This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          CWilSqwSHYU7Df1ueTJuTQtYEtay3VH0zYE+wrTibhk=
Subject key identifier:   6F:68:FA:6F:B7:4D:FC:07:22:B1:91:58:CF:E5:7E:17:A8:94:BD:EA
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       019B397CEB4B4A3B61A7E1EFD94F9532DFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0F19
Signing time:             Sat 20 Dec 2025 02:00:46 +0000
Manifest this update:     Sat 20 Dec 2025 02:00:46 +0000
Manifest next update:     Sun 21 Dec 2025 02:00:46 +0000
Files and hashes:         1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: yCUAzOgT4ZdxQw5/EHTu4uEJQjBLSHrulAb8Xl4GJQ0=)
                          3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
                          4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7c:eb:4b:4a:3b:61:a7:e1:ef:d9:4f:95:32:df:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Dec 20 02:00:46 2025 GMT
            Not After : Dec 21 02:00:46 2025 GMT
        Subject: CN=6f68fa6fb74dfc0722b19158cfe57e17a894bdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:85:d5:4f:d5:b0:d1:06:1a:3c:76:49:78:
                    d2:f4:d2:48:6e:7c:00:11:25:db:eb:c0:1d:c5:32:
                    0f:e5:ce:46:f3:d1:a8:22:0c:6d:1d:5e:be:10:d2:
                    5f:e6:4e:35:d7:7d:98:fb:03:d6:2a:ba:f2:c4:d7:
                    33:51:44:ac:05:33:42:41:f1:b9:38:d3:8a:88:25:
                    d0:ed:7b:87:eb:40:34:87:9f:00:60:4f:6e:a7:8f:
                    80:c4:82:8e:c0:a4:1b:63:02:9a:af:ff:80:e3:e2:
                    fa:9e:f2:28:88:b8:fb:36:15:cb:a4:74:d1:37:c1:
                    fc:05:74:2e:b7:5a:22:03:64:ae:7f:fd:de:02:f1:
                    b1:d4:47:9c:f8:0f:4e:9f:4b:47:18:a1:f6:ca:d3:
                    b1:ab:d5:15:d9:58:40:2f:d0:da:3a:8f:b6:67:23:
                    72:88:ad:02:94:f9:e9:31:d7:a1:64:da:e7:dc:4d:
                    e6:1f:04:03:9e:fc:fb:b2:55:89:99:ac:1c:c4:83:
                    90:da:41:22:08:7f:56:16:ec:5e:78:a6:82:ac:f9:
                    0b:93:58:f2:a2:76:96:18:0b:f7:9e:09:b1:c0:1d:
                    5f:77:18:5c:79:83:3d:c6:7e:11:89:a0:11:c5:ff:
                    db:80:eb:1a:81:8e:f1:f3:8f:2f:89:6e:e5:34:68:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:FA:6F:B7:4D:FC:07:22:B1:91:58:CF:E5:7E:17:A8:94:BD:EA
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:55:13:4b:1c:14:8c:11:c1:f8:c5:7b:9d:1d:1d:8c:16:59:
         cd:10:78:a1:4f:e6:bc:d8:a6:d6:24:25:b3:87:9b:20:38:5c:
         cc:62:02:a2:8e:5b:fd:f8:7b:b4:f1:ae:55:64:77:19:e2:4a:
         d6:e6:6b:20:87:a5:40:6a:38:1b:a8:67:dc:b7:00:f2:ad:e6:
         1b:93:25:98:1e:e9:c2:4f:5d:5b:3a:6a:19:2a:1e:30:d5:a0:
         d8:20:4e:31:f5:36:d7:df:e9:f5:bb:e0:80:98:ef:47:cc:05:
         90:d9:de:4d:41:04:5e:04:56:4b:e3:55:74:3c:e8:87:cf:25:
         12:53:7f:25:43:18:44:98:52:e4:5f:0c:fd:5a:5c:8e:4f:d1:
         e8:7d:ac:c7:0b:d1:49:71:d5:df:4b:2c:7b:fd:e9:74:fa:a5:
         a7:ab:83:11:87:49:2c:09:b2:82:43:32:85:7f:52:65:7b:d3:
         98:ee:83:34:e8:88:80:62:6b:67:03:1c:9a:2f:0c:9e:d8:cb:
         f5:0b:2e:23:c9:22:9f:73:ee:20:03:f2:2d:a6:48:a5:c3:1c:
         f4:67:7b:36:a2:3f:ab:7f:42:8a:6c:93:23:45:3c:1c:15:76:
         0f:72:da:05:63:ed:cf:50:da:58:9a:c5:0b:4a:d9:c5:0c:fc:
         8b:cd:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:53:15 2025 by rpki-client