This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          vtnF1upcNQ3mcfW5tc1ElD1dZrK0mToKBiSq9vReQu0=
Subject key identifier:   77:37:EA:BA:AE:11:5B:C8:10:B0:66:63:40:30:A7:39:6C:67:DF:DB
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019B2965388F35EB7179EA2D815CED98CDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          03CD
Signing time:             Tue 16 Dec 2025 23:00:57 +0000
Manifest this update:     Tue 16 Dec 2025 23:00:57 +0000
Manifest next update:     Wed 17 Dec 2025 23:00:57 +0000
Files and hashes:         1: 0b5iGIeuo2DKMNvHl9YT-o9ecPk.roa (hash: /wSlkj/hp/zdqNdystfvelHxMMMnIXaQ57KuV+lO360=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: olTiciPu87vk9Hie0qBJy5ww5yYykC9djdDJjWdDgyI=)
                          3: FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa (hash: nX+U0OE3yN8KGFoYzRWDUrILvEVuMqT3N2aNA/PsHZU=)
                          4: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
                          5: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          6: cQH95dkte5Usdju-IQ199DJqvjY.roa (hash: 7+1NXHOiz3SkJ2u53PJnA3DPJ+3khS8O93na/I4cju8=)
                          7: daT_tlHA6Qk4P5c_mAKg_30bQto.roa (hash: 8QeryI1AvWB8IxUm5wUjKihb2jduD7+5c0+oE2ozl40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:65:38:8f:35:eb:71:79:ea:2d:81:5c:ed:98:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Dec 16 23:00:57 2025 GMT
            Not After : Dec 17 23:00:57 2025 GMT
        Subject: CN=7737eabaae115bc810b066634030a7396c67dfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:dc:5d:24:cd:10:e5:54:87:69:c3:74:d5:
                    f4:85:b0:7f:32:0a:67:a7:e8:75:73:f5:98:a3:a7:
                    a8:ad:8e:81:6f:57:c5:c8:e4:c8:85:61:f3:55:98:
                    9c:f4:4a:06:9d:0f:0d:a6:36:36:d6:85:57:db:de:
                    19:33:36:88:00:0c:d4:88:57:5a:97:b3:3e:e3:d2:
                    79:d4:44:8a:9b:29:a7:dc:b7:1d:80:f4:00:d8:c7:
                    61:c0:8a:89:b5:fd:0b:5b:03:68:f0:fc:0e:ed:b2:
                    e5:9e:83:ba:2a:8b:52:31:bc:5a:4b:fa:80:26:28:
                    c2:59:e2:82:59:3d:77:23:51:2f:40:1c:cc:17:f1:
                    84:7b:81:07:6b:c4:5b:80:df:af:07:4b:2d:44:56:
                    87:76:be:b3:c0:dc:30:dd:89:05:b1:4e:1f:50:74:
                    9c:79:81:db:ac:15:c5:1b:ee:07:a5:8f:35:04:79:
                    da:1b:71:5d:dc:fb:57:3d:7d:a4:71:86:35:c4:1d:
                    eb:17:1a:1d:92:40:86:58:6e:d3:81:4f:bf:7c:ee:
                    4b:04:97:0d:4e:c6:01:13:e6:ae:fb:a4:bb:f8:6b:
                    13:a8:f4:29:ca:af:ef:a5:61:f7:1f:e6:86:54:c0:
                    50:16:f6:89:f9:5d:2f:0b:cb:f1:34:25:4b:2f:46:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:EA:BA:AE:11:5B:C8:10:B0:66:63:40:30:A7:39:6C:67:DF:DB
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:f6:08:c4:38:39:3b:95:e7:c8:e1:b8:a1:e5:46:e4:ec:
         34:47:72:25:fc:c6:90:42:25:e8:b2:54:dd:fc:7a:07:5c:dd:
         a7:07:02:5f:3a:66:0f:ba:e8:5c:7d:f5:6e:f8:02:66:f0:70:
         ba:c3:11:b4:14:6b:e3:60:10:de:82:81:4d:59:10:51:dc:87:
         4c:c7:88:40:c6:da:27:0a:3b:62:4d:19:19:38:b9:ef:f4:13:
         1c:fe:76:7f:42:2c:25:94:ed:46:82:f8:04:bd:ee:a2:4a:e2:
         83:93:1d:c0:d6:e9:28:cb:a6:82:8d:b7:b8:e3:7c:b3:c9:b8:
         2a:a0:90:d7:6c:ca:c8:d6:2d:22:3f:51:87:75:05:43:70:3c:
         62:df:9d:ec:5e:5f:d8:b6:d2:b0:c3:69:f5:d0:ab:ae:34:52:
         36:88:f5:c1:a2:86:ae:77:bb:eb:d2:ec:69:2c:db:a7:c5:48:
         e7:80:5b:07:8f:3e:59:50:09:ce:7e:2f:ee:df:dc:b2:ad:0f:
         73:14:62:3b:2c:03:b4:79:1a:ec:9c:17:bf:39:b5:98:e4:68:
         a5:01:36:75:25:40:8e:47:b5:b0:c5:7d:b3:ac:a6:c1:7e:c9:
         27:c4:bc:55:93:27:89:d4:05:7b:ba:68:b7:07:18:bf:e7:2f:
         4b:30:13:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZspZTiPNetxeeotgVztmM3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjUxMjE2MjMwMDU3WhcNMjUxMjE3MjMwMDU3WjAzMTEwLwYDVQQD
Eyg3NzM3ZWFiYWFlMTE1YmM4MTBiMDY2NjM0MDMwYTczOTZjNjdkZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8TcXSTNEOVUh2nDdNX0hbB/Mgpn
p+h1c/WYo6eorY6Bb1fFyOTIhWHzVZic9EoGnQ8NpjY21oVX294ZMzaIAAzUiFda
l7M+49J51ESKmymn3LcdgPQA2MdhwIqJtf0LWwNo8PwO7bLlnoO6KotSMbxaS/qA
JijCWeKCWT13I1EvQBzMF/GEe4EHa8RbgN+vB0stRFaHdr6zwNww3YkFsU4fUHSc
eYHbrBXFG+4HpY81BHnaG3Fd3PtXPX2kcYY1xB3rFxodkkCGWG7TgU+/fO5LBJcN
TsYBE+au+6S7+GsTqPQpyq/vpWH3H+aGVMBQFvaJ+V0vC8vxNCVLL0YyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc36rquEVvIELBmY0AwpzlsZ9/bMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevj2CMQ4
OTuV58jhuKHlRuTsNEdyJfzGkEIl6LJU3fx6B1zdpwcCXzpmD7roXH31bvgCZvBw
usMRtBRr42AQ3oKBTVkQUdyHTMeIQMbaJwo7Yk0ZGTi57/QTHP52f0IsJZTtRoL4
BL3uokrig5MdwNbpKMumgo23uON8s8m4KqCQ12zKyNYtIj9Rh3UFQ3A8Yt+d7F5f
2LbSsMNp9dCrrjRSNoj1waKGrne769LsaSzbp8VI54BbB48+WVAJzn4v7t/csq0P
cxRiOywDtHka7JwXvzm1mORopQE2dSVAjke1sMV9s6ymwX7JJ8S8VZMnidQFe7po
twcYv+cvSzAT8A==
-----END CERTIFICATE-----
Generated at Wed Dec 17 00:59:48 2025 by rpki-client