This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          4EVn1UQrAcvHFmCHya16fwATgDqrUUAO5T2fEbIQSJc=
Subject key identifier:   45:C6:D3:7E:C9:10:DA:71:0B:64:14:5F:83:93:CF:C8:43:EC:C8:27
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019B3EDA9F3F27246968A99D74BBC1CAB217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0EAD
Signing time:             Sun 21 Dec 2025 03:01:13 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:13 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:13 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: J/5DTpNpMDG3EfBobVYoQtMyYsYQlP7oYu5cxRNB1SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:9f:3f:27:24:69:68:a9:9d:74:bb:c1:ca:b2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Dec 21 03:01:13 2025 GMT
            Not After : Dec 22 03:01:13 2025 GMT
        Subject: CN=45c6d37ec910da710b64145f8393cfc843ecc827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:64:c6:9b:3b:ea:fa:e0:42:2f:d4:bc:eb:
                    db:67:6b:d8:39:a9:19:81:22:e7:ce:66:fd:dc:f7:
                    19:ac:59:5f:a0:cb:bc:de:76:3f:9d:1d:bc:4a:34:
                    cb:cf:57:b6:f0:aa:cb:7e:da:9f:d1:d0:45:f2:76:
                    c6:f0:b3:3c:12:90:91:89:98:f5:51:70:73:c9:98:
                    40:66:41:17:e5:2e:b5:cd:71:fb:ba:58:23:25:b9:
                    67:2b:bb:6a:bc:c3:a7:1e:02:ff:f8:91:48:45:01:
                    ca:63:e0:4b:b3:7c:63:d7:b4:0d:07:1e:af:61:de:
                    a8:c7:01:e8:b0:e2:ad:14:46:a5:0b:f2:c3:85:fe:
                    53:96:32:53:93:f9:b0:a0:41:99:32:dc:a3:47:a1:
                    d6:1b:7b:dd:e9:ad:4b:4b:28:c5:c8:a1:d7:c7:6f:
                    65:7b:5b:1d:98:74:c6:c5:5b:88:da:1d:5b:42:09:
                    1b:86:a6:e5:7a:0d:fc:8b:a1:50:12:04:64:64:ac:
                    76:34:08:1f:5a:9e:83:3d:cf:78:4e:b1:4f:2b:82:
                    3a:7b:c2:ea:3a:ca:6e:41:f0:7b:d1:56:7a:52:a8:
                    82:31:59:2c:1b:cc:3d:c3:b3:4a:36:bb:0d:ce:bc:
                    49:0e:f1:cb:dd:a9:08:ac:4f:47:20:cc:c3:ad:5e:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C6:D3:7E:C9:10:DA:71:0B:64:14:5F:83:93:CF:C8:43:EC:C8:27
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:58:f2:d0:95:ec:24:b1:70:a7:f8:e6:80:84:d7:ef:95:7d:
         24:86:19:0a:75:de:37:d6:f3:60:4b:a7:96:58:6d:35:13:52:
         8c:dc:f5:54:6f:ad:63:0f:f7:05:12:7c:98:cd:a9:01:99:84:
         19:1e:cd:55:c9:cf:94:e3:67:8b:03:0f:3d:12:50:5a:a0:16:
         42:d6:68:93:09:e1:93:1d:b1:11:57:31:f9:b7:75:76:2b:f2:
         db:45:c9:56:b9:af:90:37:b7:92:e0:65:4d:a0:5a:d7:78:0c:
         4c:df:6a:6b:f8:7c:4a:5f:11:37:ba:bf:28:f7:a4:53:ce:eb:
         bf:51:e1:7b:38:03:b8:22:55:68:45:01:69:b0:f7:1d:97:35:
         31:5f:1c:10:91:8a:f6:d0:47:36:a4:97:f1:9a:6d:05:2f:1a:
         ad:9f:93:08:58:cf:cb:c2:31:95:f2:79:60:d8:71:9b:16:fe:
         77:d5:13:2c:33:ce:cc:56:6e:4f:3f:d6:c6:a1:cf:eb:a2:14:
         d9:18:b4:a5:bc:03:d2:46:a9:96:2b:ad:b0:d3:a2:61:cd:44:
         e8:2f:2c:9d:6c:29:f5:c1:3a:ee:c5:18:58:b9:66:88:18:91:
         a8:01:62:4b:62:bb:42:f2:83:5a:d0:99:72:72:8f:74:2e:8f:
         ea:a0:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:58:45 2025 by rpki-client