This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File:                     e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier:          GCZFu8gXrHcBNdm7B3AEk98F4C/SzFil//PCVYC1aPs=
Subject key identifier:   5F:94:EF:B7:C5:62:8A:B8:0E:54:3B:00:57:D1:33:F3:7C:53:4F:C3
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer:       /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial:       019B3C7EC3CB1C42D5B56B16298C7D0DA1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number:          1789
Signing time:             Sat 20 Dec 2025 16:01:39 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:39 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:39 +0000
Files and hashes:         1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
                          2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
                          3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: 5v18f6HAEHHGTkD2z07n+UsHQ2mXTKRqlv5CpDm7te8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:c3:cb:1c:42:d5:b5:6b:16:29:8c:7d:0d:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
        Validity
            Not Before: Dec 20 16:01:39 2025 GMT
            Not After : Dec 21 16:01:39 2025 GMT
        Subject: CN=5f94efb7c5628ab80e543b0057d133f37c534fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:90:a1:90:28:93:4e:89:17:c9:0f:32:62:
                    bf:fb:84:f1:73:6d:f8:e5:8a:be:ff:51:68:b2:e6:
                    34:50:ec:d7:ef:de:1e:3b:5e:29:92:64:91:cd:22:
                    3a:3e:f2:a8:14:f0:89:a2:13:7f:9f:d3:ce:f8:01:
                    f5:5f:7d:4a:d1:02:27:14:c5:a9:c8:f4:14:26:85:
                    31:22:b1:bd:0e:45:73:4d:4c:df:a4:d9:fc:aa:ff:
                    74:9f:cf:b4:72:5c:7c:95:8b:d0:e7:79:13:1e:03:
                    f4:12:fc:e8:d1:78:05:0c:43:e7:34:bf:04:6d:7e:
                    5b:f9:d7:98:0f:43:71:52:cc:07:5d:d4:f7:be:84:
                    00:04:5c:2e:c5:83:2a:7c:7b:85:79:65:58:48:75:
                    50:20:24:83:78:ef:e5:8f:e6:cd:a3:30:93:98:98:
                    fb:e6:9c:da:65:21:3b:67:47:06:d0:34:4f:c8:4b:
                    b4:94:de:5b:69:b5:65:f8:f8:52:ff:17:39:ad:3d:
                    e9:84:c4:69:61:81:44:17:2b:e0:5c:c4:5d:9f:6b:
                    cf:b8:f3:8b:60:32:bf:3b:73:b0:76:ec:62:e1:1c:
                    60:6c:b1:aa:d1:15:02:b7:1d:76:1a:ed:ff:14:c5:
                    c3:c8:20:48:f6:74:42:6d:7e:c4:a0:4c:1c:9e:8c:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:94:EF:B7:C5:62:8A:B8:0E:54:3B:00:57:D1:33:F3:7C:53:4F:C3
            X509v3 Authority Key Identifier:
                keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:8d:a9:88:68:68:b1:9e:67:98:cb:35:06:54:05:ff:81:
         0f:2f:2f:4b:aa:92:91:27:f8:57:ef:59:c0:48:99:b3:f6:a5:
         c2:fe:df:ec:1a:f5:01:3a:51:6b:7c:32:d3:9f:53:0b:8f:89:
         cc:ec:2f:50:3c:b5:b1:6e:61:3d:33:ae:55:2a:3a:ff:2e:ba:
         77:05:5a:d4:6b:80:06:e7:93:a5:c5:fa:2e:1a:be:87:54:35:
         a2:91:40:ff:dd:6a:5e:e6:96:6b:f6:9f:61:fb:8e:f7:80:b6:
         17:d5:de:62:76:d8:be:9d:6e:aa:12:4a:c6:ae:13:e7:b0:f2:
         0b:02:b2:c2:7f:04:7f:ec:d6:6b:ec:1b:e1:ea:e0:86:cc:9d:
         6f:fe:20:5a:a6:34:6e:34:9e:73:dc:c8:e7:29:ad:df:ad:55:
         29:4a:e0:c0:6d:c4:85:ef:1c:97:1c:29:3d:e0:67:ea:68:3c:
         ed:d8:7b:d7:08:28:95:da:51:83:06:21:7f:f3:89:8b:dc:5f:
         91:84:8f:fe:18:e1:54:14:93:46:6e:22:dd:1d:e7:e1:b0:5d:
         a9:3a:47:50:a9:ce:7b:ab:49:df:31:18:84:52:68:ad:0d:f8:
         fb:83:d3:67:8f:cf:fb:49:63:ed:c2:1f:b9:4e:cf:18:4f:e8:
         85:1b:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:46:03 2025 by rpki-client