This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File:                     edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier:          yvz0oTDR8JKq11AZ1VNPjxVvn0t2hcmuCmxGN8PSRM8=
Subject key identifier:   AE:1F:16:06:12:EA:6B:B0:C0:CA:06:EC:94:CC:32:BA:FC:33:D3:0C
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer:       /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial:       019B243EA847651E72D32F550C938E00515A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number:          129D
Signing time:             Mon 15 Dec 2025 23:00:44 +0000
Manifest this update:     Mon 15 Dec 2025 23:00:44 +0000
Manifest next update:     Tue 16 Dec 2025 23:00:44 +0000
Files and hashes:         1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
                          2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: gI2FMZmArD4mCzpOwRTReAmgVoiWmRyCiI9r+vnm9h4=)
                          3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:3e:a8:47:65:1e:72:d3:2f:55:0c:93:8e:00:51:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
        Validity
            Not Before: Dec 15 23:00:44 2025 GMT
            Not After : Dec 16 23:00:44 2025 GMT
        Subject: CN=ae1f160612ea6bb0c0ca06ec94cc32bafc33d30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:d6:73:d7:7b:fe:94:2d:4e:f9:95:99:0d:
                    7d:2a:07:d3:a7:8e:5b:db:78:24:cc:2d:58:12:cd:
                    f7:1e:f9:df:78:06:75:bc:62:46:ce:91:81:64:dc:
                    64:ed:44:dc:ba:82:82:a3:84:b5:5c:02:b2:ef:fa:
                    01:59:ac:5a:53:4d:08:17:6d:fb:b4:81:eb:80:b5:
                    70:77:fd:a7:92:89:6a:e3:bd:15:10:50:bb:0e:7f:
                    e4:b0:13:a6:56:8b:16:4d:f2:3f:45:bb:ae:c1:dd:
                    6a:88:a8:87:8e:b1:23:6f:b4:37:03:61:44:d7:d2:
                    ed:ed:67:70:0a:e7:64:d8:7c:17:54:ab:f9:21:56:
                    c5:b2:33:40:2e:21:c5:27:f2:71:17:b2:ff:7d:12:
                    f6:47:38:83:f2:c7:0b:0f:4d:8f:2a:ed:35:4a:38:
                    7b:ef:87:b0:b3:8c:76:e3:f4:6a:66:8c:1d:20:2d:
                    53:2d:14:bf:fc:7d:8c:be:06:59:13:34:38:f0:06:
                    59:d2:52:ad:28:7d:55:1a:11:86:be:8e:c5:28:22:
                    e8:09:a3:bc:8f:a1:23:0e:c8:5d:3b:4f:f3:bb:48:
                    a7:19:ea:86:c8:9b:be:7f:f9:0d:c9:4e:a1:7b:f4:
                    8d:3c:22:ad:ed:bf:7e:67:0d:e5:a7:7e:3c:76:7a:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:16:06:12:EA:6B:B0:C0:CA:06:EC:94:CC:32:BA:FC:33:D3:0C
            X509v3 Authority Key Identifier:
                keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:d6:19:17:64:e2:63:72:53:64:10:6f:bc:15:e7:c3:a6:
         21:84:d5:55:59:dc:50:2f:6c:74:60:73:5d:04:8a:e6:96:35:
         19:83:75:7f:3e:5f:86:b1:1f:9f:70:b9:6d:d3:9e:50:e4:c1:
         c6:fb:9c:8a:b9:ba:9a:76:4f:3a:0c:7d:cd:80:87:ae:3a:6d:
         96:00:a8:5a:7e:b2:a7:dc:9c:36:c5:48:9b:8b:93:98:0a:a3:
         4c:38:6d:b3:60:fe:36:5e:94:47:23:89:87:76:02:69:3c:fc:
         40:8b:9b:29:5e:61:fb:a2:53:41:a0:e2:ac:ca:42:d2:bf:63:
         2b:d5:68:a1:f4:9a:ae:50:b6:c0:e4:26:99:80:ef:3e:ac:41:
         44:6d:c6:6b:55:8e:f9:67:88:81:ce:f6:74:d3:9a:be:21:ff:
         b8:37:c9:ad:53:7e:44:81:80:0e:0d:18:95:ba:0e:c4:61:30:
         ff:e0:60:25:b9:ff:36:9b:4e:ae:51:42:1a:a9:82:7b:aa:0b:
         2f:81:08:15:04:ea:0a:e4:83:ce:c6:d2:e8:21:ac:55:7c:bc:
         ca:f5:20:8f:8d:71:99:fc:c5:ed:5d:c8:11:41:c8:ac:08:d7:
         df:0c:dc:c1:98:d4:17:c4:7d:b1:18:d6:33:3f:ed:b7:be:ae:
         08:b9:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 03:47:38 2025 by rpki-client