This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
File:                     EuKAOWRtzDLs61hCj5fMmUuZhXc.mft (raw, json)
Hash identifier:          zSJTxZg/osc77bTIYD8qe3TkGp4uD7qVdUWnwoROBLs=
Subject key identifier:   81:21:33:F8:DC:6E:FA:A9:E7:7F:C4:E7:F2:40:4C:37:BD:52:27:68
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Certificate issuer:       /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial:       019B2F30AE35992A7A54C84119C2937362BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
Manifest number:          89
Signing time:             Thu 18 Dec 2025 02:01:17 +0000
Manifest this update:     Thu 18 Dec 2025 02:01:17 +0000
Manifest next update:     Fri 19 Dec 2025 02:01:17 +0000
Files and hashes:         1: 7SeHePakv-49QV1iivppyY5FGGM.roa (hash: LH5P1T9uSw4R9Uj7sF/hp+4LcLByZVEyPgzphgUmL6o=)
                          2: EuKAOWRtzDLs61hCj5fMmUuZhXc.crl (hash: Cs1IlifgLNFBdAYwJhm5IrPGLOy6Uc+bkDO1+qxTsSw=)
                          3: O2g_KCSHTBtUkTmnZj5xACpZSnI.roa (hash: uP/CG7/+H7QBwYSZ9ySWOvBQiMlDRJGawcJEkDkwNtc=)
                          4: mthvTy4E1EiDk73f3uwFyAG7KJQ.roa (hash: YixVgctcvu1THgjSuBQJDrR+WqI/9yv3o3HH6A442co=)
                          5: sppSM2y7rJT-h7ADD-NU7WDxdyw.roa (hash: 4LbWqx/mTc+oUB9onuqY3e927U8194epwh7XyKhVMwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:ae:35:99:2a:7a:54:c8:41:19:c2:93:73:62:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
        Validity
            Not Before: Dec 18 02:01:17 2025 GMT
            Not After : Dec 19 02:01:17 2025 GMT
        Subject: CN=812133f8dc6efaa9e77fc4e7f2404c37bd522768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:a9:38:48:28:90:98:67:78:e5:df:2a:c2:
                    6f:1b:73:68:d6:a1:d6:40:d3:b1:da:70:53:6f:39:
                    d8:16:b4:74:eb:34:dd:e0:8a:2a:2a:37:9b:1f:20:
                    f4:e2:92:10:99:ea:04:b1:9f:02:51:5c:a5:fe:f2:
                    94:96:e2:7a:56:d6:10:9c:2d:25:83:38:ae:15:03:
                    4b:d6:51:25:c1:a4:02:c1:55:a1:e7:5a:60:d2:21:
                    9b:fc:4d:02:79:3f:6e:41:78:5a:3e:d1:90:3d:19:
                    d0:f2:2d:7c:08:6d:8d:4d:9d:b9:4c:72:dc:1b:ed:
                    f9:84:b8:1a:05:3d:a8:51:d9:68:4d:43:fd:ba:46:
                    e8:0d:dc:4c:d4:2f:63:70:68:9d:f0:97:22:a5:52:
                    01:f3:36:2e:fd:da:b4:04:1c:06:93:b8:b2:0c:1f:
                    59:bd:7b:8a:ed:59:aa:74:b4:83:59:30:84:21:13:
                    91:6b:6f:6f:22:d9:f5:e1:5c:d0:1b:dd:ae:ad:39:
                    e4:81:9f:df:d7:96:0f:10:8d:80:51:25:6d:b6:dc:
                    80:45:b5:3a:5c:44:cf:e4:91:06:bf:e9:39:8d:35:
                    d6:b3:e7:3b:4e:04:5b:2c:e3:fc:2b:2e:0d:96:42:
