This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File:                     eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier:          XK1czf9Isv/kjGkXnP2aYxEXZDh/lkjrP0O9e0CPQVE=
Subject key identifier:   41:E4:D2:A0:B1:26:E3:BF:4B:79:3E:07:17:04:28:FF:C1:DE:A9:56
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer:       /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial:       019B435C16F8C912FFE4778A904EF7B38060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number:          1182
Signing time:             Mon 22 Dec 2025 00:01:07 +0000
Manifest this update:     Mon 22 Dec 2025 00:01:07 +0000
Manifest next update:     Tue 23 Dec 2025 00:01:07 +0000
Files and hashes:         1: C9I9L672PlbWqQBGPXD-LljxFm8.roa (hash: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=)
                          2: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (hash: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=)
                          3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: pY5Y9IWjhIU27dXh6+StaqCZ4fGRXG8DN5ZJwPy83Ho=)
                          4: gMIvq9YtCgOkL-7wopg1kqEgOOY.roa (hash: CP7S68jNnZq7f3001jUkejgDjHIYNSAYCHyxzvgL+hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5c:16:f8:c9:12:ff:e4:77:8a:90:4e:f7:b3:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
        Validity
            Not Before: Dec 22 00:01:07 2025 GMT
            Not After : Dec 23 00:01:07 2025 GMT
        Subject: CN=41e4d2a0b126e3bf4b793e07170428ffc1dea956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:09:dc:70:53:2b:01:e8:7c:99:33:2b:73:
                    e1:c9:e8:09:68:d4:c8:46:88:d3:b6:c9:9f:1c:a0:
                    e4:4b:73:a3:51:a1:e0:79:db:03:34:c8:b8:63:44:
                    e5:85:71:4a:fb:9f:18:ff:8a:0a:86:74:da:dd:df:
                    41:5a:35:e2:b3:80:a4:21:a2:ad:83:17:94:fe:a1:
                    41:bb:a2:a5:59:31:e4:cb:7f:62:5f:68:0c:58:5e:
                    b3:8f:bb:ef:f1:c8:07:4a:52:07:6b:34:1b:11:88:
                    dd:41:cf:71:3d:af:08:28:ad:3b:7f:be:8c:25:9a:
                    ef:fc:45:b2:a4:f5:e6:f5:13:a8:3e:eb:39:ba:d1:
                    d4:a0:65:a8:a7:f4:cb:cc:4d:81:02:77:e0:cc:9c:
                    69:07:67:81:f9:65:b9:9d:6d:1a:f0:ed:6d:a6:56:
                    82:13:fb:fa:3d:15:d6:35:6c:f1:36:25:2d:99:47:
                    df:ac:a9:7a:1f:2b:8d:28:02:9b:7f:b7:3d:17:26:
                    e4:97:5a:7e:3b:e7:c2:bd:da:a8:ad:6f:4d:62:a6:
                    2b:6b:e5:a3:6a:0a:7e:e6:ec:5b:44:bc:50:ad:ee:
                    75:cd:0b:d2:bc:d7:da:a0:4e:12:ed:0d:1e:4a:9c:
                    4e:c6:ed:fa:08:54:f1:93:ca:e2:e6:35:0e:7d:ab:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:D2:A0:B1:26:E3:BF:4B:79:3E:07:17:04:28:FF:C1:DE:A9:56
            X509v3 Authority Key Identifier:
                keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:35:9d:e6:9d:a7:eb:1f:c1:63:1a:07:7d:87:42:ea:00:
         f1:39:6d:ba:18:2f:57:2d:55:1c:79:4a:b8:0e:8e:de:41:b2:
         8d:d8:93:fd:f6:31:d8:06:a7:49:10:ae:79:b1:69:a0:cb:e7:
         86:78:91:f9:1c:5d:68:36:9b:e4:ab:5c:c6:65:5b:8c:22:29:
         00:58:9c:b6:88:f0:ff:2b:5b:12:9d:e2:03:73:06:d5:21:72:
         15:8a:ef:d4:85:02:2e:6f:a7:f8:cc:f3:c0:e6:90:a7:90:27:
         a0:81:e0:f6:b4:e2:82:66:47:b9:af:1f:52:7c:64:89:11:06:
         2e:32:cb:7b:39:f5:1d:9e:b6:5d:e4:78:95:78:41:c0:88:5a:
         c2:5f:4d:1f:a1:5e:2d:77:26:ae:eb:3e:80:1d:a2:14:9f:ff:
         49:e3:46:9d:0a:85:e5:04:07:e7:25:32:a5:e9:7c:d8:09:c4:
         e6:ec:5e:8c:6b:5a:a5:04:99:0e:cc:d6:a7:18:60:1b:76:5b:
         b3:16:54:7d:7b:c8:31:78:ac:93:a8:e0:ae:87:0a:b2:e4:85:
         65:95:1d:e9:68:00:11:86:17:e4:32:84:a9:8d:97:84:66:61:
         6d:fe:83:f3:00:b3:d2:1e:b2:cf:3d:59:ca:6b:09:3a:08:6e:
         3d:d8:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:44:18 2025 by rpki-client