This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
File:                     eNo_c5yggv_oh_cDBuf8dIRgbOI.mft (raw, json)
Hash identifier:          FYIegvS4PJYSl+n05hwtgMxJBKg7MYNOxSjFYFh/jlc=
Subject key identifier:   53:6A:4E:90:C4:DD:4C:A6:50:BB:8F:92:A7:5B:AB:86:35:77:7D:9D
Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Certificate issuer:       /CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Certificate serial:       019B4E161DBB64A96490D544BA058FF5E1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
Manifest number:          04BE
Signing time:             Wed 24 Dec 2025 02:00:30 +0000
Manifest this update:     Wed 24 Dec 2025 02:00:30 +0000
Manifest next update:     Thu 25 Dec 2025 02:00:30 +0000
Files and hashes:         1: JoAWYzosur__gpz4zflBBcSYJgM.roa (hash: 9Cl/dv3HRXlbFlF+IauRrrkitYKJm6Tn2VgfqN9jS4Q=)
                          2: eNo_c5yggv_oh_cDBuf8dIRgbOI.crl (hash: iZ5Ux/vgKse3Jt4OBU/dEkVyxPgnlq3oM9laQxKrio8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4e:16:1d:bb:64:a9:64:90:d5:44:ba:05:8f:f5:e1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
        Validity
            Not Before: Dec 24 02:00:30 2025 GMT
            Not After : Dec 25 02:00:30 2025 GMT
        Subject: CN=536a4e90c4dd4ca650bb8f92a75bab8635777d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:dd:10:76:7e:9e:de:59:3f:cd:fa:d5:70:
                    0a:8e:5d:c3:a1:93:57:90:33:91:5f:74:c1:d5:8f:
                    2a:52:62:a0:51:cb:89:a4:7b:72:cd:dc:e4:5b:74:
                    c1:66:aa:ac:d4:e2:ac:4a:a3:1a:bb:87:71:76:85:
                    72:c9:20:6e:6a:75:b9:5c:21:4a:ac:10:08:02:c9:
                    ce:ab:b3:54:d2:2a:d2:e7:72:11:5c:bc:e3:0a:f2:
                    85:58:4d:f5:46:b6:ec:f3:29:52:b1:e8:f5:02:e0:
                    02:35:33:a7:47:9d:81:d7:7c:c6:70:1c:77:85:09:
                    c1:a5:23:e3:98:c3:0b:69:46:9c:cf:8e:f9:9c:94:
                    e5:cd:df:2c:54:28:37:be:dd:66:07:f6:75:cb:3d:
                    17:bc:a2:3e:11:5b:68:f2:a6:9e:37:59:4a:9c:1a:
                    69:29:07:57:74:d9:3b:57:76:50:d6:23:75:cc:f8:
                    a0:99:60:be:00:8c:15:4d:bf:7d:05:17:18:8b:5c:
                    5a:2d:7f:22:16:2d:47:61:29:de:5f:28:e7:e4:12:
                    1c:0c:f0:10:d2:f8:0c:fa:e6:f0:77:5b:99:e5:15:
                    ed:0c:93:d4:2a:a6:9f:27:a0:e2:be:e3:ea:83:f6:
                    47:c4:e0:82:75:a6:f3:a4:24:49:d3:be:ff:42:4a:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:4E:90:C4:DD:4C:A6:50:BB:8F:92:A7:5B:AB:86:35:77:7D:9D
            X509v3 Authority Key Identifier:
                keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:20:ed:fd:41:55:72:f4:42:6d:fe:ff:15:cb:33:e5:8b:
         f0:c1:90:e8:52:16:bf:95:2a:9c:7f:60:c8:0e:c7:0a:18:da:
         43:e5:0b:f1:52:85:36:d3:4e:55:fd:da:3e:ea:70:51:df:4d:
         a8:6d:09:f1:27:7c:14:dc:c9:fe:a7:31:e5:66:b1:c6:03:63:
         6a:57:dd:2e:ae:f2:9f:cb:52:33:ad:cf:70:a7:bf:19:59:68:
         0c:1b:69:2f:33:f7:97:0e:04:e4:c8:de:d6:b3:48:c8:cd:1d:
         26:93:9f:c6:cb:16:60:c5:59:e3:62:f2:0d:5e:53:8e:99:bd:
         76:ac:68:9d:b5:f3:ff:6e:e0:69:75:af:92:db:10:75:91:2c:
         a6:9f:be:d5:78:54:43:dc:a3:79:6f:29:0d:19:8e:2f:2e:43:
         8a:22:30:d3:ff:e8:8f:08:fd:e3:26:a8:61:38:24:53:7d:fd:
         8d:1f:25:2a:d5:22:e1:3d:5b:f5:4d:b8:f1:5d:32:e6:e1:ad:
         1e:cf:d9:c8:70:22:fa:09:08:d5:d6:4e:83:5b:e5:a8:1b:09:
         d8:70:b5:f9:af:7d:e8:cd:33:c9:87:92:8e:3d:dc:39:aa:b2:
         11:1d:f9:78:95:1d:4e:b0:94:99:95:5e:2d:e7:9e:7a:62:52:
         76:b9:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:36:06 2025 by rpki-client