This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File:                     eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier:          14HGw7j4gfNjGWVQPcaW+t0wuHqLb6T6c5mba1Be72w=
Subject key identifier:   ED:30:FA:E0:84:35:6F:65:6E:16:5A:6D:64:92:72:0A:9C:25:A5:38
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer:       /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial:       019B262DB31AEA7ECADD1A525782D03E271D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number:          03C8
Signing time:             Tue 16 Dec 2025 08:01:27 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:27 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:27 +0000
Files and hashes:         1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
                          2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: vCgZTykVXJUfmD97u85EnuKATaj3mdB3WJg33s07C/w=)
                          3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:b3:1a:ea:7e:ca:dd:1a:52:57:82:d0:3e:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
        Validity
            Not Before: Dec 16 08:01:27 2025 GMT
            Not After : Dec 17 08:01:27 2025 GMT
        Subject: CN=ed30fae084356f656e165a6d6492720a9c25a538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:f3:40:2c:b2:4e:ca:26:ec:83:79:83:43:
                    62:49:0b:b3:a4:e4:40:0a:5a:b2:19:e1:12:01:2f:
                    a3:1d:a2:12:e7:c4:41:1d:56:69:08:ba:7b:ad:b7:
                    98:a7:3d:a1:bd:fb:7c:e8:cf:b7:cf:3c:ec:7e:f9:
                    47:c9:00:ce:2e:ae:f8:ad:8b:14:74:8b:32:49:62:
                    c2:95:da:11:3e:62:64:63:3a:de:bc:88:dd:35:e2:
                    24:79:a3:f6:87:e9:81:6f:1b:a5:a5:c0:34:fa:c1:
                    fd:13:ac:44:4a:84:94:d3:26:06:34:86:3d:8f:44:
                    e1:e9:3e:21:4c:b2:4f:3a:93:89:c1:8c:58:e5:6d:
                    07:9c:9b:42:cc:0a:26:e7:b5:ed:19:c5:96:55:06:
                    9d:1f:e9:ca:b3:d3:b9:f0:9d:e5:82:82:c2:d8:f7:
                    74:ad:64:fa:58:0f:c7:d0:b2:65:59:da:96:65:da:
                    93:ee:c6:6f:7c:83:2c:62:f2:82:da:9a:86:5d:dc:
                    e4:dd:0c:b7:cc:c7:f1:07:31:aa:e9:8a:e2:05:bc:
                    d2:32:c6:e1:b8:f2:fc:c6:8f:18:36:ce:4f:6b:88:
                    53:7d:08:14:51:38:6f:a7:2c:1f:ff:de:7b:d1:4b:
                    a2:d3:d1:f2:8f:67:a6:db:90:b9:d6:2b:88:0f:03:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:30:FA:E0:84:35:6F:65:6E:16:5A:6D:64:92:72:0A:9C:25:A5:38
            X509v3 Authority Key Identifier:
                keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:66:6b:7a:d9:20:6e:ef:b6:de:27:3e:e0:48:07:6c:dd:93:
         44:fc:3e:66:ee:92:49:f5:d3:1d:a3:5d:01:6d:48:be:8e:a5:
         30:d1:a5:50:3b:89:53:45:73:de:cc:aa:d6:c4:e7:1c:35:99:
         a7:5e:f0:dc:d4:27:21:c1:fe:4d:9c:74:2d:75:f5:30:f1:d4:
         be:91:ba:37:9f:c1:f3:0c:0c:a0:46:b7:0a:9a:88:da:ea:23:
         e3:b3:66:84:10:fb:c2:62:98:bb:f9:79:b8:e4:58:d7:a1:43:
         3e:7e:70:1d:5e:ec:21:42:0a:ca:3e:1e:3a:7c:70:4d:9d:91:
         f7:7b:f5:4d:ab:cc:6d:11:31:73:06:0f:40:75:52:df:8e:44:
         af:b2:fa:8c:79:8c:46:c9:c1:8b:2d:bd:74:08:ec:91:88:53:
         b1:92:a1:0a:93:06:fe:09:e9:fa:38:25:cd:7c:c7:3d:3f:53:
         b0:68:91:ec:e2:44:65:0e:f1:85:15:90:a0:82:b7:19:6c:2f:
         90:f8:62:0b:ea:ee:79:a1:18:b5:ed:cc:93:66:35:f9:df:2a:
         32:dc:90:50:ff:b7:69:5a:9d:6b:c8:6f:26:63:0b:b0:1c:9c:
         31:d9:c6:b6:34:c9:7a:2a:f7:fb:dd:36:b0:b0:ad:88:99:42:
         0e:00:50:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:59:39 2025 by rpki-client