This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File:                     eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier:          Dkot8VwL/8qJJ0GKh5GTJXef4zfpECpttcjSW7f+O6U=
Subject key identifier:   F1:19:33:BE:2C:7A:92:70:C5:15:0E:81:30:E5:2A:9B:8E:04:DC:7B
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer:       /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial:       019B495DA9F788BAD694E9A6A4FD7976BB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number:          10B7
Signing time:             Tue 23 Dec 2025 04:00:33 +0000
Manifest this update:     Tue 23 Dec 2025 04:00:33 +0000
Manifest next update:     Wed 24 Dec 2025 04:00:33 +0000
Files and hashes:         1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
                          2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: pqa6wZzu9LMeU1uj3kr0eeC+ReDIBgpbe8nTc811Tw0=)
                          3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:5d:a9:f7:88:ba:d6:94:e9:a6:a4:fd:79:76:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795013346c8d8f23e0128d306997980237db2374
        Validity
            Not Before: Dec 23 04:00:33 2025 GMT
            Not After : Dec 24 04:00:33 2025 GMT
        Subject: CN=f11933be2c7a9270c5150e8130e52a9b8e04dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:f6:6f:d6:f0:00:59:a1:9d:e7:0e:65:4c:
                    b2:9d:7f:5b:11:3c:42:84:b2:5f:43:74:22:1a:fd:
                    93:4b:bf:a2:5a:f4:ba:45:d0:b3:07:e5:a0:da:5c:
                    44:3c:d2:e0:bd:73:66:cf:6e:a4:28:19:dc:4e:36:
                    ef:fe:77:5b:3e:7b:a6:3d:78:f1:36:17:00:31:a3:
                    a6:9d:b1:a0:3a:a2:9e:7e:5e:72:36:e1:0d:64:a2:
                    88:84:1a:91:a6:2f:19:bc:09:27:8d:89:6e:fe:91:
                    44:cf:39:5b:ae:6b:fc:c0:dd:13:c2:56:e4:7a:03:
                    3c:23:52:b8:7c:fc:4e:0d:c1:44:b8:98:c1:f4:7f:
                    05:70:8b:fa:ca:10:b6:10:66:be:3d:38:b5:fe:05:
                    eb:93:1c:8a:32:d9:c9:76:e8:f6:59:9e:39:bc:da:
                    57:20:d6:66:25:51:46:a4:8d:d6:81:35:d2:03:51:
                    f0:9e:44:dd:dd:98:e8:0d:b8:61:e0:59:05:63:4b:
                    f1:41:53:61:ce:ec:be:46:2d:26:90:f8:a8:66:96:
                    7c:20:a8:9a:9f:dc:a4:50:09:21:68:f1:6c:38:92:
                    ca:2e:50:87:0c:42:61:7c:7c:c1:e2:94:2c:c4:e2:
                    de:1e:c1:ac:c7:86:5c:59:03:76:30:72:91:5a:3e:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:19:33:BE:2C:7A:92:70:C5:15:0E:81:30:E5:2A:9B:8E:04:DC:7B
            X509v3 Authority Key Identifier:
                keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:1f:5f:1d:63:53:e2:70:96:41:b3:0d:ff:7d:77:79:33:
         47:c0:fa:b7:41:88:fc:64:ca:f8:18:22:6f:a3:83:18:c6:f0:
         9d:c8:4c:04:a8:2b:06:ad:62:4a:5e:ff:70:b7:d4:de:88:cd:
         f2:6d:ba:f4:b1:8b:f8:1f:ae:67:29:47:13:0c:13:8b:fa:0f:
         d8:55:68:c6:f9:b8:33:c8:ec:87:f2:18:a4:02:7f:0c:ac:3b:
         4a:16:a5:6d:a5:21:91:86:b2:62:78:5e:39:9a:36:65:b7:39:
         30:6a:6a:d3:65:7f:8b:77:0b:92:c0:41:de:8f:d9:73:b4:df:
         ca:43:b7:cf:6f:ea:2c:94:59:52:29:af:4f:e3:61:a7:20:7d:
         76:76:fd:8c:a2:f1:3b:2a:33:6c:b8:3c:83:09:b4:ea:99:e9:
         d5:9f:f1:94:01:14:b7:3d:0e:1d:e3:3f:ab:20:98:7d:f5:50:
         f7:3d:48:b7:eb:b5:53:84:3b:7f:f1:4a:9b:03:1f:2e:c6:60:
         de:33:f1:db:9a:b3:b2:4d:89:13:28:b1:4d:53:fc:37:ea:40:
         18:35:17:0c:10:a1:19:4d:d3:40:ff:49:90:4a:c9:df:e5:34:
         d6:e5:f7:da:4a:aa:b1:c4:28:72:06:d5:28:57:82:68:67:2f:
         7e:63:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:33:32 2025 by rpki-client