This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File:                     erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier:          YQoFa3y/ok6cgDcqJzipDqSXz6jkYdmH6iWAP9DEx4U=
Subject key identifier:   C3:E6:C5:C6:EC:70:C6:69:71:49:F6:40:B1:2F:0E:82:46:BD:F2:C2
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer:       /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial:       019B43933E8B8703135537C8A1052663F5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number:          1747
Signing time:             Mon 22 Dec 2025 01:01:21 +0000
Manifest this update:     Mon 22 Dec 2025 01:01:21 +0000
Manifest next update:     Tue 23 Dec 2025 01:01:21 +0000
Files and hashes:         1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
                          2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: ZotjK3npuAntXXNRH89fkKqJvGNGHIMk3ysRHjgu14s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:93:3e:8b:87:03:13:55:37:c8:a1:05:26:63:f5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
        Validity
            Not Before: Dec 22 01:01:21 2025 GMT
            Not After : Dec 23 01:01:21 2025 GMT
        Subject: CN=c3e6c5c6ec70c6697149f640b12f0e8246bdf2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:9c:43:65:ae:a0:d6:75:69:3e:1d:e8:46:
                    fb:41:7d:ec:26:14:d4:aa:0a:ce:8e:0b:0a:ae:df:
                    3f:43:06:bd:7c:7c:f0:36:0f:02:e2:52:bf:d4:cd:
                    c5:7c:df:4e:ea:0b:77:bb:25:42:ac:2a:cb:d4:28:
                    98:e2:f5:89:de:de:55:9c:c9:52:8e:85:77:c0:7d:
                    e3:6e:9c:a2:58:3c:55:91:03:51:f3:ec:ff:8a:ea:
                    90:05:c0:a2:ba:79:9c:20:96:d6:32:1e:4e:3e:68:
                    33:2b:92:f6:5b:c0:a5:d1:7b:05:8a:b4:1a:53:b0:
                    f4:be:42:1b:6a:72:e3:8c:de:48:36:ee:40:90:8d:
                    55:e2:08:60:a5:e1:0f:25:4f:2f:99:86:21:11:dc:
                    20:5f:c1:d5:8c:9f:c8:54:1a:62:38:ee:2d:3b:3e:
                    19:13:fc:35:5d:d5:2c:f0:8a:8f:b2:dc:c7:a7:86:
                    a4:f6:54:8d:60:9c:62:77:01:bf:4c:da:47:0f:3c:
                    38:0a:28:b0:25:e3:d0:41:c1:5c:34:fa:0d:7b:15:
                    3e:4f:f1:4c:34:ed:00:b0:74:97:7b:3b:1f:6e:6e:
                    3d:b9:b0:a0:2a:b5:aa:90:f2:3f:15:aa:e7:bb:09:
                    4a:f2:d3:79:18:df:94:21:9b:1b:56:40:ce:9b:ed:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E6:C5:C6:EC:70:C6:69:71:49:F6:40:B1:2F:0E:82:46:BD:F2:C2
            X509v3 Authority Key Identifier:
                keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:11:a3:b9:ac:01:15:e5:f7:a8:8a:86:1a:ec:da:2a:d4:03:
         ff:ad:8b:12:56:d8:e2:83:29:06:49:38:c7:4a:d3:06:11:4c:
         3d:56:e3:cc:af:05:ea:de:79:5a:35:3a:d2:9c:f6:78:18:15:
         5a:1d:f5:c0:82:d4:0b:72:64:92:62:da:af:52:4f:31:0c:5c:
         38:d2:bb:97:b9:ad:d6:d9:e5:9d:27:ea:2c:c8:89:3e:17:40:
         41:5b:07:c4:2d:24:aa:2d:e0:e9:75:c4:ef:e3:c3:a3:c2:7d:
         64:23:4b:4b:d5:48:18:6b:20:7a:b2:b6:be:f4:e7:b2:72:7e:
         26:d7:fe:17:ff:eb:13:17:4c:2f:8f:a9:11:99:ee:ff:2f:88:
         f3:a2:51:4f:7a:97:95:9a:31:bd:6d:1a:38:f7:06:3f:08:f5:
         32:c5:fc:29:10:dd:1f:73:52:6c:ef:46:12:e0:bc:6e:35:e8:
         23:c7:7d:fa:14:a0:8a:8c:21:dd:9e:8c:36:dd:6c:45:1e:d4:
         4b:a0:d7:d2:40:0b:dc:ee:81:63:88:8a:c9:24:28:5a:72:a9:
         a1:c8:93:7e:5d:7b:95:7e:6d:3b:24:84:74:62:d3:bf:a9:51:
         b2:6b:fc:03:97:52:fe:d3:ab:f7:e8:7a:e8:d7:2c:8b:c1:c7:
         0d:f7:dc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDkz6LhwMTVTfIoQUmY/W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjc0YjAxMzA3ZjljM2ZhNzU2MTk2Mzg0MTczMTE1ZTY2
ZTZjNTUwHhcNMjUxMjIyMDEwMTIxWhcNMjUxMjIzMDEwMTIxWjAzMTEwLwYDVQQD
EyhjM2U2YzVjNmVjNzBjNjY5NzE0OWY2NDBiMTJmMGU4MjQ2YmRmMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ScQ2WuoNZ1aT4d6Eb7QX3sJhTU
qgrOjgsKrt8/Qwa9fHzwNg8C4lK/1M3FfN9O6gt3uyVCrCrL1CiY4vWJ3t5VnMlS
joV3wH3jbpyiWDxVkQNR8+z/iuqQBcCiunmcIJbWMh5OPmgzK5L2W8Cl0XsFirQa
U7D0vkIbanLjjN5INu5AkI1V4ghgpeEPJU8vmYYhEdwgX8HVjJ/IVBpiOO4tOz4Z
E/w1XdUs8IqPstzHp4ak9lSNYJxidwG/TNpHDzw4CiiwJePQQcFcNPoNexU+T/FM
NO0AsHSXezsfbm49ubCgKrWqkPI/FarnuwlK8tN5GN+UIZsbVkDOm+3jywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPmxcbscMZpcUn2QLEvDoJGvfLCMB8GA1UdIwQY
MBaAFHq3SwEwf5w/p1YZY4QXMRXmbmxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAt
OWY1Zjc4MzUyNjAwLzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAtOWY1Zjc4MzUyNjAw
LzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBGjuawB
FeX3qIqGGuzaKtQD/62LElbY4oMpBkk4x0rTBhFMPVbjzK8F6t55WjU60pz2eBgV
Wh31wILUC3JkkmLar1JPMQxcONK7l7mt1tnlnSfqLMiJPhdAQVsHxC0kqi3g6XXE
7+PDo8J9ZCNLS9VIGGsgerK2vvTnsnJ+Jtf+F//rExdML4+pEZnu/y+I86JRT3qX
lZoxvW0aOPcGPwj1MsX8KRDdH3NSbO9GEuC8bjXoI8d9+hSgiowh3Z6MNt1sRR7U
S6DX0kAL3O6BY4iKySQoWnKpociTfl17lX5tOySEdGLTv6lRsmv8A5dS/tOr9+h6
6Ncsi8HHDffc5w==
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:32:58 2025 by rpki-client