                    03:59:78:ac:d3:39:02:a8:71:8a:f5:c9:ae:f2:2d:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:21:33:F8:DC:6E:FA:A9:E7:7F:C4:E7:F2:40:4C:37:BD:52:27:68
            X509v3 Authority Key Identifier:
                keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:65:3c:68:3b:ab:cf:d0:95:2f:d0:11:a6:50:26:4a:fe:
         76:38:3c:e3:6e:62:2b:e4:84:00:ba:d1:ae:21:e2:2a:b4:75:
         87:1a:03:14:9a:94:61:73:c5:dc:76:81:a4:10:dd:33:a7:2c:
         71:c0:d7:09:83:29:01:f2:7e:c4:b7:16:e6:ef:a7:ed:85:95:
         6a:fc:30:3a:aa:8d:17:6e:3e:2f:fb:46:60:e0:de:fe:03:27:
         b4:03:ce:7b:8f:20:7b:ba:1c:dc:78:9e:38:e4:e5:44:14:19:
         80:4f:58:3b:d8:27:43:17:a7:17:d4:81:fb:33:b9:d1:87:f9:
         a5:49:43:9c:81:d1:86:4c:68:e5:c7:d4:5d:e3:46:01:31:66:
         04:05:84:8e:a3:23:d3:02:78:c2:28:d5:1a:7e:f5:cf:95:5f:
         5a:4b:21:a6:a9:b9:7e:93:40:10:56:9e:58:6a:e9:d3:2c:bd:
         27:dc:17:b7:0d:86:f1:81:e4:3d:af:91:89:db:7f:96:3c:34:
         be:24:9f:f1:62:52:7b:d2:f0:06:17:49:27:54:a0:41:8a:72:
         78:04:e0:4e:3b:fc:b4:14:11:a7:3b:11:13:79:66:1d:4a:bc:
         fc:10:46:13:73:ab:06:9b:97:f4:63:cb:d7:2d:8c:7e:e2:7c:
         49:d8:c4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvMK41mSp6VMhBGcKTc2K9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTI4MDM5NjQ2ZGNjMzJlY2ViNTg0MjhmOTdjYzk5NGI5
OTg1NzcwHhcNMjUxMjE4MDIwMTE3WhcNMjUxMjE5MDIwMTE3WjAzMTEwLwYDVQQD
Eyg4MTIxMzNmOGRjNmVmYWE5ZTc3ZmM0ZTdmMjQwNGMzN2JkNTIyNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk2pOEgokJhneOXfKsJvG3No1qHW
QNOx2nBTbznYFrR06zTd4IoqKjebHyD04pIQmeoEsZ8CUVyl/vKUluJ6VtYQnC0l
gziuFQNL1lElwaQCwVWh51pg0iGb/E0CeT9uQXhaPtGQPRnQ8i18CG2NTZ25THLc
G+35hLgaBT2oUdloTUP9ukboDdxM1C9jcGid8JcipVIB8zYu/dq0BBwGk7iyDB9Z
vXuK7VmqdLSDWTCEIRORa29vItn14VzQG92urTnkgZ/f15YPEI2AUSVtttyARbU6
XETP5JEGv+k5jTXWs+c7TgRbLOP8Ky4NlkIDWXis0zkCqHGK9cmu8i2C7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEhM/jcbvqp53/E5/JATDe9UidoMB8GA1UdIwQY
MBaAFBLigDlkbcwy7OtYQo+XzJlLmYV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAt
MzZkOTFkYmNmYzQxLzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAtMzZkOTFkYmNmYzQx
LzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkJlPGg7
q8/QlS/QEaZQJkr+djg8425iK+SEALrRriHiKrR1hxoDFJqUYXPF3HaBpBDdM6cs
ccDXCYMpAfJ+xLcW5u+n7YWVavwwOqqNF24+L/tGYODe/gMntAPOe48ge7oc3Hie
OOTlRBQZgE9YO9gnQxenF9SB+zO50Yf5pUlDnIHRhkxo5cfUXeNGATFmBAWEjqMj
0wJ4wijVGn71z5VfWkshpqm5fpNAEFaeWGrp0yy9J9wXtw2G8YHkPa+Ridt/ljw0
viSf8WJSe9LwBhdJJ1SgQYpyeATgTjv8tBQRpzsRE3lmHUq8/BBGE3OrBpuX9GPL
1y2MfuJ8SdjEMQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 03:26:03 2025 by rpki-client