This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          Ub1GQ3Dj55ZczlBbd6TyXfGRkf1ZCsokjE9238QO5T4=
Subject key identifier:   A6:FC:86:31:DE:28:32:02:92:EF:C7:C3:49:FD:B8:1D:19:54:BD:B0
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       019B3CEC6396A9696DF1C53F8FBF0DAAB882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          107E
Signing time:             Sat 20 Dec 2025 18:01:23 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:23 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:23 +0000
Files and hashes:         1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
                          2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: WshNs8yHVsYX76Uhrikk5DeMRJzseuo+lufG45e2RRc=)
                          3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
                          4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:63:96:a9:69:6d:f1:c5:3f:8f:bf:0d:aa:b8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: Dec 20 18:01:23 2025 GMT
            Not After : Dec 21 18:01:23 2025 GMT
        Subject: CN=a6fc8631de28320292efc7c349fdb81d1954bdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:01:1b:7e:1d:71:e2:c4:62:65:a6:26:52:
                    49:c7:7a:ae:59:e0:c5:22:10:db:91:d1:83:11:c4:
                    56:e2:23:9c:46:d1:1c:d3:84:44:ae:81:af:df:de:
                    cc:52:43:e6:3d:9d:db:19:35:e3:fc:e1:02:60:04:
                    0d:1c:cd:0e:b1:5b:5e:f5:1f:45:dc:ad:cb:8f:a8:
                    09:a9:7f:10:52:9e:5e:6e:4e:29:bd:4a:82:02:43:
                    09:db:fd:b3:74:52:17:15:86:48:b3:65:6e:e8:d8:
                    d2:0f:97:1f:db:9d:93:b5:69:13:20:b8:81:fa:3b:
                    0f:4c:3e:e7:21:47:c3:d6:d4:47:fd:2d:17:01:70:
                    ec:8b:c8:7d:c6:bf:58:67:e4:aa:f2:4d:a0:70:a1:
                    20:25:ac:57:db:68:64:77:47:9f:9f:79:7a:0a:b0:
                    0c:11:be:46:7a:32:14:f3:1a:52:f2:a7:74:6d:08:
                    d0:26:d5:5f:8d:45:29:e5:e4:86:91:9b:32:83:1c:
                    99:01:25:87:5a:f6:f3:5b:79:68:f0:19:5e:11:4a:
                    42:d8:a2:63:2f:ff:29:88:30:52:33:6a:1f:2c:c7:
                    d6:11:8d:cd:bf:f2:a5:75:a9:03:7d:50:d6:4c:54:
                    1c:bd:49:06:8a:ab:3f:3b:d7:9a:25:60:53:2d:ce:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:86:31:DE:28:32:02:92:EF:C7:C3:49:FD:B8:1D:19:54:BD:B0
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:13:b8:ff:08:f0:3b:53:72:ac:bf:c7:0f:e4:ad:2f:34:01:
         b1:a5:17:3f:26:52:c2:f9:d1:d0:29:76:85:04:4d:fa:d3:14:
         dc:48:33:59:90:f1:5e:2e:f1:ea:6f:85:c7:70:a3:f7:4e:e4:
         93:52:d4:92:d8:e9:8a:59:f0:7a:ce:b4:05:80:f1:54:6b:18:
         03:c5:e7:b4:b5:98:ab:b3:93:b4:03:23:64:fb:d0:54:e8:f4:
         bf:44:33:e3:5e:b6:77:c4:05:fb:62:9c:a0:3d:f6:d0:a6:84:
         d6:cc:ba:5e:43:59:d2:13:3b:5c:ea:ed:ac:d8:ad:d6:fe:84:
         db:73:a9:78:eb:0e:d4:92:43:0f:45:10:4a:35:c1:2e:2d:f3:
         39:83:30:7a:4e:88:bc:83:e2:81:c1:bf:1a:78:63:47:f2:be:
         db:9e:08:8c:a3:d8:98:4b:a1:8d:e3:75:05:a2:b4:bc:8a:0d:
         91:b6:70:b3:71:9f:bc:90:f3:b5:11:b9:66:08:88:8b:8f:32:
         4f:e4:13:90:62:eb:d8:ff:28:8d:1b:ca:50:1a:c3:ed:a3:07:
         5d:b8:f6:cb:04:68:b6:a1:ec:43:ab:f8:fa:d1:64:56:12:c2:
         42:ae:90:75:25:92:26:6c:31:47:c9:4e:d6:67:cc:57:78:f0:
         ac:46:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:52:54 2025 by rpki-client