This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          92Y/UaEvndb2RAHsCFRpLpi6/r51TBLVBfdrD2CcjjU=
Subject key identifier:   57:62:A6:43:07:25:2B:05:40:24:6A:90:4B:06:9E:6D:22:68:E0:6B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019AB77410D868D003045F18663B1996FF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F58
Signing time:             Mon 24 Nov 2025 20:00:28 +0000
Manifest this update:     Mon 24 Nov 2025 20:00:28 +0000
Manifest next update:     Tue 25 Nov 2025 20:00:28 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: DrP1ulzjOMjLF42mbgB7wyGXJbkMRQt5UxXETkRSgr4=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:b7:74:10:d8:68:d0:03:04:5f:18:66:3b:19:96:ff:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Nov 24 20:00:28 2025 GMT
            Not After : Nov 25 20:00:28 2025 GMT
        Subject: CN=5762a64307252b0540246a904b069e6d2268e06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:73:4c:62:57:df:3c:47:7b:27:8f:9e:d6:
                    66:87:38:03:da:ce:b8:6c:f9:5a:ea:b4:6e:37:07:
                    21:28:eb:9d:30:f5:3f:f9:5a:6d:da:8c:a4:1a:e1:
                    bf:7d:be:d0:c4:32:b4:c4:c2:42:2c:4a:37:5f:26:
                    ce:5a:2c:6c:ea:ae:33:c1:c8:a3:89:ef:11:cf:b1:
                    3b:de:45:8d:4a:7f:b1:86:c7:be:15:41:84:d0:9c:
                    82:a1:57:8c:f5:bb:e9:ea:7a:77:75:28:fd:a7:d0:
                    96:e3:7d:92:58:47:cf:0a:f9:6d:fe:1b:61:2d:3f:
                    0e:7c:05:53:dc:05:92:b6:82:6a:1c:2c:a1:e3:37:
                    40:d4:b9:12:92:a9:31:09:d4:b4:29:a4:d3:f4:b3:
                    18:4b:ca:ef:c4:24:34:aa:97:d3:96:e3:73:a6:a4:
                    c4:87:da:f8:4b:bc:43:e6:2c:a3:31:80:32:fb:d7:
                    49:2c:9d:0f:6e:4a:28:29:64:d3:ef:1a:74:76:2f:
                    56:9f:86:a9:d7:c7:37:12:50:22:6b:67:f2:b9:cb:
                    ce:49:c0:88:9c:62:e3:26:d7:9e:0a:ba:bd:89:c9:
                    d8:a1:9f:7b:ff:d5:75:10:ea:23:aa:a6:29:28:96:
                    57:97:86:e5:49:98:a0:18:d8:a3:81:1f:f8:48:34:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:A6:43:07:25:2B:05:40:24:6A:90:4B:06:9E:6D:22:68:E0:6B
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:16:9f:1e:68:02:b4:a4:c0:e5:4d:26:82:18:a7:9a:24:b9:
         e1:86:e4:0f:f7:2b:2e:2c:5b:4a:95:a5:c8:ff:9b:cf:a0:28:
         da:ad:c6:73:e0:be:c1:a0:09:a9:c7:fe:6a:eb:c2:39:9b:66:
         0a:67:e6:35:3d:c2:a7:ab:a9:01:be:ef:f6:20:4d:02:a4:7d:
         62:ac:e8:65:18:d2:dd:e5:3a:5d:d2:93:db:06:00:ff:1b:d9:
         6e:50:9e:94:64:92:b0:91:11:46:67:68:1c:17:6f:02:1d:2b:
         33:eb:98:2e:68:d4:33:d7:4a:7d:fd:10:a8:a9:58:62:32:82:
         9c:bd:c5:e8:20:b0:e0:d7:a9:0c:56:46:fc:d2:30:95:95:11:
         95:d4:43:b3:11:1a:aa:c7:c2:83:f7:df:9a:58:80:bf:a6:a0:
         49:10:57:5b:4f:e7:ba:31:be:46:a4:de:ee:09:b8:0f:52:99:
         21:c4:55:b7:42:79:bd:15:70:8a:01:b5:c4:06:0a:b5:6e:2d:
         6f:70:4e:01:60:df:8b:ff:14:c2:64:6d:df:ce:0d:f9:bd:4e:
         86:38:1a:aa:d5:f2:df:bd:31:1f:a2:97:30:1c:2c:f5:34:56:
         5d:bc:99:ac:ac:92:ad:f3:9a:85:a6:1c:3c:60:62:ad:2d:3d:
         a8:13:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 03:23:37 2025 by rpki-client