This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File:                     eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier:          ZCNhEQk2f9XNTV+27zt6tFtcKot5oj8tdxeRr02T7KA=
Subject key identifier:   BD:BD:B0:11:BA:45:D3:42:AF:AD:80:A4:00:5E:06:4B:6B:D9:83:76
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer:       /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial:       019B3AFE56779C386D9F284922A26C5C78C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 09:01:45 +0000
Manifest this update:     Sat 20 Dec 2025 09:01:45 +0000
Manifest next update:     Sun 21 Dec 2025 09:01:45 +0000
Files and hashes:         1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
                          2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
                          3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: ZdUbkyJ52QR7CwrMOe9hnK6BWsTrhIhxkcIwRGWGDNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:fe:56:77:9c:38:6d:9f:28:49:22:a2:6c:5c:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
        Validity
            Not Before: Dec 20 09:01:45 2025 GMT
            Not After : Dec 21 09:01:45 2025 GMT
        Subject: CN=bdbdb011ba45d342afad80a4005e064b6bd98376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:7c:bf:da:88:c6:1c:db:ed:a3:59:ae:81:
                    0f:eb:ca:16:8d:6a:43:d9:44:9b:5d:8a:d8:8e:2b:
                    8d:8e:c9:87:82:ad:02:e7:89:e4:f5:4b:56:fd:6b:
                    1f:ff:31:c1:b8:3e:4c:8f:f3:b2:ba:97:51:c9:b2:
                    6f:1a:91:05:b9:d1:78:7e:87:2b:d3:14:0f:91:21:
                    8d:50:fa:8f:dc:1c:05:17:f1:00:d6:63:ea:0f:7e:
                    30:c4:ba:14:73:40:90:f3:6a:b5:8c:52:f2:8b:7c:
                    d4:dc:91:51:20:d5:9b:72:89:b8:17:19:15:78:65:
                    ca:1f:c2:3d:64:38:e8:d6:74:4c:02:78:5b:d9:48:
                    b3:ea:89:8c:c8:63:93:90:b7:2b:cc:3e:b5:71:08:
                    30:58:27:c7:bb:e2:8f:88:27:56:e4:d0:a7:46:9a:
                    18:c0:31:8c:c7:66:60:4f:79:2d:56:9c:c8:eb:e7:
                    bb:ff:92:92:93:33:56:51:43:ae:15:c9:b5:d3:a2:
                    cb:13:97:4f:92:dd:22:ed:b5:0a:29:b2:0a:71:13:
                    93:40:49:95:8f:05:b2:12:a5:e7:c4:a7:04:33:b6:
                    2b:7e:53:68:d3:ae:1a:6b:2f:5b:9f:47:75:dc:50:
                    15:4c:ef:5a:92:d2:7b:5a:83:65:71:b2:63:49:7f:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:B0:11:BA:45:D3:42:AF:AD:80:A4:00:5E:06:4B:6B:D9:83:76
            X509v3 Authority Key Identifier:
                keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:b8:60:22:a7:45:c6:b8:56:b7:02:3d:76:33:eb:ed:77:
         6b:76:dd:78:ee:ec:7c:19:1b:ad:db:53:36:87:3d:83:8f:6c:
         92:81:15:4b:3f:a1:f0:81:24:d3:2a:20:84:17:a4:a7:c1:2b:
         04:94:76:99:56:f5:f7:7c:8f:be:e3:57:f3:8c:d8:1f:0a:ec:
         2b:de:7e:ae:0f:4f:56:f9:ca:a6:5a:ec:1c:5d:b0:20:a0:6f:
         f6:cb:05:5e:f7:86:e5:b6:a3:29:c1:b6:e5:22:98:4f:80:4c:
         bb:3b:af:9d:4b:06:71:96:ec:c7:13:d1:33:0c:fd:01:b2:f6:
         42:1f:79:d9:7e:ad:9c:81:d8:e4:de:3f:32:e6:92:4a:55:c7:
         1e:d2:a1:ab:15:60:4e:55:11:80:2f:e0:72:00:9d:b2:d5:93:
         1b:ae:d8:6e:2a:d4:30:8d:77:d8:05:76:3e:85:d2:bd:66:1a:
         4f:30:c5:61:72:38:b7:c8:a6:07:18:fd:9a:f1:6d:aa:51:41:
         59:ee:6f:a9:21:51:17:78:6b:91:2f:02:01:79:15:dc:c3:84:
         8c:cf:b6:00:48:55:c0:51:f3:3a:28:66:af:43:3a:95:8d:de:
         a0:d4:ee:cb:7c:74:66:e6:9e:1d:79:91:f6:d5:6c:2e:72:b6:
         b1:3d:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:03:02 2025 by rpki-client