This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          z+DA1F9TxxTmu7S6oQoanj5hR7zDeLP9sLuasNtp1yQ=
Subject key identifier:   AC:CB:48:71:6D:F5:1C:8A:CF:A9:C5:5A:49:E2:26:7D:F4:16:33:EE
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019AEF7593F2550178BE1D0175D56E9AA8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F75
Signing time:             Fri 05 Dec 2025 17:00:51 +0000
Manifest this update:     Fri 05 Dec 2025 17:00:51 +0000
Manifest next update:     Sat 06 Dec 2025 17:00:51 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: R/KpoTsXqk2/NcUk+2+BmSj5qMum2mnbHFpnfScXzzY=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:75:93:f2:55:01:78:be:1d:01:75:d5:6e:9a:a8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Dec  5 17:00:51 2025 GMT
            Not After : Dec  6 17:00:51 2025 GMT
        Subject: CN=accb48716df51c8acfa9c55a49e2267df41633ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:f3:d0:aa:0c:0d:cc:d6:9a:fe:15:aa:70:
                    e8:78:ca:2e:48:4e:01:12:99:69:de:89:5c:c2:4d:
                    2d:d0:0f:00:e0:49:93:9b:62:90:19:7b:c3:e4:f1:
                    ee:fa:b8:ad:62:c9:43:3c:56:36:6f:bf:05:14:4d:
                    47:fe:88:09:12:1f:ec:b9:02:fb:a9:fe:e7:88:1e:
                    e0:c9:d8:10:91:de:3b:87:82:2f:7f:88:ad:82:2e:
                    e1:9f:77:55:8b:ad:7d:55:db:34:31:ae:ed:bd:a1:
                    b9:ae:c4:1a:22:08:8e:ed:6d:ba:c2:55:c6:b0:59:
                    c2:b9:89:34:53:4c:5f:24:04:89:5c:ca:88:06:71:
                    15:1b:ca:d8:42:78:f2:9a:c1:de:f3:10:d1:a5:cb:
                    98:68:d0:ac:09:1e:34:51:27:ae:ae:b3:09:3e:8c:
                    f5:04:e3:f5:6a:7b:50:e4:a6:01:fb:54:41:bc:b8:
                    09:e7:2d:05:17:6d:f4:81:5c:76:d4:cd:b6:1a:30:
                    87:ae:67:00:ee:f3:19:fc:e2:25:3f:43:50:e5:ff:
                    84:d0:00:61:65:87:e2:cd:5a:f8:bb:7e:26:66:b8:
                    65:36:3c:a0:d4:9f:ba:b9:6c:41:39:00:3c:20:6e:
                    ed:ad:a3:57:6e:7e:27:d0:9a:c0:30:19:d3:18:60:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:48:71:6D:F5:1C:8A:CF:A9:C5:5A:49:E2:26:7D:F4:16:33:EE
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:01:92:19:7d:55:4b:5a:7d:af:73:1c:ed:63:21:54:32:
         3c:94:d5:43:d9:01:f5:2d:be:4b:68:94:c7:2e:85:a1:ec:d4:
         bb:82:b7:02:43:54:88:1b:3a:5f:a3:64:8d:6b:1d:d0:2c:46:
         76:b1:6e:df:09:65:2f:d2:fb:b2:0d:1a:8c:13:d4:06:dc:f6:
         97:97:d7:5e:fe:2f:3c:1a:a8:58:81:19:ae:3a:c9:89:b4:ff:
         51:0e:ee:24:92:39:c2:0b:66:db:e2:38:f7:c6:43:8d:1b:71:
         7d:50:f0:11:fd:64:8e:c4:b3:ee:1c:d7:8a:ec:26:f9:3b:c1:
         69:1c:ea:f5:e4:d6:cf:d2:e8:4f:b8:41:3c:f8:2f:e4:3e:25:
         a1:67:ac:ed:38:92:d1:ca:48:ac:98:a0:02:45:3e:aa:59:73:
         c6:9e:f7:67:43:2b:07:f5:9a:29:f6:dc:46:c4:60:aa:8b:2b:
         0b:32:5a:fe:a9:81:6a:6a:92:66:fc:43:9a:fe:54:50:a2:f4:
         8c:c4:1e:18:80:68:a8:aa:2f:ce:0c:07:ce:93:f5:87:d8:d8:
         5d:f0:b2:72:1b:9c:ba:53:8a:ee:f6:bd:06:21:67:61:02:bf:
         68:12:a4:a6:18:2e:89:77:0c:3e:ff:ff:e7:b6:3a:c3:92:91:
         47:78:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:14:37 2025 by rpki-client