:19:8e:77:72:
                    22:cc:ea:13:38:06:01:45:f6:a0:89:3e:20:19:a8:
                    2f:a4:f5:38:d3:dc:f3:7b:b3:1c:63:f5:1a:34:0e:
                    57:25:96:8a:cc:63:f9:5b:4e:96:cd:89:4c:c7:b6:
                    15:62:1f:f6:a3:d5:92:72:9e:d1:49:a0:9a:e0:a5:
                    ba:ef:51:3b:49:5f:92:97:0a:76:b1:9c:b2:26:36:
                    c5:ca:47:a1:f6:6d:a7:7e:de:5c:08:38:da:53:9e:
                    a2:35:41:f6:f5:15:94:48:95:1e:38:ad:9f:d0:39:
                    cb:98:ec:7b:9d:b8:17:5c:a1:21:6f:56:f8:88:d2:
                    64:87:f4:04:8e:d9:59:4e:d7:55:33:0a:3a:f2:fa:
                    21:d9:11:58:bd:6a:ef:59:84:81:a1:13:2f:88:1a:
                    4c:e9:79:e4:08:2d:63:71:bf:d3:d3:95:82:9b:48:
                    08:de:8f:34:91:b3:c8:e1:9f:45:9a:ec:59:06:0f:
                    ed:97:64:ad:59:b4:8c:6a:a4:e2:19:df:d2:d4:8a:
                    ee:40:fa:91:3a:f6:f4:d5:f9:40:2d:29:a2:ce:bf:
                    4e:90:39:cf:98:5d:d1:13:66:7f:53:0d:30:e2:70:
                    3b:62:2d:c1:38:4f:00:67:1f:6c:6e:8f:c8:d0:24:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:C7:17:30:DC:52:F3:64:A0:DD:2B:1A:37:44:73:7F:79:5E:F9
            X509v3 Authority Key Identifier:
                keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:9a:db:55:e9:94:29:af:08:1c:50:f0:a5:5e:7d:fd:5d:89:
         53:df:18:eb:bd:aa:73:82:33:0c:aa:f1:3f:d2:05:34:f9:78:
         fb:c6:6b:1f:3d:1e:f4:31:4f:6c:dc:db:40:f6:89:5e:c1:7a:
         28:48:f9:4d:e4:05:af:5a:09:eb:d3:40:61:ba:d6:d4:d2:6e:
         6a:da:58:b5:24:79:00:35:3d:98:5c:7b:f7:1b:79:7d:8e:70:
         07:87:84:ca:9a:74:08:4e:e2:9a:bf:ab:19:12:5b:89:f0:b2:
         98:e4:4c:bc:bf:b4:20:67:e9:cb:79:bd:6c:fc:70:07:91:e5:
         ea:35:65:3d:39:0f:aa:a7:d0:a6:ea:c2:4f:e6:cb:c1:37:6e:
         ff:54:36:3a:8f:a7:65:0d:02:16:48:aa:d5:a4:27:70:82:4c:
         61:16:03:98:14:ae:20:1a:1b:cd:08:49:c0:69:b1:52:12:6f:
         33:2e:08:73:cb:a3:16:a5:33:c8:16:4e:b4:22:28:6e:30:0a:
         67:d2:56:d8:ff:e5:07:4b:d6:d8:bf:7e:80:4a:20:3b:1c:fb:
         f6:0c:6f:15:b8:f7:2d:6e:ad:92:1c:68:fa:78:57:a6:ba:29:
         a4:6e:45:58:96:41:ac:ca:04:af:e9:8a:21:0a:2b:f4:6d:10:
         ed:82:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 08:34:14 2025 by rpki-client