This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File:                     EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier:          OoFKY4Ykfxn/axczswnAp6KbjIPlKhEhu+CxWd2vyRQ=
Subject key identifier:   F7:C2:C6:E0:91:7D:06:1B:F4:77:C1:20:09:A5:01:21:EE:B4:60:14
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer:       /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial:       019B3D599716473B5BDA1B966587F1AFF117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number:          0A8E
Signing time:             Sat 20 Dec 2025 20:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 20:00:40 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:40 +0000
Files and hashes:         1: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: YXcNrMkdvKsGSehRSCy7h/JB7/KoPnqMP7das3c77Co=)
                          2: oWV04MIM-RKhpL3iCBPxMNYdvNg.roa (hash: y5jWD0UHuDBxNvyztj9K4XUOWYfO7oJMHZUIIkVTcM0=)
                          3: oswo9YKLg0u3JC1IbA7Gj8m0msI.roa (hash: iMLKS98/HXnStabev/m1xnD9F47lNw2WEBo8S/dBQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:59:97:16:47:3b:5b:da:1b:96:65:87:f1:af:f1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
        Validity
            Not Before: Dec 20 20:00:40 2025 GMT
            Not After : Dec 21 20:00:40 2025 GMT
        Subject: CN=f7c2c6e0917d061bf477c12009a50121eeb46014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:6f:2e:f2:2e:b2:ea:ae:d1:06:16:67:83:
                    d7:1c:36:35:e7:d1:54:a1:3d:24:8d:fe:9c:f7:c3:
                    4d:df:d9:b0:ad:7a:5b:66:a6:8e:2f:87:ae:48:04:
                    49:c8:7e:31:2c:92:73:fe:1a:7a:68:03:3a:d2:c5:
                    99:14:2a:a3:2c:e8:5c:c6:a4:bc:39:a4:6b:e4:41:
                    66:bb:39:bc:9d:97:fc:00:0c:e9:75:3e:c2:a6:a9:
                    c5:a9:05:2e:df:56:84:e7:6f:12:18:24:8d:fc:04:
                    8a:ed:97:4b:d8:c7:fd:20:73:e2:7e:d1:49:e1:80:
                    a5:ee:4e:b9:48:7e:fd:35:29:76:8c:14:02:1b:20:
                    4e:7d:7c:33:1f:7d:f9:6a:4a:90:06:f9:80:a1:c1:
                    10:c8:f4:22:f6:5d:fd:d5:41:5c:4d:ef:c0:fa:07:
                    46:55:67:b5:e3:16:77:fd:06:a4:0c:bd:98:22:71:
                    2c:de:c8:59:5d:7c:d9:8d:95:47:19:32:39:fa:ec:
                    20:a9:cc:01:cb:10:9c:78:bd:8d:77:7a:cd:e4:dd:
                    9b:90:45:b5:a9:22:e1:14:d9:41:5f:c5:a7:3a:e5:
                    e9:e4:54:0a:9d:20:7c:46:a6:aa:c8:7d:a7:24:2a:
                    fc:76:c7:59:c3:eb:c1:8e:fb:1b:76:21:05:97:4e:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:C6:E0:91:7D:06:1B:F4:77:C1:20:09:A5:01:21:EE:B4:60:14
            X509v3 Authority Key Identifier:
                keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:3c:47:a8:3a:73:88:e5:0f:63:91:15:d3:22:34:85:c1:07:
         a9:80:bf:87:c3:21:16:fb:74:1d:98:88:b1:c5:ed:f7:98:a1:
         0e:f6:b3:88:b2:09:54:2a:3b:6e:b2:3a:3f:3c:97:8d:c1:11:
         f4:f0:4d:f7:76:02:70:88:f5:ef:1b:28:33:d6:4c:f5:ab:35:
         3a:a0:74:5f:d5:fa:37:61:b4:1d:45:f3:c7:f4:89:5a:f8:bd:
         3d:80:6a:e7:b5:3c:48:ed:eb:dd:e0:48:10:e2:e8:63:fa:77:
         77:2d:77:d2:66:1f:ce:27:6d:76:6a:e7:e3:1b:37:23:a8:05:
         85:8d:12:6f:fa:d5:46:ea:0d:61:8f:8f:1a:6b:86:c6:d4:75:
         43:7f:43:48:78:e3:bd:cf:14:66:09:ce:6c:7f:5a:76:df:cf:
         2e:3b:82:33:7c:c0:9d:00:3e:fc:dc:46:f3:2a:e0:73:10:f6:
         58:d6:fb:a2:80:b8:e5:03:e6:ee:99:a4:70:22:36:de:38:2b:
         57:56:d8:0f:10:67:f7:08:63:a0:79:2d:33:97:98:d5:e8:cd:
         47:e3:8a:36:fe:87:31:eb:74:1c:d6:f5:a9:07:7b:55:cc:f9:
         81:84:48:9c:c0:d4:aa:2a:5e:86:ee:9b:94:67:19:e1:4a:52:
         af:3e:1e:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9WZcWRztb2huWZYfxr/EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2
YzUzOGEwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD
EyhmN2MyYzZlMDkxN2QwNjFiZjQ3N2MxMjAwOWE1MDEyMWVlYjQ2MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kpvLvIusuqu0QYWZ4PXHDY159FU
oT0kjf6c98NN39mwrXpbZqaOL4euSARJyH4xLJJz/hp6aAM60sWZFCqjLOhcxqS8
OaRr5EFmuzm8nZf8AAzpdT7CpqnFqQUu31aE528SGCSN/ASK7ZdL2Mf9IHPiftFJ
4YCl7k65SH79NSl2jBQCGyBOfXwzH335akqQBvmAocEQyPQi9l391UFcTe/A+gdG
VWe14xZ3/QakDL2YInEs3shZXXzZjZVHGTI5+uwgqcwByxCceL2Nd3rN5N2bkEW1
qSLhFNlBX8WnOuXp5FQKnSB8RqaqyH2nJCr8dsdZw+vBjvsbdiEFl07kRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfCxuCRfQYb9HfBIAmlASHutGAUMB8GA1UdIwQY
MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt
MDVmMDkzMzg1YWM4LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4
LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3DxHqDpz
iOUPY5EV0yI0hcEHqYC/h8MhFvt0HZiIscXt95ihDvaziLIJVCo7brI6PzyXjcER
9PBN93YCcIj17xsoM9ZM9as1OqB0X9X6N2G0HUXzx/SJWvi9PYBq57U8SO3r3eBI
EOLoY/p3dy130mYfzidtdmrn4xs3I6gFhY0Sb/rVRuoNYY+PGmuGxtR1Q39DSHjj
vc8UZgnObH9adt/PLjuCM3zAnQA+/NxG8yrgcxD2WNb7ooC45QPm7pmkcCI23jgr
V1bYDxBn9whjoHktM5eY1ejNR+OKNv6HMet0HNb1qQd7Vcz5gYRInMDUqipehu6b
lGcZ4UpSrz4eXg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:05:31 2025 by rpki-client