This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File:                     EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier:          WbY8OczT+AowvQexBNLdOgJNLiyf+HDRCiBOgpALoEA=
Subject key identifier:   1C:66:F8:D4:26:6E:1E:0C:53:6C:C6:C9:2B:60:91:FB:60:8B:59:24
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer:       /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial:       019B3E6CE0CE226CD5FF41BBCF616C7325B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number:          1792
Signing time:             Sun 21 Dec 2025 01:01:21 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:21 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:21 +0000
Files and hashes:         1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: IPAbVNIN2EXqBoY9NsUauRbcIs9u1TH1gB5NeDKAik4=)
                          2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
                          3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6c:e0:ce:22:6c:d5:ff:41:bb:cf:61:6c:73:25:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
        Validity
            Not Before: Dec 21 01:01:21 2025 GMT
            Not After : Dec 22 01:01:21 2025 GMT
        Subject: CN=1c66f8d4266e1e0c536cc6c92b6091fb608b5924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:08:fc:ff:25:df:6e:35:8a:e9:ba:5e:3a:e8:
                    d4:5d:f8:06:b4:4c:c1:de:dc:29:4a:dd:bf:d1:72:
                    fb:81:c4:9c:ff:d8:d1:74:d9:8c:86:66:74:50:72:
                    5b:ab:8e:47:58:9d:26:b7:1f:69:10:95:98:0c:f1:
                    27:c5:70:63:7d:b7:fb:dc:05:52:d7:14:be:e7:d3:
                    a0:fc:ed:76:bc:a3:67:03:82:2b:6a:d9:f2:b7:65:
                    84:ac:c9:f2:d5:b1:43:60:c2:fc:8e:30:0b:c2:6c:
                    7d:83:ba:9c:02:ff:f1:26:01:29:f3:c7:af:1f:7d:
                    b2:b1:ee:0e:d8:9a:86:1d:5e:f6:ec:c5:0c:ba:e3:
                    06:db:ad:36:ca:01:3e:7e:00:b2:5a:55:f1:3e:ed:
                    e6:ed:e6:0e:92:ca:54:56:ac:e1:14:3a:21:e6:ae:
                    ee:17:ad:ce:86:32:0e:f9:64:04:23:7b:21:3a:8b:
                    55:28:b7:45:db:2f:6a:e9:83:2b:09:ec:3d:c4:c8:
                    71:e5:75:fc:64:d7:04:e4:61:61:a7:60:66:3b:26:
                    52:34:8c:2f:43:8c:73:1c:d1:54:76:ae:0d:6f:81:
                    4a:f5:b9:ab:04:55:c0:26:4e:78:dc:f2:fb:4c:9f:
                    20:fa:93:51:5f:e0:e7:d3:4e:43:fb:87:4d:2a:3c:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:F8:D4:26:6E:1E:0C:53:6C:C6:C9:2B:60:91:FB:60:8B:59:24
            X509v3 Authority Key Identifier:
                keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:72:80:8d:3e:43:79:96:ed:32:06:67:f1:5b:20:f9:0e:
         0e:8c:99:87:97:10:28:dd:45:93:d6:bf:e5:ed:f4:52:fb:36:
         ba:30:6e:50:83:b4:a8:69:92:7a:50:e0:3e:a0:72:a3:fa:3b:
         d5:d5:5b:82:1d:39:ad:35:2f:95:b6:95:08:ee:87:77:b0:aa:
         ec:84:32:3b:41:91:cb:13:05:aa:76:9e:c6:b9:b2:28:eb:d0:
         c0:47:82:70:0c:80:d1:58:e9:78:10:10:88:1d:26:4e:23:68:
         14:d7:96:92:9a:bf:42:34:d7:5b:29:c7:a5:cc:79:06:f4:8d:
         85:44:e3:ef:9b:8e:dc:db:62:7a:7c:2d:0f:24:70:d0:21:2d:
         9f:18:55:bf:da:09:84:fb:e3:1f:e0:fd:b5:6b:3d:0e:79:1b:
         93:12:08:68:d2:6d:78:60:13:7b:d5:78:bd:2a:81:64:0b:cf:
         92:75:35:b8:00:b6:ba:af:5b:6a:2a:db:52:0a:19:f1:69:08:
         f9:38:af:70:dd:ca:dc:cf:14:9d:56:6a:6f:73:d4:46:66:52:
         44:eb:91:58:37:af:57:7e:28:c1:f0:82:88:ce:a0:17:af:15:
         7b:72:11:21:fc:31:20:31:dc:32:83:bb:b5:08:be:70:bf:77:
         41:ac:32:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bODOImzV/0G7z2FscyW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi
MTg1YmIwHhcNMjUxMjIxMDEwMTIxWhcNMjUxMjIyMDEwMTIxWjAzMTEwLwYDVQQD
EygxYzY2ZjhkNDI2NmUxZTBjNTM2Y2M2YzkyYjYwOTFmYjYwOGI1OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gj8/yXfbjWK6bpeOujUXfgGtEzB
3twpSt2/0XL7gcSc/9jRdNmMhmZ0UHJbq45HWJ0mtx9pEJWYDPEnxXBjfbf73AVS
1xS+59Og/O12vKNnA4Iratnyt2WErMny1bFDYML8jjALwmx9g7qcAv/xJgEp88ev
H32yse4O2JqGHV727MUMuuMG2602ygE+fgCyWlXxPu3m7eYOkspUVqzhFDoh5q7u
F63OhjIO+WQEI3shOotVKLdF2y9q6YMrCew9xMhx5XX8ZNcE5GFhp2BmOyZSNIwv
Q4xzHNFUdq4Nb4FK9bmrBFXAJk543PL7TJ8g+pNRX+Dn005D+4dNKjxHswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxm+NQmbh4MU2zGyStgkftgi1kkMB8GA1UdIwQY
MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt
NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5
LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7VygI0+
Q3mW7TIGZ/FbIPkODoyZh5cQKN1Fk9a/5e30Uvs2ujBuUIO0qGmSelDgPqByo/o7
1dVbgh05rTUvlbaVCO6Hd7Cq7IQyO0GRyxMFqnaexrmyKOvQwEeCcAyA0VjpeBAQ
iB0mTiNoFNeWkpq/QjTXWynHpcx5BvSNhUTj75uO3NtienwtDyRw0CEtnxhVv9oJ
hPvjH+D9tWs9DnkbkxIIaNJteGATe9V4vSqBZAvPknU1uAC2uq9bairbUgoZ8WkI
+TivcN3K3M8UnVZqb3PURmZSROuRWDevV34owfCCiM6gF68Ve3IRIfwxIDHcMoO7
tQi+cL93QawyKw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:09:30 2025 by rpki-client