This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File:                     eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier:          tMVjQ2Etow9A2PNACWZVxJVqxX9GU4nosmK7JVfGfdw=
Subject key identifier:   0A:C4:7A:A6:8B:D4:D2:6D:C6:EF:6B:8F:25:D5:6A:1F:16:CC:5A:95
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer:       /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial:       019B503BC532A699C862E8459FF52D810048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number:          1780
Signing time:             Wed 24 Dec 2025 12:00:52 +0000
Manifest this update:     Wed 24 Dec 2025 12:00:52 +0000
Manifest next update:     Thu 25 Dec 2025 12:00:52 +0000
Files and hashes:         1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
                          2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: HOY+woX+NK5sEfnG2Obhzhk3GHawsqE3OxislgbHsCk=)
                          3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:3b:c5:32:a6:99:c8:62:e8:45:9f:f5:2d:81:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
        Validity
            Not Before: Dec 24 12:00:52 2025 GMT
            Not After : Dec 25 12:00:52 2025 GMT
        Subject: CN=0ac47aa68bd4d26dc6ef6b8f25d56a1f16cc5a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5d:c0:58:b1:5b:ba:b4:72:ed:a2:12:75:06:
                    39:e8:9b:a3:bc:d0:de:25:a5:dc:ed:18:d0:8c:9b:
                    2c:b7:5d:3d:ad:1b:9f:a7:7b:66:6e:20:67:e2:e5:
                    db:b3:16:21:e5:32:17:c9:2d:db:24:54:d0:82:00:
                    60:12:a9:6e:47:7a:3a:bd:93:87:a0:88:7d:0f:64:
                    1a:ea:f8:4d:ae:e8:7b:41:c5:e5:b9:3f:b9:df:56:
                    a3:60:b5:11:6c:0d:52:44:e9:f9:58:23:bb:9d:ac:
                    a8:86:37:15:8c:74:a3:62:00:02:65:20:ed:30:22:
                    15:65:13:c2:10:31:26:15:96:23:6d:37:4d:37:7c:
                    69:bd:95:ec:79:75:14:25:c3:d8:24:a1:4d:58:de:
                    ab:6f:98:40:81:bd:46:2e:6a:c7:be:49:0b:a3:74:
                    2d:2a:59:c2:bc:d9:0d:b6:82:10:9b:31:67:a5:05:
                    71:75:43:b7:f7:d8:7e:4a:2d:43:93:c4:6c:66:64:
                    a5:4e:23:8a:8e:90:07:6e:10:ae:26:de:77:eb:d9:
                    10:f6:f1:43:51:5d:ed:9a:68:51:2b:91:c6:05:96:
                    43:b6:d7:12:67:23:fe:8f:a9:d8:b9:89:c0:69:a7:
                    44:00:e7:0a:88:7f:3a:59:68:11:0b:27:9d:37:7e:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:7A:A6:8B:D4:D2:6D:C6:EF:6B:8F:25:D5:6A:1F:16:CC:5A:95
            X509v3 Authority Key Identifier:
                keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:23:85:3a:5d:c1:5a:d5:5e:49:58:9a:e6:62:a9:35:7f:64:
         20:09:0b:8c:83:4a:89:c5:09:7e:fc:4b:19:ef:1d:0a:dc:1c:
         9a:2b:fe:af:64:7f:8e:92:89:48:3e:4f:50:bf:0f:e4:86:5b:
         47:30:fc:00:76:dc:62:d6:77:ea:cc:f6:9b:82:f7:a6:75:0d:
         3a:59:af:7f:d9:f1:27:1b:67:85:56:12:4e:ac:48:97:ba:ce:
         ed:6b:51:db:74:85:9b:2a:51:f8:6c:ac:34:f5:43:1b:a1:f0:
         e5:06:7a:27:9c:0e:d8:1e:ec:0a:3c:22:65:15:1a:fb:48:ef:
         cd:f8:fd:ae:45:95:f9:d8:1e:d2:93:bb:9f:2e:fc:f8:ca:c9:
         ac:3e:62:21:ef:89:38:c4:75:66:7b:a6:6c:de:c9:b2:31:7f:
         e4:7f:8b:8f:98:9e:15:4f:4e:47:4a:f6:c6:94:72:89:be:89:
         c7:9a:df:19:d2:89:fe:d8:56:81:ed:96:1a:27:1f:25:12:7b:
         7f:04:db:3e:4c:04:1b:8d:e8:d7:68:10:a3:cc:22:3c:78:48:
         ff:c6:a9:5f:b2:4a:83:98:57:6b:e8:c3:ef:49:7d:d5:b9:d4:
         e3:94:06:e1:d1:78:8f:da:f2:fe:89:51:e8:fe:74:5a:71:67:
         35:10:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:44:40 2025 by rpki-client