This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
File:                     e_OebrMTHs883c0MnjeMNS2kH8I.mft (raw, json)
Hash identifier:          WKOFi/XJS9WpvG878MhPPHPsXea9BKb0jXnSYC2gAQY=
Subject key identifier:   A4:E8:2E:1A:F2:42:63:57:EC:E7:2E:2B:0B:90:D1:92:30:A2:1A:0B
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Certificate issuer:       /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial:       019B3C7E16ADE8BBB1BE36A98332D4F6A926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
Manifest number:          10F9
Signing time:             Sat 20 Dec 2025 16:00:54 +0000
Manifest this update:     Sat 20 Dec 2025 16:00:54 +0000
Manifest next update:     Sun 21 Dec 2025 16:00:54 +0000
Files and hashes:         1: UbCWmkTBKtMgqtYfftK4bzNkfjc.roa (hash: 2USUqiqyvmda1iLGBaPyJ2mFdfz8AiGFv7Y7tVUma2g=)
                          2: e_OebrMTHs883c0MnjeMNS2kH8I.crl (hash: Lk/PiRiCzTGmcqoD6FjeOe2HhQVgtmusJnfON4ubFC4=)
                          3: vAhoECj76DxTiQ3yLLf6mu-_BqI.roa (hash: nCQBvqDRV7DEKusg0hBSa9SwoVzc4dU3/3Bre1jok34=)
                          4: xZRqK0ehAUNFfp7bd5x7WM7WU48.roa (hash: RKiSJS4ui6TI89oyaWSjQ9KPJJo62REtrxZnTIi0/mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:16:ad:e8:bb:b1:be:36:a9:83:32:d4:f6:a9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
        Validity
            Not Before: Dec 20 16:00:54 2025 GMT
            Not After : Dec 21 16:00:54 2025 GMT
        Subject: CN=a4e82e1af2426357ece72e2b0b90d19230a21a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:a0:02:e2:9e:72:ff:39:d6:38:11:f1:a0:
                    bb:5f:79:61:03:fd:f1:9b:41:48:c3:86:d9:bf:41:
                    47:aa:1d:34:97:0f:8e:8e:23:df:a2:66:30:9f:fc:
                    9b:4f:23:37:d6:54:27:51:72:17:2d:d0:4d:eb:24:
                    e8:2d:3d:83:ed:e9:36:52:9c:52:3a:6f:0d:63:64:
                    10:5a:36:7e:da:a7:02:d3:82:9d:c7:f6:51:54:e9:
                    28:63:5c:ad:5b:05:d8:8a:14:08:25:4c:8a:e0:bf:
                    5a:b7:de:bb:28:9f:eb:b7:05:7c:d9:f8:d0:91:ad:
                    5c:1a:7b:08:57:d9:7d:b7:5f:87:a6:9a:76:c6:20:
                    d9:5b:15:e8:57:b6:52:3b:c8:b1:ef:b4:4c:39:e8:
                    2b:6f:e1:e9:ba:12:b4:f5:d6:36:00:91:99:4c:a2:
                    7b:23:60:ce:8b:76:d4:99:b4:16:9b:98:0b:06:59:
                    9d:18:ce:aa:ce:73:f1:45:37:46:8c:5f:93:c3:23:
                    c2:b2:c7:31:92:96:67:10:79:06:3f:bc:e7:99:88:
                    82:31:34:69:a0:9a:75:04:0e:42:3a:f3:4e:67:d1:
                    83:79:a6:7a:93:8f:0e:6a:9a:82:51:9d:6f:13:68:
                    e1:b3:2a:d6:3f:c6:e4:bc:92:79:8b:09:74:aa:90:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:2E:1A:F2:42:63:57:EC:E7:2E:2B:0B:90:D1:92:30:A2:1A:0B
            X509v3 Authority Key Identifier:
                keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d1:c7:ba:99:fc:b0:62:ed:69:7d:42:75:22:12:f6:ff:8a:
         9d:48:c6:e7:ef:cd:87:7e:5f:b3:fa:98:47:d9:7a:c3:ae:75:
         a9:7b:cc:e1:1a:56:86:f0:27:43:33:16:2a:70:60:71:7b:a0:
         fc:8c:67:d2:51:eb:19:85:31:bb:88:95:9e:8e:7b:0c:34:34:
         e2:30:a6:a0:83:44:ef:26:ee:20:ce:5e:55:71:82:ff:6a:85:
         3a:5c:2c:6c:ea:7a:0b:c0:da:a3:47:af:78:bd:3f:09:58:d1:
         77:22:4d:e7:3a:6a:bd:c9:17:21:46:1b:92:a5:4c:75:30:a0:
         58:a4:ef:d0:81:f1:9d:a8:8a:29:38:dc:ee:d7:23:7b:d5:b0:
         f6:df:d7:89:92:7f:9f:c0:15:4b:c3:92:03:2c:58:16:f4:68:
         f3:83:bd:91:d2:61:e5:f1:a6:97:16:ca:91:9a:b1:36:c4:ee:
         5b:a3:1c:6a:b2:ee:dc:26:30:24:eb:ff:92:19:f9:87:d7:c1:
         b7:11:ef:a0:e9:ed:8d:fd:dc:8b:85:bf:30:38:6b:ea:4a:94:
         16:7c:18:2e:82:c4:ab:ce:b3:8a:83:0c:e3:d6:df:f6:25:21:
         1c:6b:fe:3b:29:e8:ab:6c:bd:ae:f1:fc:8e:62:ac:92:cb:cb:
         73:26:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:02:44 2025 by rpki-client