This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          /wOCEytXMLxskkM+VS5e/TQ2oMvhfqpISgwqIhGefOo=
Subject key identifier:   0C:1B:81:21:57:10:D3:69:0F:2C:8B:04:2B:5C:81:2C:ED:AA:91:C3
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019B4CCD29996EFD4B3E6B1DDED1AA1110D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          06FF
Signing time:             Tue 23 Dec 2025 20:01:12 +0000
Manifest this update:     Tue 23 Dec 2025 20:01:12 +0000
Manifest next update:     Wed 24 Dec 2025 20:01:12 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: CX0uQvbiNMkAuwoL0kRzwbChmv0.roa (hash: 26izhx2izIf+IdJlE2YSyo8Fri2XwlLiaOGdo12kHEQ=)
                          3: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: JRLn29LzzdLWH38zvGJy/FGqZK21saXQpukvd19vnCg=)
                          4: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          5: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          6: IR62xMFiyoq3T26S7rC2t-vsg1Q.roa (hash: 4JHweAbKcSwcD4ukqyEXy7b32Dk2067OV6viHWo+wV4=)
                          7: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          8: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          9: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          10: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          11: SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa (hash: pSWkwwdJuITOogB9fYE7WeRIrWunvXKbsDF9fkGUQdM=)
                          12: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          13: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          14: XWUeoKzPiymOtiolB_c7UPWXM_A.roa (hash: dbme98MUsM08vhgeRnSWM+kW9ZOj2+F5fN+x1V3kjyM=)
                          15: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (hash: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=)
                          16: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          17: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          18: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          19: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          20: nwWuECVg9JQAYn8jLwCeC3bTdbo.roa (hash: yNlc9hnJI63Z5bMFLpkARqr7N3n25vphcwDSS9RWssA=)
                          21: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          22: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          23: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          24: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4c:cd:29:99:6e:fd:4b:3e:6b:1d:de:d1:aa:11:10:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Dec 23 20:01:12 2025 GMT
            Not After : Dec 24 20:01:12 2025 GMT
        Subject: CN=0c1b81215710d3690f2c8b042b5c812cedaa91c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:53:12:23:f6:f8:a4:8c:49:ee:0a:ec:64:
                    0d:c7:bd:ba:59:aa:06:42:e0:9c:d7:b2:c2:52:96:
                    7f:2a:d1:69:26:50:c1:8a:4d:bc:ee:49:c5:cd:69:
                    da:c2:d8:b7:b7:b6:e4:65:ed:0c:e5:4f:bb:05:dc:
                    38:ab:89:fc:e3:b8:e9:cd:c3:f0:14:c2:e2:5d:ff:
                    1c:0b:a0:ab:b1:e9:2c:6c:fc:cb:57:d4:3a:01:1b:
                    28:7c:dc:ca:37:5b:ab:bf:40:a4:a5:3c:c6:9c:60:
                    7c:06:a6:34:00:ff:74:9c:83:69:06:51:7b:d9:0e:
                    0e:17:71:3f:9d:e6:8e:95:e8:8e:5c:f2:80:33:12:
                    5c:74:e5:c5:2f:f2:3f:ee:03:b9:7a:99:6b:77:5a:
                    87:c5:7e:61:41:35:9f:05:3d:58:38:64:c1:36:ef:
                    d2:aa:e5:26:d7:22:e0:ba:3a:bd:50:f5:a6:8b:87:
                    fa:43:31:83:be:9b:8a:3e:54:99:35:41:b2:81:01:
                    1e:bf:91:00:24:7a:6b:1c:5b:b8:79:21:20:96:95:
                    09:a1:bf:41:b2:8e:fa:3d:06:14:77:2b:81:a7:cd:
                    7a:a6:05:c3:09:e8:f9:25:0b:47:f2:4b:b0:ee:54:
                    25:c4:30:93:70:a9:71:b3:b7:c3:5d:09:42:d5:46:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:81:21:57:10:D3:69:0F:2C:8B:04:2B:5C:81:2C:ED:AA:91:C3
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:93:36:8a:7f:10:8a:73:c7:b2:81:c7:c0:ff:6e:0e:5e:4e:
         4b:9d:2d:b4:f8:26:f7:7f:f3:71:e0:21:38:43:a5:76:a1:a9:
         f3:38:5b:85:6b:2a:ec:78:14:c5:10:6c:18:bc:92:e9:ab:50:
         f0:7e:32:4d:f5:74:70:85:24:cd:01:2b:a7:db:1b:4e:5c:9e:
         8b:f8:d3:52:37:f5:17:55:d6:5f:44:03:94:e6:2c:10:e1:35:
         48:98:5a:d8:9b:b9:65:17:65:49:e3:b6:ec:0b:7a:8a:7e:14:
         97:99:62:ff:1f:97:a2:17:bf:1f:61:3c:ca:d6:3e:24:65:a6:
         83:eb:f4:d7:4a:3b:b0:17:6c:56:a5:17:88:05:18:cc:ee:22:
         eb:e3:56:2b:7c:7a:07:b2:40:36:bd:9f:12:3e:f0:ac:2a:02:
         dd:34:c0:6a:4e:c4:00:4b:96:3b:45:9c:b7:7c:93:be:53:7f:
         c6:5e:aa:b6:10:b9:00:02:cf:6a:85:6a:b9:d8:9f:c7:00:8b:
         76:87:bc:58:51:fc:7a:0a:92:c9:29:c5:a9:df:21:c1:6a:bf:
         21:c0:35:39:d6:c8:76:89:62:da:ec:24:fa:b0:30:f6:a1:24:
         ba:a0:ca:27:fa:37:4e:d6:ba:da:bc:85:48:c7:dd:29:c9:5d:
         11:fc:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:30:47 2025 by rpki-client