This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          6VR1HOfRMzXABY8H4UsFpafjUNuhVNEd/PSDGA7I61c=
Subject key identifier:   32:B7:91:6E:1E:BE:BD:53:56:D8:CC:AF:C3:F6:62:49:0C:E4:CF:A9
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019B2399DF08BAA6B37DA1EDAA7608E0E943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F90
Signing time:             Mon 15 Dec 2025 20:00:45 +0000
Manifest this update:     Mon 15 Dec 2025 20:00:45 +0000
Manifest next update:     Tue 16 Dec 2025 20:00:45 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: zbSyze123mm83fwBssIf9dcNDI9kzNFYJK3KZYNJ0Pg=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:99:df:08:ba:a6:b3:7d:a1:ed:aa:76:08:e0:e9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Dec 15 20:00:45 2025 GMT
            Not After : Dec 16 20:00:45 2025 GMT
        Subject: CN=32b7916e1ebebd5356d8ccafc3f662490ce4cfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:c9:11:4d:e2:78:51:e9:a7:cd:5e:b6:9d:
                    fa:16:1a:47:82:4b:f0:de:58:18:6e:d8:b4:43:ee:
                    dd:38:6c:73:c9:0d:02:42:58:78:a7:d6:8c:a8:ef:
                    dc:b3:ab:37:c1:b5:62:2d:c6:18:9a:a4:d5:76:3d:
                    0b:c2:54:91:cb:d5:80:06:f0:1d:9c:55:da:d8:79:
                    af:3f:6c:6d:cd:c7:52:4e:0c:4d:f9:7b:47:76:67:
                    a7:80:1b:3d:f0:4b:41:4d:81:1c:c6:c8:66:cd:ec:
                    f8:f5:73:c3:34:89:b4:80:4d:b4:ac:e8:37:2d:ab:
                    aa:f2:c6:18:b0:f3:25:59:e0:ae:78:1c:19:4a:78:
                    27:15:0d:fd:cd:47:48:fe:24:e3:0b:da:f3:20:fa:
                    c2:fc:d3:2f:91:d3:77:66:80:72:3a:68:5c:cd:39:
                    dd:5f:51:56:bb:09:ff:cf:9d:4d:59:0a:99:56:41:
                    56:7b:28:3d:bd:f9:83:25:01:2e:f8:13:0a:0c:ce:
                    b6:c0:e9:05:d3:f1:f9:2f:da:e5:95:e1:d6:4a:8f:
                    42:10:da:8a:9f:70:7e:56:d6:0d:0a:46:ea:86:eb:
                    b4:0a:5b:ed:cc:28:d7:2e:e3:c7:e8:74:29:6f:91:
                    44:b2:28:47:b8:47:b9:bd:ce:6d:a4:14:cd:a7:72:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B7:91:6E:1E:BE:BD:53:56:D8:CC:AF:C3:F6:62:49:0C:E4:CF:A9
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:00:3f:d3:d6:9d:05:20:39:f1:71:6d:da:e1:21:55:0a:
         3f:d8:bb:20:29:0e:60:f3:d4:70:08:fe:45:d4:6c:dc:a4:30:
         5c:da:e9:fe:9b:77:27:19:51:c7:45:03:7f:04:b3:fc:f5:0f:
         49:74:15:11:56:31:64:fb:e9:99:7e:c0:64:25:6e:9a:ba:11:
         b9:16:cc:a4:9f:9e:9e:0c:eb:07:df:2c:14:03:39:da:13:24:
         dd:b6:4f:b1:06:39:25:b6:a9:a6:c9:28:15:49:4f:2d:09:b7:
         d0:e2:e1:a4:7a:62:8d:a8:78:10:a9:e3:83:2b:55:43:b4:80:
         be:5d:66:f9:c6:b5:e8:32:f8:de:7a:0c:b2:7b:46:8b:49:00:
         71:b8:61:16:ac:4b:48:4d:03:7d:60:4a:3a:a7:18:02:83:86:
         17:54:ec:fa:af:cf:10:b9:bf:ef:cc:13:21:70:06:a6:af:f1:
         e2:b6:93:4c:a2:cc:16:9f:d6:98:78:44:c7:61:68:26:64:a3:
         db:d9:74:d8:a0:ed:67:ca:09:13:53:18:23:ba:aa:46:d8:52:
         4a:34:4a:a0:89:2e:c7:7f:30:9e:b2:b9:39:c1:c8:1e:83:ed:
         42:26:09:99:63:e0:32:8c:9a:d0:1c:df:b2:24:32:74:73:5e:
         8c:59:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:21:52 2025 by rpki-client