This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          OOCi1nKArgX03iKm6iVPLo21guFMO++9vGLpbL4IXSo=
Subject key identifier:   15:87:37:80:18:72:80:73:18:90:0B:C9:35:52:6D:F6:AA:D7:E4:8C
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019AE1F10AF161613D04F7742B75E7DB7DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F6E
Signing time:             Wed 03 Dec 2025 02:01:01 +0000
Manifest this update:     Wed 03 Dec 2025 02:01:01 +0000
Manifest next update:     Thu 04 Dec 2025 02:01:01 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: 57Z6hRPXcMlglLpxlR1OftKOGe1kPPtNW9kSHbN18cM=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Dec 2025 20:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e1:f1:0a:f1:61:61:3d:04:f7:74:2b:75:e7:db:7d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Dec  3 02:01:01 2025 GMT
            Not After : Dec  4 02:01:01 2025 GMT
        Subject: CN=158737801872807318900bc935526df6aad7e48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:e8:42:10:54:e3:40:5b:e6:90:5a:47:e5:
                    92:10:6c:d8:da:f1:e3:cc:6b:f7:10:d5:fb:26:ad:
                    37:ac:eb:73:37:43:78:07:33:61:b0:e1:55:34:86:
                    83:93:83:f9:a2:20:71:40:09:fc:2b:73:fa:36:8e:
                    c5:b9:3a:e6:8e:9f:48:56:fc:88:b0:20:4f:19:d0:
                    e1:10:6a:2a:b1:c5:14:74:17:1e:7b:0f:c9:b4:64:
                    9a:e3:bd:1f:86:5a:11:e3:9e:49:88:42:30:63:7c:
                    95:4f:d2:4f:31:fa:5a:38:31:d6:99:c7:b3:19:e3:
                    5c:5e:87:f3:26:ce:e1:ff:f0:ac:3b:46:90:12:d7:
                    9a:d7:ef:45:58:46:d3:76:b0:2c:cb:c4:7c:7b:4b:
                    9c:23:32:64:c4:14:46:b4:9e:00:e4:d0:22:a8:55:
                    7f:51:14:20:04:1c:b4:9b:38:ff:ea:39:2e:3f:19:
                    3a:30:79:8a:00:22:a5:7c:02:b5:f6:c9:bb:55:22:
                    33:5f:d5:68:6b:86:2d:fa:f4:c5:07:8b:df:c5:21:
                    d9:ba:be:43:d0:ed:15:ea:2e:15:a4:d3:e5:6a:a8:
                    22:f5:8b:e1:2b:ac:5a:54:45:07:37:3f:15:34:6d:
                    44:7c:dd:69:09:1e:1d:0b:34:b9:d9:39:10:d2:ee:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:87:37:80:18:72:80:73:18:90:0B:C9:35:52:6D:F6:AA:D7:E4:8C
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:20:6b:0d:f7:d1:4b:6b:a4:cf:5f:e3:de:e0:ab:15:c7:
         b5:26:e7:54:1f:cf:b1:e5:f1:fb:03:ad:62:ef:b8:85:d9:ff:
         39:e9:a0:ad:aa:8a:a6:4e:1c:c8:56:cd:39:73:c0:75:f6:f3:
         f1:d9:71:0b:6e:c5:49:dc:37:54:12:34:46:90:cf:cc:f6:6a:
         5d:bb:dc:9e:8b:52:b4:a3:1c:f8:3a:39:d0:4e:f9:30:95:13:
         0f:33:4a:3d:da:78:eb:da:30:18:6f:ef:7e:4f:0f:d9:0c:f5:
         e9:4e:41:04:1b:2b:dc:db:cd:e1:da:23:ec:a0:ba:be:d4:77:
         4a:9b:da:ff:a2:ca:fa:df:22:16:20:05:91:d5:70:fd:0e:23:
         61:a5:16:fd:f0:c8:16:91:23:4c:b6:84:20:63:4c:38:bc:52:
         1d:24:c2:00:8f:0f:04:78:e3:eb:a5:46:13:4e:90:07:ac:67:
         05:e5:1c:70:a8:6d:f3:39:d8:b0:9f:17:e5:1c:d2:cb:04:89:
         96:ff:a4:29:52:7e:a2:0f:f0:dd:97:94:80:79:d7:17:c2:dd:
         73:dd:bf:e8:52:7e:7e:a8:49:bf:7a:9a:11:1c:89:0c:94:f8:
         da:21:d6:b8:3f:c8:54:7c:f0:ae:2b:3c:14:00:2f:30:93:fe:
         6f:c8:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 05:15:40 2025 by rpki-client