This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          +z1d3qFDFyt6kB7V8Bau1pB4ZdC7wAlzs3hUzs27G4g=
Subject key identifier:   65:E1:74:99:A4:1C:A8:C8:3D:CC:81:1B:B5:DD:1D:83:FA:8E:FC:4E
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       019B5977152D7EF9A060CBE19DC8D67858B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0E61
Signing time:             Fri 26 Dec 2025 07:02:15 +0000
Manifest this update:     Fri 26 Dec 2025 07:02:15 +0000
Manifest next update:     Sat 27 Dec 2025 07:02:15 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: 3xoexGLletD3FwDNGBn/9r35tYw9fxNAOvq3mBgSkBU=)
                          2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:77:15:2d:7e:f9:a0:60:cb:e1:9d:c8:d6:78:58:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Dec 26 07:02:15 2025 GMT
            Not After : Dec 27 07:02:15 2025 GMT
        Subject: CN=65e17499a41ca8c83dcc811bb5dd1d83fa8efc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:85:67:3f:f7:13:5f:ed:55:86:64:7d:2d:
                    a0:7c:5f:10:42:50:44:85:86:f4:14:a4:d2:2b:09:
                    7a:3e:a8:e7:43:bf:f3:fc:c5:46:99:e5:f8:d1:be:
                    2e:fe:8c:ca:5e:59:60:52:0b:dd:e6:25:cc:de:e4:
                    0e:fe:3b:c3:70:61:95:f0:38:93:f2:aa:dd:1e:5b:
                    e5:77:8d:24:8c:92:89:fa:ce:17:79:27:70:e8:04:
                    59:e8:a9:17:7b:ab:56:0c:20:e3:40:c4:04:15:59:
                    e3:7a:e7:e7:84:f7:89:a1:bb:88:af:a9:f2:40:2d:
                    b7:80:51:5a:2d:9b:83:f8:cb:20:21:62:6e:4e:22:
                    bc:94:30:c8:1d:a7:aa:58:80:d5:ee:f5:6a:26:17:
                    23:4b:49:53:fb:c6:f8:bd:72:37:c3:03:2f:04:65:
                    f7:12:ff:d6:63:73:95:50:48:7d:41:9a:2f:63:bc:
                    2a:f2:fd:37:91:9a:1e:ea:ac:ba:14:02:7e:3e:1f:
                    d1:6b:23:b4:11:63:79:f5:b5:b7:38:fb:e8:6b:7a:
                    9c:30:6f:bf:99:4b:65:06:0e:63:82:4a:da:2e:12:
                    8b:30:70:94:0d:58:b1:3e:3a:60:92:5c:46:cb:ef:
                    95:43:1c:12:d7:48:4d:78:a5:61:16:bd:23:b1:e6:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E1:74:99:A4:1C:A8:C8:3D:CC:81:1B:B5:DD:1D:83:FA:8E:FC:4E
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:02:2a:00:9f:15:80:13:9d:6a:66:f6:1b:d6:75:a7:3f:
         4c:c3:89:52:b2:ee:c1:4d:51:84:dd:74:c2:fb:a9:34:05:69:
         82:dc:c9:f5:87:37:e1:73:de:ff:7c:c5:5d:5b:c3:a0:9e:25:
         30:a4:9e:55:b9:dc:27:40:54:77:7d:71:e3:8c:8b:48:e7:4c:
         46:d9:03:4d:b8:c3:db:09:3b:54:a2:27:be:17:9a:b6:a7:97:
         06:2f:af:00:19:6e:d3:9c:29:a5:1f:06:68:fd:ea:70:f3:b3:
         0a:73:f2:a3:c9:4f:39:a5:32:c2:94:62:d4:ef:32:ba:ab:16:
         6f:7c:02:dd:0b:19:e3:45:52:28:76:32:a3:fe:db:11:79:57:
         89:3e:98:e2:42:4a:23:a8:72:c6:c4:e9:e9:b3:00:be:e3:30:
         dd:41:e9:45:c6:86:20:ec:40:59:92:f3:88:fc:17:53:5c:e0:
         ef:84:37:ee:04:54:ce:3a:04:a1:cd:1b:ac:8b:91:c2:ee:a4:
         4c:da:a3:81:9a:ba:0e:52:3a:f9:bf:26:f8:c7:3e:9b:2d:04:
         dd:e4:c8:20:db:bd:df:33:27:20:c5:e7:fd:3f:14:7a:2e:ce:
         8c:2b:b1:18:18:29:36:48:14:2e:15:0b:12:e6:e6:c2:fc:2a:
         31:1c:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:15:06 2025 by rpki-client