This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          QnmjRE5zFpVA3bG7/JLh9onV4SkjwGqjN+19UUIG3Qs=
Subject key identifier:   E8:20:59:FB:63:A8:8F:F8:57:60:11:97:1F:3A:D1:52:73:49:B9:9C
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       019B3EDA394E531843CCED666890CE0B358B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          1789
Signing time:             Sun 21 Dec 2025 03:00:47 +0000
Manifest this update:     Sun 21 Dec 2025 03:00:47 +0000
Manifest next update:     Mon 22 Dec 2025 03:00:47 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: EkNgbCylVYwTc2NM2KDNtTuebh81c5To+Xi/AZtvTL8=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:39:4e:53:18:43:cc:ed:66:68:90:ce:0b:35:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Dec 21 03:00:47 2025 GMT
            Not After : Dec 22 03:00:47 2025 GMT
        Subject: CN=e82059fb63a88ff8576011971f3ad1527349b99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:c5:9f:d8:c3:6f:6f:80:39:d7:36:96:df:
                    3c:70:4d:49:22:86:21:32:41:81:8a:1c:dc:6c:e5:
                    81:48:c5:75:e1:aa:c3:dd:2d:d4:4c:cf:34:42:83:
                    49:04:69:a8:c0:02:82:ac:19:5c:66:98:10:ea:68:
                    70:79:7a:e1:e1:80:7e:3b:3c:2b:4c:72:1c:b3:04:
                    12:43:ad:ff:49:d1:d0:6a:83:70:ce:ac:32:24:5f:
                    02:b9:8e:4e:cc:3a:80:3a:32:29:f8:b6:12:01:d0:
                    29:47:81:60:5b:19:87:a7:c7:27:16:cc:f6:a3:ae:
                    21:9b:02:09:48:c1:6f:c3:5c:ed:eb:68:06:b2:78:
                    ea:e0:52:57:56:94:e4:8a:88:85:2a:56:be:fa:c7:
                    87:9f:4a:9b:ca:ab:30:e7:11:ed:9a:65:7d:f9:ea:
                    bb:bc:f7:41:65:0e:50:52:b2:f2:c4:36:72:8d:44:
                    10:de:66:aa:e3:c8:56:6c:db:08:7e:3e:60:19:da:
                    b8:12:03:c3:ad:da:e7:c7:0f:6d:b2:56:00:f2:86:
                    38:23:45:6d:d7:07:b7:52:27:3b:44:15:28:f6:03:
                    46:fe:2e:e5:11:78:b4:e9:90:7a:b9:33:23:4d:52:
                    61:82:6e:e7:9a:a5:e0:8f:b6:70:e0:ab:fc:c1:e1:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:59:FB:63:A8:8F:F8:57:60:11:97:1F:3A:D1:52:73:49:B9:9C
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:da:ad:f0:21:10:cd:6e:9b:09:f3:06:92:21:95:ca:e1:c1:
         b0:dd:bb:12:9d:8b:97:87:02:70:5b:e2:06:d8:ea:7e:4b:de:
         d1:d6:50:8f:1e:17:1a:78:19:e7:80:8d:b0:48:ca:96:40:94:
         bd:b8:45:42:fb:24:42:bf:a3:5d:f4:f2:eb:ef:e0:d5:13:62:
         7b:1a:76:1e:39:35:81:f6:5c:9c:3c:51:a9:8e:7a:8c:32:48:
         01:98:c6:30:ca:37:de:bb:65:de:30:6a:1a:31:b0:50:ff:2c:
         d0:d4:ee:5e:22:03:28:02:c3:bf:57:49:a8:b3:d9:fb:13:9e:
         5a:d2:e1:6d:0f:3c:04:67:a9:2d:b5:b7:49:51:43:5a:6b:1e:
         a1:88:7b:3f:42:d8:93:66:dd:22:33:38:a4:ab:a7:09:21:0d:
         aa:27:b3:c7:d6:6e:48:d2:e0:14:e2:23:9e:b2:00:30:c2:21:
         20:9d:96:1e:20:5b:b3:55:d8:ac:e9:70:56:11:9d:e3:f2:a8:
         7d:c1:f2:ec:2b:b9:84:3c:8f:1d:a6:5c:3b:38:bd:56:6e:50:
         3e:1e:44:30:60:48:5b:12:1f:b2:0f:7b:d0:f8:d8:4d:fe:c1:
         e8:99:6a:25:3e:ca:84:7a:8b:50:23:e2:3a:95:c7:98:7f:dc:
         c3:cf:db:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+2jlOUxhDzO1maJDOCzWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YmQxYzZjNjg4YTE3NWFiYzhkNTk4ZmJjZDEwN2ZjYTUy
NTRiZGUwHhcNMjUxMjIxMDMwMDQ3WhcNMjUxMjIyMDMwMDQ3WjAzMTEwLwYDVQQD
EyhlODIwNTlmYjYzYTg4ZmY4NTc2MDExOTcxZjNhZDE1MjczNDliOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvzFn9jDb2+AOdc2lt88cE1JIoYh
MkGBihzcbOWBSMV14arD3S3UTM80QoNJBGmowAKCrBlcZpgQ6mhweXrh4YB+Ozwr
THIcswQSQ63/SdHQaoNwzqwyJF8CuY5OzDqAOjIp+LYSAdApR4FgWxmHp8cnFsz2
o64hmwIJSMFvw1zt62gGsnjq4FJXVpTkioiFKla++seHn0qbyqsw5xHtmmV9+eq7
vPdBZQ5QUrLyxDZyjUQQ3maq48hWbNsIfj5gGdq4EgPDrdrnxw9tslYA8oY4I0Vt
1we3Uic7RBUo9gNG/i7lEXi06ZB6uTMjTVJhgm7nmqXgj7Zw4Kv8weGjpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOggWftjqI/4V2ARlx860VJzSbmcMB8GA1UdIwQY
MBaAFHi9HGxoihdavI1Zj7zRB/ylJUveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgt
YzFmM2I5ZWRlNGRiLzEvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMmI0YTItMmIyZi00ZjZhLTliNDgtYzFmM2I5ZWRlNGRi
LzEvZUwwY2JHaUtGMXE4alZtUHZORUhfS1VsUzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdqt8CEQ
zW6bCfMGkiGVyuHBsN27Ep2Ll4cCcFviBtjqfkve0dZQjx4XGngZ54CNsEjKlkCU
vbhFQvskQr+jXfTy6+/g1RNiexp2Hjk1gfZcnDxRqY56jDJIAZjGMMo33rtl3jBq
GjGwUP8s0NTuXiIDKALDv1dJqLPZ+xOeWtLhbQ88BGepLbW3SVFDWmseoYh7P0LY
k2bdIjM4pKunCSENqiezx9ZuSNLgFOIjnrIAMMIhIJ2WHiBbs1XYrOlwVhGd4/Ko
fcHy7Cu5hDyPHaZcOzi9Vm5QPh5EMGBIWxIfsg970PjYTf7B6JlqJT7KhHqLUCPi
OpXHmH/cw8/blA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:57:41 2025 by rpki-client