This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          AdbLlwwK+kin8/vbaSR7wTEVw7B5c0enwtF99zVJeeo=
Subject key identifier:   43:52:DF:C0:3A:CD:96:F7:90:03:32:4B:1D:82:33:80:3A:53:7D:FF
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019AA800FFDFD933DD1198AAA9569FDAF8D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0F50
Signing time:             Fri 21 Nov 2025 20:00:29 +0000
Manifest this update:     Fri 21 Nov 2025 20:00:29 +0000
Manifest next update:     Sat 22 Nov 2025 20:00:29 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: pISJ+LGa48HGiMqj6i+j+nVVbhNiLRDxEHyKQR8WQ+E=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Nov 2025 16:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a8:00:ff:df:d9:33:dd:11:98:aa:a9:56:9f:da:f8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Nov 21 20:00:29 2025 GMT
            Not After : Nov 22 20:00:29 2025 GMT
        Subject: CN=4352dfc03acd96f79003324b1d8233803a537dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:a3:4e:27:59:5c:51:ef:95:a1:12:31:3f:
                    ef:d1:d0:82:17:62:4c:5c:72:a0:01:4d:3d:77:c6:
                    45:72:14:88:da:24:04:22:0e:16:10:9c:13:63:72:
                    d1:b1:54:f6:9c:58:ec:6c:1d:2b:dc:24:73:44:2c:
                    9d:76:29:fa:92:27:31:b7:11:7e:bc:83:57:67:83:
                    b8:db:2a:68:54:46:57:f8:c8:b1:fd:1d:78:d2:63:
                    b6:65:79:a1:7a:3c:5c:70:24:c6:e2:3d:20:b8:46:
                    e0:c5:fc:15:2f:37:ed:48:ef:bc:e9:13:6c:e0:ab:
                    e5:38:a0:76:4b:73:3a:33:ab:9e:50:28:ce:2a:94:
                    4e:41:34:d9:20:e4:be:d5:1d:32:c2:32:e5:c2:86:
                    fe:05:ba:a1:ed:bb:5c:df:de:15:38:ee:55:75:57:
                    0f:7f:9c:86:37:94:cb:d7:44:8d:a5:d8:19:96:3a:
                    7c:3c:20:a7:2c:84:4f:90:b9:6a:10:bc:78:27:18:
                    fd:77:cf:eb:0e:10:8c:a9:cd:84:cf:90:41:30:63:
                    55:f1:d1:68:6a:62:ec:86:0c:dc:b8:fb:36:db:eb:
                    3d:61:bf:8e:a8:4e:a9:57:bd:3f:7d:07:41:af:01:
                    aa:8c:30:88:46:cf:95:4a:87:d7:e5:23:1c:14:6a:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:52:DF:C0:3A:CD:96:F7:90:03:32:4B:1D:82:33:80:3A:53:7D:FF
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7d:be:65:cc:b1:c3:91:4d:b7:dd:87:5d:d2:a6:59:ee:30:
         b2:47:12:ed:6d:a1:85:f1:db:0d:06:82:06:f0:b0:75:af:88:
         24:a4:e1:80:67:4c:5f:56:ad:01:f7:2b:9e:c2:9b:56:ed:ba:
         cd:2b:7d:61:a2:9b:a0:4f:89:b1:ac:38:90:cc:e5:1c:3e:47:
         41:8e:a3:7b:98:de:42:ba:30:47:2d:41:8e:97:4e:b3:d2:85:
         5e:7b:1a:61:5a:16:6f:9d:54:a3:3c:97:45:57:82:fa:98:19:
         a5:9b:9f:4f:bb:a5:c6:00:bb:29:22:d7:8f:e0:09:9f:c7:8f:
         8e:0c:50:56:de:ac:90:bc:e6:56:04:58:d0:f3:57:71:ad:f6:
         30:2c:fd:d1:79:bf:6f:1a:4e:5a:f7:1f:8c:1e:ac:c9:b2:ed:
         de:00:5e:93:46:89:75:aa:c1:2b:1f:8e:5b:f3:85:6c:67:f6:
         e6:4a:c9:a6:df:67:98:37:b5:7e:d6:10:7a:38:f5:54:b2:9b:
         5b:9d:41:4b:0b:94:ca:2a:ad:c4:ba:52:52:dc:7f:6c:aa:db:
         e3:8d:fc:cd:7f:fd:6d:8d:60:8d:5d:c8:4d:c8:ee:5f:4d:2e:
         43:1b:f2:4a:c5:8a:59:71:3c:a9:a0:1c:93:e5:9f:1e:e4:7b:
         7f:67:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 23:39:33 2025 by rpki-client