This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File:                     eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier:          rT3QyxrFhGxeAzplr6rP1e6VgmAMPWxlIE4L26bU6ZY=
Subject key identifier:   18:D9:A3:A2:41:90:8E:41:10:F9:BE:61:E5:48:95:F4:87:81:E8:76
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer:       /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial:       019B35A04B7BC971CAC78EDFB4C2FE2EAEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number:          1146
Signing time:             Fri 19 Dec 2025 08:00:56 +0000
Manifest this update:     Fri 19 Dec 2025 08:00:56 +0000
Manifest next update:     Sat 20 Dec 2025 08:00:56 +0000
Files and hashes:         1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
                          2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
                          3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: J4z7JQwAmsX3c8zWt51mw/Pc0DJYq6eB59DYSdpILJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:4b:7b:c9:71:ca:c7:8e:df:b4:c2:fe:2e:ae:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
        Validity
            Not Before: Dec 19 08:00:56 2025 GMT
            Not After : Dec 20 08:00:56 2025 GMT
        Subject: CN=18d9a3a241908e4110f9be61e54895f48781e876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:5e:e7:0d:9e:77:2d:cd:cc:59:74:dd:f0:
                    9d:44:10:67:4b:92:3d:2d:58:af:86:88:ee:01:2e:
                    0d:90:d1:6c:b9:63:e1:1b:ba:6f:54:7f:e4:8c:e0:
                    09:2a:62:25:78:37:59:83:29:3b:ca:66:e7:e4:54:
                    a8:7d:5f:d2:d3:7a:bd:a6:32:73:ff:c0:df:18:68:
                    c3:fc:92:5c:dd:d9:44:13:3b:82:b0:b8:98:08:15:
                    ab:3e:6c:fa:de:57:8e:fa:24:c8:eb:a4:8b:e2:cb:
                    3a:c5:ad:bf:11:76:ea:c0:2a:c4:29:a3:1a:da:77:
                    36:60:b8:9c:13:be:fd:ce:66:ea:d2:c8:00:eb:3b:
                    25:aa:d9:c4:08:7f:58:3e:5d:cc:4a:f4:65:2b:f1:
                    d0:ba:8b:5f:7f:4f:32:17:fe:b3:20:4a:51:50:52:
                    30:e9:50:1a:c2:96:5b:f7:89:46:c4:c3:d8:b0:47:
                    a8:00:a3:44:da:e8:22:ca:9e:ae:de:af:5a:c2:3c:
                    e6:8e:ec:14:9d:85:c1:94:ba:63:34:0c:86:fd:12:
                    64:9c:94:4a:8c:17:6c:df:45:34:1c:04:f0:4f:80:
                    48:0c:76:d2:55:0c:c7:8d:35:b0:6e:33:63:e1:ff:
                    33:30:8b:41:7f:fb:e9:0e:e5:3c:f1:ef:cb:14:3c:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D9:A3:A2:41:90:8E:41:10:F9:BE:61:E5:48:95:F4:87:81:E8:76
            X509v3 Authority Key Identifier:
                keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:a0:f5:b4:46:87:64:c8:03:dd:6e:9f:eb:bd:bc:63:8e:
         07:23:35:4e:af:45:1b:16:b0:77:75:45:5d:54:c0:c5:b5:de:
         2b:08:0a:1b:99:d9:49:91:84:df:b5:a0:c0:5e:8e:95:1b:48:
         0e:3b:c4:08:17:0b:0b:3c:1e:39:cf:52:a5:e4:94:d7:d8:62:
         ea:c1:b2:3f:7d:b2:08:68:6a:66:5e:ef:15:ab:30:bd:a2:89:
         fa:71:60:d5:40:8b:11:6f:37:32:77:87:9c:ed:a3:2d:09:78:
         4c:1d:99:d9:bc:ac:90:aa:0f:95:88:29:87:65:8e:1d:80:f8:
         2a:4c:72:94:6c:fd:70:b1:54:15:d8:52:fa:6a:c8:48:ec:aa:
         67:f4:e2:bd:b4:bc:21:44:ce:58:7a:1a:fa:d2:66:8b:65:11:
         e2:e0:0f:dd:4b:a1:44:f6:75:3e:eb:c8:60:b3:06:85:a6:86:
         ff:a1:53:25:68:9b:a7:77:58:81:11:34:1f:34:a4:67:91:63:
         fb:d3:23:ad:57:d9:3e:16:d5:f4:96:cf:90:5d:de:41:32:4b:
         28:6a:84:49:68:9a:50:15:22:0d:c7:a3:c5:f3:27:d6:b4:ac:
         01:7e:37:b3:79:81:f7:64:b6:d3:24:a6:9a:6c:48:33:f5:06:
         fa:f7:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:56:55 2025 by rpki-client