This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          WAOka9BJqEaecHj3ZZlDbw7NVix0k/U6NzKBADPdTeg=
Subject key identifier:   98:45:4B:D2:61:82:BD:89:C1:29:C2:FC:BC:BF:1F:91:A1:8C:16:E5
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       019B37212135C37DCFAE5150E7A33BA238BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          178F
Signing time:             Fri 19 Dec 2025 15:01:16 +0000
Manifest this update:     Fri 19 Dec 2025 15:01:16 +0000
Manifest next update:     Sat 20 Dec 2025 15:01:16 +0000
Files and hashes:         1: 5R1iDQt_jpAs4gRTjYIiTCijoFA.roa (hash: mmkAQLGE8LmgwjT34GOkgBAsVgXVqkU9ibiVLrTA0k8=)
                          2: 7Faq0zePkBZuO_C0WOkycepFjpc.roa (hash: a+Cb4RggiDeAr7Egu5HSD0OTK4+4eHJXr3k92kT+Pic=)
                          3: 7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa (hash: SFMUBbdICCjMdnT7DNHSEy0Mk5ykN9qWuGlT6EQECgU=)
                          4: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: eBtTyAamqX3skIxfZgUTYu9OAxMDomUt6KIRdgXSOio=)
                          5: MeH4-k2OFjGN557s0Yu0tYWPxmg.roa (hash: MOhIHpA/NwdkOdOgWKuaCMarKZ7JqUMahtGZ4rfniHg=)
                          6: b15ntJ7HPmGOS4jgF4tCkINYtWM.roa (hash: COLo/VUjwKkooWaLaizaYaP2W19lhe7zL+POsW4XWdk=)
                          7: fzsp7PHSzmWVIn8yVOXQa_7FmKQ.roa (hash: SkYI08EYzD7GCVvQI07IBr+EWXXpCIcicBxWwCpdN4s=)
                          8: mpkBzz7TW-l1lBrQvBdbHkUYL5Y.roa (hash: DwjUpO/wsb0y0xDCKmYSdLKwmlXvcw+wJMGNkKGcaNs=)
                          9: yNFBmYXB0TSeMX21aqfi5zgqFSM.roa (hash: v5WVhwm3HDfxqbcn6pfOpvMvcRHTwMwjG/288XsWT0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:21:21:35:c3:7d:cf:ae:51:50:e7:a3:3b:a2:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Dec 19 15:01:16 2025 GMT
            Not After : Dec 20 15:01:16 2025 GMT
        Subject: CN=98454bd26182bd89c129c2fcbcbf1f91a18c16e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:20:1d:0d:5e:25:67:c5:83:5d:bc:86:de:
                    06:7d:ec:0d:f6:8b:a7:1f:f3:a3:21:61:e5:03:be:
                    00:af:fc:80:2a:52:78:7b:de:bd:ea:37:7c:d5:44:
                    2a:c8:01:1a:e9:8d:45:e3:52:05:d4:3d:f7:0c:94:
                    7f:4f:ce:00:16:65:a5:3e:9b:57:56:5d:da:e0:8a:
                    95:c9:bc:ad:4f:85:a5:e8:08:81:f6:11:1b:53:35:
                    5b:08:8c:92:f6:1e:32:13:13:5d:87:94:ac:1b:b6:
                    30:a1:7f:2f:e4:00:cb:80:23:86:8c:58:95:04:50:
                    20:58:e5:61:e9:01:8f:37:bb:f2:25:b2:86:96:78:
                    6c:ab:db:87:29:a2:cf:4f:e6:93:33:a8:3d:f6:55:
                    80:46:d8:f3:69:04:08:1e:70:8e:96:e0:08:9c:e2:
                    3e:53:3d:b5:5f:c0:43:47:75:b8:d1:f8:25:d0:68:
                    0c:ea:76:40:01:c0:cf:79:52:5c:d0:d8:dc:97:74:
                    4b:bd:7a:75:60:a3:40:6e:91:07:2e:ce:c9:50:f3:
                    b8:d7:43:65:2c:59:5a:c6:79:8c:be:c5:8c:d6:cc:
                    80:4e:88:92:d2:ac:ec:f1:1c:25:a3:3b:d8:ca:67:
                    d4:03:71:7a:24:66:a9:29:0d:cb:c6:a3:e7:aa:66:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:4B:D2:61:82:BD:89:C1:29:C2:FC:BC:BF:1F:91:A1:8C:16:E5
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:24:2c:af:5f:15:27:78:bf:5d:66:3e:1d:96:f8:1b:16:
         dc:70:d8:c0:d4:6c:0a:d1:ab:be:ec:bd:1d:a0:61:e1:d4:18:
         b3:ce:ed:2f:aa:65:79:9e:91:7d:6a:d5:9f:ee:eb:ef:fc:ed:
         20:a7:e9:86:92:a5:9e:63:55:ba:f0:04:66:38:ce:21:eb:04:
         47:78:46:f5:27:ba:16:e3:f6:c2:31:69:d0:13:d8:57:b7:c4:
         ed:52:bc:19:ae:f7:3c:cc:8c:ab:f5:d2:9e:ee:bd:ea:7d:4a:
         90:d6:ee:1e:36:bf:16:cc:84:ac:d4:c4:9f:ea:6a:2c:e3:82:
         e1:4d:8f:8d:95:66:5b:3c:d2:1f:f0:6d:0b:d0:ad:4d:04:b5:
         31:0b:46:df:ff:4f:1b:31:00:51:12:9e:a1:81:26:0f:82:3e:
         d6:d9:7d:a2:d0:ba:38:68:d6:17:f0:b4:69:83:20:51:a7:c3:
         c1:bc:2f:8c:78:a7:a1:ec:e5:f7:d7:ab:5e:32:60:96:1a:0c:
         a3:37:2d:d3:68:e3:29:ba:2e:6d:6e:42:a7:27:83:77:bd:7b:
         70:2b:7d:06:3c:16:e7:43:3c:bc:8a:58:50:69:f2:00:f0:f8:
         e8:c7:df:6e:2f:e0:05:10:22:66:ae:de:75:52:6b:c9:f4:4c:
         60:53:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:14 2025 by rpki-client