This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
File:                     EneXY60_H0taSgVSxgOUlrz_OlQ.mft (raw, json)
Hash identifier:          pQTjmBLqp6wvzp24vSuRf48yllOJATAa0MbKxFo/BDg=
Subject key identifier:   91:B3:22:28:19:86:1A:A4:5B:3B:74:3E:7B:6C:A5:E1:00:14:44:E3
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Certificate issuer:       /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial:       019B5A1B124D8A39B9EB7B54D895AD813BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
Manifest number:          0685
Signing time:             Fri 26 Dec 2025 10:01:22 +0000
Manifest this update:     Fri 26 Dec 2025 10:01:22 +0000
Manifest next update:     Sat 27 Dec 2025 10:01:22 +0000
Files and hashes:         1: EneXY60_H0taSgVSxgOUlrz_OlQ.crl (hash: z9vyyNFWQZofk929cskJbcjmD/DJNo1+oq7UfFxAYhY=)
                          2: X6geWX5nM159UJnYLrAlkyag0CM.roa (hash: i2/ukSqH8f8rPwnYXz8bpqJPbVxP6Pdogw7nGkBUWWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1b:12:4d:8a:39:b9:eb:7b:54:d8:95:ad:81:3b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
        Validity
            Not Before: Dec 26 10:01:22 2025 GMT
            Not After : Dec 27 10:01:22 2025 GMT
        Subject: CN=91b3222819861aa45b3b743e7b6ca5e1001444e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:c5:57:e0:57:e9:d8:b0:c0:22:4a:fa:54:
                    56:6f:f2:83:52:f1:04:ca:2a:d1:dd:d1:ef:42:ce:
                    47:4d:42:86:cb:6d:50:58:f5:8b:d5:10:c5:33:fa:
                    85:1b:89:64:d0:fb:64:76:c8:d0:7b:8b:be:a4:f0:
                    0f:94:1b:b0:34:3f:1b:78:cf:03:27:e1:ce:08:57:
                    57:c3:54:17:26:5b:67:5a:ec:a3:ca:18:8c:ca:41:
                    58:04:0a:ff:6e:3b:0d:24:4e:3d:53:70:33:85:96:
                    6f:87:3c:3f:5b:31:29:45:37:f2:47:e6:3a:ce:a9:
                    02:60:2e:20:b9:b9:59:df:a7:61:09:4a:0b:85:90:
                    91:32:98:6a:35:79:fc:b8:46:76:93:30:30:6c:b6:
                    ee:d6:70:c6:fb:a5:e9:f0:cf:db:3b:51:f3:2f:c8:
                    3c:03:a0:31:3e:bc:22:4f:01:fc:a6:08:3e:7a:75:
                    14:5f:47:d1:69:36:af:96:af:0f:00:a2:fc:5c:80:
                    82:e4:6d:bb:df:26:55:7e:d4:11:e4:86:6d:13:f0:
                    cb:2c:bd:10:a9:de:90:1b:11:11:29:6d:db:8e:3b:
                    52:05:eb:c8:cd:d3:5c:9a:36:4f:3d:b7:4c:c5:6a:
                    04:7f:1b:23:da:b3:d7:65:ea:e9:71:a5:10:56:65:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:22:28:19:86:1A:A4:5B:3B:74:3E:7B:6C:A5:E1:00:14:44:E3
            X509v3 Authority Key Identifier:
                keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:27:e0:96:32:2d:ef:60:cb:2f:2e:d8:0f:3e:7e:a0:60:d7:
         d9:c1:ff:27:04:d5:76:3b:bd:ba:17:ea:c6:75:37:c7:8f:dd:
         73:c1:26:58:94:52:7e:ed:5a:b8:c1:50:0e:c7:57:48:c9:3f:
         81:47:ee:81:cb:62:e3:33:d1:c2:18:dd:f7:b2:25:c6:92:f5:
         bd:99:9a:42:96:dd:b4:8e:b6:9a:87:c8:7f:5d:11:ab:41:a0:
         a6:95:a9:5a:da:de:d2:31:af:7d:68:78:42:07:25:c4:dd:72:
         19:86:a6:36:ac:bc:07:cf:80:4c:35:a5:1d:25:e8:79:ba:e5:
         d5:56:22:11:2c:d1:29:f4:cd:11:6b:9a:0d:df:e0:55:9e:67:
         9d:40:58:06:e7:d5:ac:e7:1e:0e:68:d5:b4:bd:78:f7:21:6e:
         0c:92:eb:64:1d:61:e8:d5:68:1c:bb:c0:14:94:1a:dc:c1:de:
         4a:02:9c:a2:db:2c:47:56:2b:77:fa:1c:3b:f2:a5:ef:89:55:
         68:0a:a2:8f:3f:51:25:48:d2:5a:05:d4:96:d1:08:73:59:4d:
         ac:2b:cf:9f:6f:cb:3e:c3:5d:ba:e1:df:21:fe:cc:c6:f8:e3:
         0f:dd:79:f1:ee:fc:68:7b:1e:67:06:f6:d3:dc:70:ea:52:73:
         e7:b3:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:03:27 2025 by rpki-client