This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File:                     E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier:          2OtS5bgwH+lXiHwHqKdcmtvsWHd8/xDnA7Hj2jZW/uE=
Subject key identifier:   3D:26:9D:14:C6:49:F3:73:B2:28:23:3E:21:58:9C:CE:F9:A9:23:56
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer:       /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial:       019B318D26F184D821CCE2305F23A54D4017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number:          06AB
Signing time:             Thu 18 Dec 2025 13:01:32 +0000
Manifest this update:     Thu 18 Dec 2025 13:01:32 +0000
Manifest next update:     Fri 19 Dec 2025 13:01:32 +0000
Files and hashes:         1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: BZbcXADaDiXBGNKeo5BELzT9ilKo6GJxjpd2mWMvF48=)
                          2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
                          3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:8d:26:f1:84:d8:21:cc:e2:30:5f:23:a5:4d:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
        Validity
            Not Before: Dec 18 13:01:32 2025 GMT
            Not After : Dec 19 13:01:32 2025 GMT
        Subject: CN=3d269d14c649f373b228233e21589ccef9a92356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:5b:97:48:0e:d5:37:7a:ec:3f:30:8e:48:
                    bc:a3:41:5a:25:fd:07:3c:c0:6e:f3:eb:19:db:e9:
                    d1:6a:80:f4:2a:bb:e0:e1:21:b9:ff:4d:a4:b9:1f:
                    f5:08:a4:13:5f:e2:38:ba:9a:41:4c:6b:06:47:31:
                    11:a6:e8:94:b8:9e:8d:47:1c:8d:a5:b0:c1:79:6c:
                    81:0e:04:3d:1b:bc:86:9a:56:a8:ab:dc:fe:8f:ec:
                    6c:4f:66:1c:b0:25:e0:a2:75:f2:3d:a6:3d:f7:10:
                    2b:24:db:65:15:b6:e3:a2:30:ce:9c:6e:86:77:4d:
                    60:25:29:17:b9:04:ba:1e:e4:1c:ad:1c:35:49:f1:
                    1b:d8:f5:8a:b7:8a:dd:4c:59:c0:3a:5c:f4:58:81:
                    6c:ea:0e:b5:1a:9b:c3:fc:e9:a5:50:2d:1a:23:32:
                    20:37:0d:af:0d:6d:0d:8a:62:78:64:9b:f1:a7:2a:
                    08:97:e9:26:34:b3:36:72:e8:e0:e9:ed:ed:4d:b4:
                    e8:1f:ed:d0:44:86:9b:3f:9b:a1:94:14:f9:14:ad:
                    ef:78:fd:43:8f:81:ab:0d:6b:69:fb:f3:df:16:b3:
                    0f:33:b0:ef:0b:92:c3:45:ac:b5:f2:f1:1f:08:d3:
                    d2:70:9a:e2:c5:d5:4d:35:3c:cd:5c:82:cd:ab:00:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:9D:14:C6:49:F3:73:B2:28:23:3E:21:58:9C:CE:F9:A9:23:56
            X509v3 Authority Key Identifier:
                keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:b8:79:bb:f3:18:90:f2:66:ff:63:91:3b:30:3b:be:0c:
         cc:5d:7f:cc:2a:0a:e2:f3:14:b3:a0:8e:8c:c7:9a:40:5f:44:
         73:f0:23:92:da:20:33:77:36:1c:98:2d:a8:28:3c:f6:55:9a:
         d0:74:92:78:62:36:4f:60:e3:85:77:f3:f0:04:e3:cf:07:bf:
         da:fd:b1:8b:7a:15:d3:db:e1:67:fd:79:4f:c5:85:20:1e:c6:
         45:aa:5d:c4:91:8e:f1:1e:10:37:67:df:98:7f:63:da:0f:57:
         1d:0c:f2:13:43:3a:da:4d:91:f4:3e:ef:89:ee:1f:6c:bc:14:
         f2:6f:c1:db:56:ca:a9:13:6e:80:bb:ee:76:b7:ac:0a:3e:c1:
         2b:93:28:50:da:f5:89:2e:72:56:5e:1e:bc:8b:f4:25:a5:52:
         5a:3a:05:6e:2e:7b:4f:b6:b9:c6:fe:5d:71:5c:9b:31:82:e9:
         ff:e1:21:c6:3c:f4:ab:82:35:cb:09:ff:84:14:5f:57:ce:1f:
         18:cf:51:70:42:81:af:d4:48:0a:84:db:6a:8a:d5:59:0c:17:
         10:13:7c:95:7f:7b:bc:d5:2b:ba:20:0e:96:74:e5:e9:f0:ad:
         ba:80:97:5e:28:7f:fa:28:ea:e5:84:6d:96:97:77:ab:6f:0e:
         71:1f:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:24:16 2025 by rpki-client