This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          iP64VPLWMIkYcudeLHm29lwqNqLa3wn8XUKO/Acbe50=
Subject key identifier:   72:32:1C:07:A1:3B:1A:5E:06:D6:B7:86:4F:D5:35:68:46:83:65:C0
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019B3C7F2C276D8908430751A1C5F442F43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          11BD
Signing time:             Sat 20 Dec 2025 16:02:05 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:05 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:05 +0000
Files and hashes:         1: 9KG_X1JcHTmSDP-JQ2rjaLf8dF0.roa (hash: IJsz7QtJODgr4XlSOlR3sVLiifHafwYANxLLuTbye5I=)
                          2: Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa (hash: SaFnthBgRV8E0/cfedWCGZYSk3klgbcSFK1UnXkwx9k=)
                          3: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: aXia+RGXvMYdYU1ph2bQZ0/KKhUROiKLKuP8SDjq3yg=)
                          4: gZB-912_d67R6AKpQ4Eg3AExCoI.roa (hash: 20uFVWh/2FSfkkn7jT72yUsHaqZSGC47MPNXDIzH1b0=)
                          5: oJh0B_eYdHNYoIj-eMSg92GtqiU.roa (hash: VT24FOtWQc/ytG8iILX4ZcZUTmQmuSWh5GjQpAKaEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:2c:27:6d:89:08:43:07:51:a1:c5:f4:42:f4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Dec 20 16:02:05 2025 GMT
            Not After : Dec 21 16:02:05 2025 GMT
        Subject: CN=72321c07a13b1a5e06d6b7864fd53568468365c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:9f:77:fc:84:86:f8:02:dc:d1:55:03:e8:
                    d2:33:e0:43:dc:3b:08:f5:ca:3d:cd:07:bf:ec:e7:
                    9a:2a:8f:bd:93:6b:9e:8d:c6:93:bf:07:d6:a6:bc:
                    85:6b:f4:02:d8:29:f6:e7:7a:f3:26:a3:e6:2e:ee:
                    ef:51:64:83:f3:5d:ae:40:e4:e5:fd:c3:2a:33:d1:
                    01:43:d0:c7:32:31:5e:be:8c:1b:e9:53:ba:c6:c6:
                    7b:0a:62:8b:b3:e3:6c:b5:38:18:65:e1:5c:54:78:
                    41:05:05:55:b1:14:8a:ba:7c:6c:b7:45:b7:ec:c2:
                    46:8b:7c:3a:6a:c9:bc:4f:a1:77:de:68:ad:7c:47:
                    bc:50:63:3e:4d:5b:c4:59:36:84:9f:56:20:49:77:
                    bc:29:ba:09:98:8d:d2:a2:d4:6b:2c:cc:04:c5:d3:
                    b1:de:71:21:a6:62:9d:7e:b4:f7:45:67:d0:94:ea:
                    b3:7e:58:ef:8b:0f:b3:a8:f9:eb:03:ba:8b:ab:53:
                    ae:96:c8:d5:41:0c:fd:c6:a2:cf:ba:89:a5:91:b3:
                    7f:93:7f:c0:a1:07:f5:57:bc:80:4f:ac:b6:e8:e2:
                    16:c9:c7:b3:00:28:4f:ad:cf:b4:8e:aa:60:09:6b:
                    56:a5:48:06:cc:33:d5:b3:f3:6a:43:fb:05:d8:ac:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:1C:07:A1:3B:1A:5E:06:D6:B7:86:4F:D5:35:68:46:83:65:C0
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:d3:c3:64:66:3c:e4:d7:bd:c5:25:50:34:e0:f9:1a:76:
         f0:ee:53:51:b0:b9:4c:95:ab:09:61:10:c6:8b:ba:b2:4e:6c:
         3a:cc:e3:2e:ac:d3:c7:59:5a:df:4e:9b:a8:bc:30:9b:8c:ae:
         7c:91:ca:13:ef:2c:94:ff:d7:68:3b:ae:bc:c7:09:3c:90:cb:
         57:ef:ed:72:b2:86:26:d8:da:01:27:37:1a:c2:a7:94:d1:aa:
         b3:c9:9d:6b:ba:c1:e4:37:48:be:0b:33:d5:20:33:cb:b9:74:
         2a:20:84:e3:ff:fc:54:f8:73:95:61:6a:02:2c:0e:6a:3f:d3:
         82:ba:19:68:dc:ec:52:19:af:40:01:2f:98:ba:71:49:94:b4:
         ac:4f:a6:6a:24:18:9d:de:03:a9:a3:2e:73:2e:09:76:b8:af:
         ab:5f:a7:81:a5:26:1d:11:72:32:41:59:e5:e6:ec:b4:27:e2:
         3e:f5:de:ae:73:fe:c2:c5:c9:72:bc:38:25:96:c4:ea:c2:40:
         b0:bc:f2:e9:62:50:b1:81:0a:0b:97:ff:3b:a7:3a:e1:c4:18:
         79:a7:6b:4c:88:b3:d7:c1:d7:23:b8:be:9d:2d:7d:d0:7f:00:
         76:ba:e7:6f:4b:fe:46:f6:9d:68:b4:fe:76:89:a5:20:5e:6c:
         69:87:86:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8fywnbYkIQwdRocX0QvQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm
MTRiMWUwHhcNMjUxMjIwMTYwMjA1WhcNMjUxMjIxMTYwMjA1WjAzMTEwLwYDVQQD
Eyg3MjMyMWMwN2ExM2IxYTVlMDZkNmI3ODY0ZmQ1MzU2ODQ2ODM2NWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46fd/yEhvgC3NFVA+jSM+BD3DsI
9co9zQe/7OeaKo+9k2uejcaTvwfWpryFa/QC2Cn253rzJqPmLu7vUWSD812uQOTl
/cMqM9EBQ9DHMjFevowb6VO6xsZ7CmKLs+NstTgYZeFcVHhBBQVVsRSKunxst0W3
7MJGi3w6asm8T6F33mitfEe8UGM+TVvEWTaEn1YgSXe8KboJmI3SotRrLMwExdOx
3nEhpmKdfrT3RWfQlOqzfljviw+zqPnrA7qLq1OulsjVQQz9xqLPuomlkbN/k3/A
oQf1V7yAT6y26OIWycezAChPrc+0jqpgCWtWpUgGzDPVs/NqQ/sF2KxMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIyHAehOxpeBta3hk/VNWhGg2XAMB8GA1UdIwQY
MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf87Tw2Rm
POTXvcUlUDTg+Rp28O5TUbC5TJWrCWEQxou6sk5sOszjLqzTx1la306bqLwwm4yu
fJHKE+8slP/XaDuuvMcJPJDLV+/tcrKGJtjaASc3GsKnlNGqs8mda7rB5DdIvgsz
1SAzy7l0KiCE4//8VPhzlWFqAiwOaj/TgroZaNzsUhmvQAEvmLpxSZS0rE+maiQY
nd4DqaMucy4Jdrivq1+ngaUmHRFyMkFZ5ebstCfiPvXernP+wsXJcrw4JZbE6sJA
sLzy6WJQsYEKC5f/O6c64cQYeadrTIiz18HXI7i+nS190H8Adrrnb0v+RvadaLT+
domlIF5saYeG4g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:50:53 2025 by rpki-client