This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier:          1sHtVhoNufxWtzOm2EpUU2ZqNaEDjaB8pjG4aBAFQbs=
Subject key identifier:   C3:E7:93:E8:39:BD:D7:1B:27:D1:5F:6E:E8:DA:44:08:AC:CE:F9:79
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer:       /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial:       019B51BD4D4572954CAC3F07CD4018B1F1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number:          1092
Signing time:             Wed 24 Dec 2025 19:01:59 +0000
Manifest this update:     Wed 24 Dec 2025 19:01:59 +0000
Manifest next update:     Thu 25 Dec 2025 19:01:59 +0000
Files and hashes:         1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
                          2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: 5zYl0nNxPGFXPfKxqEAWJYlpH/CuEbROK3zNzkxH6KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:bd:4d:45:72:95:4c:ac:3f:07:cd:40:18:b1:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Validity
            Not Before: Dec 24 19:01:59 2025 GMT
            Not After : Dec 25 19:01:59 2025 GMT
        Subject: CN=c3e793e839bdd71b27d15f6ee8da4408accef979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:37:89:6d:bc:31:15:13:fa:dc:11:3c:0b:
                    22:62:f0:a0:d3:ff:e8:ed:08:64:09:f0:64:c9:58:
                    f5:3d:ea:65:32:74:36:32:77:b7:60:aa:c7:fe:ea:
                    fa:27:e7:44:fd:58:78:5f:bc:b9:3f:aa:72:a8:c8:
                    ee:ae:ae:c5:a6:91:bd:f2:52:d4:2a:a3:62:fd:15:
                    f2:cd:81:1f:be:e8:d8:bd:e1:a9:8d:f3:2f:a0:a0:
                    f4:60:55:dc:4b:15:ab:c4:85:c5:df:e4:9c:5d:7c:
                    dc:bc:39:aa:a6:95:67:bf:7b:44:7e:fe:d2:9e:66:
                    e3:06:86:75:9d:db:e8:11:60:6d:e0:74:87:3b:52:
                    7d:a1:ed:f8:2d:2f:59:db:06:3a:7c:7e:44:7b:3c:
                    2f:c2:bc:79:94:0d:bc:74:4c:47:fa:b2:fd:76:c9:
                    d3:ab:40:40:1c:a5:11:16:9f:de:32:2a:e3:87:b5:
                    8d:e2:d9:e6:9c:d6:d2:17:e4:e7:93:05:27:8c:a9:
                    8d:25:2d:ee:0a:5e:aa:c3:93:6b:f3:8b:1b:e0:6e:
                    5c:31:b9:6d:d5:9a:59:0c:46:1f:a9:17:e6:fd:b7:
                    c5:ca:d0:85:e7:1b:35:09:f5:db:b8:18:dd:39:81:
                    e5:07:9d:a0:8c:ee:f1:a7:d0:a6:eb:8e:8e:eb:92:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E7:93:E8:39:BD:D7:1B:27:D1:5F:6E:E8:DA:44:08:AC:CE:F9:79
            X509v3 Authority Key Identifier:
                keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:35:10:98:c4:da:53:73:ce:58:2e:8e:11:75:8a:43:4e:
         3d:f5:15:73:ab:f0:f8:40:5f:43:f0:ef:9a:75:ee:a5:98:c0:
         10:7f:31:61:dc:23:bd:92:6b:06:91:ee:99:9e:bf:91:2c:c6:
         7d:65:24:ae:68:0e:4b:a5:bc:8e:bf:a9:58:9f:3f:8f:83:81:
         6b:c0:91:1f:2c:f1:ee:1a:4b:64:03:18:07:24:88:88:31:01:
         58:d1:52:6d:9e:5c:19:ea:ac:67:82:e8:9e:8c:0b:39:f1:f6:
         76:6c:74:f5:86:30:bb:53:d5:56:c4:e4:5c:cb:8f:00:66:e0:
         ef:12:b0:ab:de:26:9f:a8:5f:46:06:b3:b4:f2:ed:1e:72:85:
         c7:14:f4:67:de:53:1b:b4:78:bd:7b:f8:25:01:4d:e3:e4:b6:
         0f:63:ef:c4:a9:ca:46:56:b4:ed:29:7d:2b:f3:f1:f0:0e:0d:
         19:ba:26:12:b0:4f:d2:cd:0c:1d:66:c0:58:2a:65:29:28:1f:
         21:af:11:7c:77:61:05:e9:5e:b4:18:24:83:3a:2d:f8:a2:72:
         a4:56:b9:f3:0b:df:32:a2:25:2c:b7:1a:2a:2b:65:7f:5d:a4:
         ea:4c:ff:38:3a:6d:47:de:f8:34:7c:cd:54:0d:80:0e:93:55:
         49:a2:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:36:33 2025 by rpki-client