This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          671XoXjj8EfLg3a21NIgHJF0yCxqlF9LRnRRepS4STU=
Subject key identifier:   03:A2:E6:FF:16:59:86:4B:D2:99:51:4C:9D:80:85:45:69:DF:3A:92
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019AD27E45E000ACCDCE6EE068E5EDC5788A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F66
Signing time:             Sun 30 Nov 2025 02:01:21 +0000
Manifest this update:     Sun 30 Nov 2025 02:01:21 +0000
Manifest next update:     Mon 01 Dec 2025 02:01:21 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: kKBkKbAuNG48GH+GDK9UK85+ikoUd1ddtHKbKkxEKrI=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Dec 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d2:7e:45:e0:00:ac:cd:ce:6e:e0:68:e5:ed:c5:78:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Nov 30 02:01:21 2025 GMT
            Not After : Dec  1 02:01:21 2025 GMT
        Subject: CN=03a2e6ff1659864bd299514c9d80854569df3a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:91:69:2a:1c:c9:ce:15:4f:01:6b:42:dc:
                    0e:c5:ce:10:01:bd:5a:d7:c2:63:c1:48:17:3a:82:
                    23:fb:70:61:6b:11:fb:63:56:7e:1a:36:91:f6:5a:
                    ee:1f:00:bc:61:bb:40:cc:98:dd:06:89:2b:c2:02:
                    51:81:51:60:22:e2:7f:de:9f:b3:a2:0c:0e:54:c4:
                    ed:5b:6a:c9:1f:7e:ad:e8:42:54:e8:90:aa:40:d3:
                    7c:cb:d4:57:30:f6:e9:ce:4c:22:cb:22:f3:ae:4f:
                    28:78:ad:48:98:2e:4e:d6:68:56:10:e6:e0:12:2a:
                    b2:b3:45:c8:3b:66:71:0f:fb:2c:e1:e2:8d:12:15:
                    a9:02:69:bf:92:06:12:b0:df:d0:06:61:65:3b:c7:
                    6a:fc:35:1f:09:ea:45:47:a8:4b:6f:ad:90:98:d2:
                    19:af:2e:f9:eb:ca:33:c2:6e:c3:e1:e0:96:4a:6e:
                    ae:c3:f9:b0:f6:b1:28:01:e2:32:78:93:dc:37:a4:
                    63:9b:b3:28:9e:25:e6:c7:71:c7:7c:6d:d5:da:b0:
                    5a:4e:fd:3c:d0:21:ce:c6:24:1b:98:d5:c3:ee:ef:
                    56:d9:8d:8e:17:ea:18:86:13:ff:4a:89:2f:fb:30:
                    eb:4b:4c:2d:82:12:6a:7e:5f:35:4e:92:f5:b3:d8:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:E6:FF:16:59:86:4B:D2:99:51:4C:9D:80:85:45:69:DF:3A:92
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:38:5d:0c:80:95:f4:7d:94:b6:32:70:54:63:8b:f8:18:
         89:12:46:89:33:37:b9:2c:a1:11:a7:83:f1:fb:6c:02:4e:eb:
         f5:1a:83:93:44:cb:40:e2:79:cc:6c:b4:f2:28:b9:d7:a9:4a:
         af:1a:b8:9f:38:20:80:e8:54:32:b7:81:5e:5e:c6:b4:68:6f:
         00:a4:e4:94:4b:39:11:c9:44:ce:50:d5:27:8c:53:44:c2:b4:
         d8:30:6e:78:18:99:4d:a5:b6:5c:34:95:2e:d7:0a:78:3b:52:
         93:1a:23:f3:15:d2:40:b5:45:3e:87:da:e5:4b:32:6a:37:75:
         8e:dc:3f:dc:4c:23:da:ad:cb:cb:94:20:e2:96:f5:59:68:9d:
         b9:ee:62:e1:16:1e:07:26:d5:61:3c:5b:ae:e7:32:ad:6e:5a:
         c8:af:16:ad:a4:d4:a4:2a:38:5e:ce:c6:7c:bd:0e:13:d6:18:
         9b:bc:7f:d9:20:8b:98:da:3e:55:6e:39:03:ea:d9:92:bd:dd:
         84:9c:10:97:09:3c:a6:70:3c:02:ac:6d:2a:89:1e:44:b0:58:
         dc:fa:51:66:1d:c3:b7:2d:09:99:1e:61:05:91:0f:42:8c:54:
         25:eb:88:2b:8b:ea:d1:53:f3:7f:66:eb:a0:fe:37:c6:c4:b1:
         8a:8e:b0:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrSfkXgAKzNzm7gaOXtxXiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjUxMTMwMDIwMTIxWhcNMjUxMjAxMDIwMTIxWjAzMTEwLwYDVQQD
EygwM2EyZTZmZjE2NTk4NjRiZDI5OTUxNGM5ZDgwODU0NTY5ZGYzYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoomRaSocyc4VTwFrQtwOxc4QAb1a
18JjwUgXOoIj+3BhaxH7Y1Z+GjaR9lruHwC8YbtAzJjdBokrwgJRgVFgIuJ/3p+z
ogwOVMTtW2rJH36t6EJU6JCqQNN8y9RXMPbpzkwiyyLzrk8oeK1ImC5O1mhWEObg
Eiqys0XIO2ZxD/ss4eKNEhWpAmm/kgYSsN/QBmFlO8dq/DUfCepFR6hLb62QmNIZ
ry7568ozwm7D4eCWSm6uw/mw9rEoAeIyeJPcN6Rjm7MoniXmx3HHfG3V2rBaTv08
0CHOxiQbmNXD7u9W2Y2OF+oYhhP/Sokv+zDrS0wtghJqfl81TpL1s9jlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOi5v8WWYZL0plRTJ2AhUVp3zqSMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIw4XQyA
lfR9lLYycFRji/gYiRJGiTM3uSyhEaeD8ftsAk7r9RqDk0TLQOJ5zGy08ii516lK
rxq4nzgggOhUMreBXl7GtGhvAKTklEs5EclEzlDVJ4xTRMK02DBueBiZTaW2XDSV
LtcKeDtSkxoj8xXSQLVFPofa5Usyajd1jtw/3Ewj2q3Ly5Qg4pb1WWidue5i4RYe
BybVYTxbrucyrW5ayK8WraTUpCo4Xs7GfL0OE9YYm7x/2SCLmNo+VW45A+rZkr3d
hJwQlwk8pnA8AqxtKokeRLBY3PpRZh3Dty0JmR5hBZEPQoxUJeuIK4vq0VPzf2br
oP43xsSxio6wWA==
-----END CERTIFICATE-----
Generated at Sun Nov 30 04:49:58 2025 by rpki-client