This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          cDv0cTigb5otAa9z7fzD0kdktbYIvMOtHh0Lqvfsn10=
Subject key identifier:   1D:AE:BD:B7:49:3D:91:56:1D:BB:04:ED:6C:D4:04:38:C6:F4:26:38
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       019B19BC7E7E3B5D32366E6349D4665443DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          1799
Signing time:             Sat 13 Dec 2025 22:02:22 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:22 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:22 +0000
Files and hashes:         1: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=)
                          2: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=)
                          3: AuIXsACFZFXiRbUNGuqesbMnYNk.roa (hash: AtCFXdHEG1WMWeYjbN29zoI3CDK+hXSx8POzE7WNroc=)
                          4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=)
                          5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=)
                          6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=)
                          7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=)
                          8: ZVJfIWSCZIVSTo9PXiEHKhrJCaM.roa (hash: REntsWwwRsVHSdpCDEerInchIORTXEiS2eQnOBf/kfw=)
                          9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: w1IVdmt2/ASBcV9BZjjFVsYHBj1fEVUC7FmF4ZaUriA=)
                          10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=)
                          11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=)
                          12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:7e:7e:3b:5d:32:36:6e:63:49:d4:66:54:43:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Dec 13 22:02:22 2025 GMT
            Not After : Dec 14 22:02:22 2025 GMT
        Subject: CN=1daebdb7493d91561dbb04ed6cd40438c6f42638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:49:fd:f4:66:9d:dc:94:f8:cc:d7:da:98:
                    91:f8:5f:d3:64:e0:92:d0:f9:e0:b7:b9:b0:c5:9d:
                    ca:c3:4c:3a:c7:eb:b8:ab:cc:14:6f:a8:f2:60:4a:
                    9f:98:e7:c4:d5:40:98:ab:a2:b4:22:2f:39:4f:d4:
                    e7:5b:1d:47:16:ea:23:f0:f9:fe:f3:c3:c2:b9:1d:
                    8c:62:64:65:69:2d:2b:4e:e0:72:52:8f:a9:57:e5:
                    ec:dd:50:6d:fd:41:b9:ed:22:c4:39:d0:7a:95:0a:
                    0b:fc:d8:d1:6c:62:2c:cc:0e:1b:b8:1d:a8:5a:5e:
                    42:76:97:f0:f1:47:de:55:26:d8:ca:5d:d0:d5:2f:
                    fc:9c:7b:09:f9:c8:7e:91:32:93:fd:f9:80:f6:02:
                    2e:7a:2d:a4:f3:54:9a:dd:44:87:ba:28:03:f6:ff:
                    38:a7:e4:72:53:d6:ab:22:88:c5:c8:c2:a4:e6:60:
                    1d:a5:01:fc:50:09:3e:ab:7a:aa:e3:cc:2d:e9:95:
                    8a:3c:bd:b2:10:a7:95:5d:9a:86:db:e7:02:c4:8a:
                    87:c4:ac:08:d0:b5:2a:a7:d5:db:7b:ce:43:14:d4:
                    ea:6d:d5:38:85:f6:15:70:e9:ac:57:75:69:68:a4:
                    8c:95:13:12:6c:cb:9c:3a:e6:b2:80:11:2b:80:12:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:BD:B7:49:3D:91:56:1D:BB:04:ED:6C:D4:04:38:C6:F4:26:38
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:6b:7c:1d:a8:dd:7d:f1:e1:5b:30:3e:3c:ff:ce:8d:58:
         9f:f7:df:c0:82:c9:cc:e3:4c:c9:4d:f1:88:b0:29:be:40:c7:
         b3:bf:3a:a8:ff:bc:ef:dd:19:61:78:f9:67:de:53:85:13:d8:
         53:87:b1:f9:c4:4f:e2:8f:a4:be:b7:73:4b:37:21:25:c7:6d:
         2a:f1:a0:af:d2:23:83:8e:a4:78:7d:98:e0:47:af:db:32:9b:
         f1:6f:ab:20:f1:f9:5c:2f:61:d2:89:72:c0:2b:c3:8a:63:7d:
         cc:73:89:ce:46:46:ef:65:09:d1:e8:06:80:18:fb:c6:28:bb:
         d4:f1:96:27:55:0c:21:2f:a6:d2:5e:af:7d:88:9a:8e:7b:76:
         e5:e1:67:61:cd:3d:d9:f3:18:c7:7f:8b:cc:65:35:11:56:3a:
         99:6e:7e:e1:48:54:e9:d4:73:26:65:5d:65:7f:7f:35:bf:20:
         f7:92:b3:25:34:45:ae:98:ee:01:f2:dd:3d:e5:f8:5b:ff:83:
         be:59:0f:68:b1:bb:87:50:c1:08:a3:15:4d:cb:42:ba:dd:6a:
         66:7e:ab:9a:1d:10:f6:8e:d1:e2:5a:50:ef:1c:3d:4b:f9:13:
         5a:ee:fc:29:b2:a0:9e:2e:5e:64:2e:44:f9:a7:8d:72:96:f7:
         13:8d:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 05:16:15 2025 by rpki-client