This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File:                     E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier:          SvSehQ9espK8w5Wz/gINH0zAB4hHG8qYj+0uk4Pvs4A=
Subject key identifier:   DE:49:D0:C3:FA:11:9D:5D:EC:F8:12:89:EF:35:38:53:0C:39:BA:44
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       019B1FF3F76C94702DDCBFE5C512AD734A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number:          1357
Signing time:             Mon 15 Dec 2025 03:00:40 +0000
Manifest this update:     Mon 15 Dec 2025 03:00:40 +0000
Manifest next update:     Tue 16 Dec 2025 03:00:40 +0000
Files and hashes:         1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: /Ijl6Fp2lXTifFBrpnS5w7yjNKOvPsqCFMY7Mkj7x5I=)
                          2: RAwW8IE1n9sVekuiCyEikAL5HtE.roa (hash: R2iI0k0l7koAhrOpg0u96qvpaz2J9avElrVz1cFdebo=)
                          3: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (hash: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:f3:f7:6c:94:70:2d:dc:bf:e5:c5:12:ad:73:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Dec 15 03:00:40 2025 GMT
            Not After : Dec 16 03:00:40 2025 GMT
        Subject: CN=de49d0c3fa119d5decf81289ef3538530c39ba44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:2c:9a:c9:f3:bf:e2:6e:05:2e:5a:fc:49:
                    27:bd:49:eb:04:8b:0b:45:bf:32:9b:b5:40:81:f7:
                    93:80:e0:42:1b:a9:b7:55:12:0d:cb:c3:be:33:f1:
                    5d:c0:a1:41:70:9b:3b:d5:27:26:af:0e:26:b7:2f:
                    ad:40:d7:a0:a5:b6:48:c1:86:f9:4c:51:58:7d:7d:
                    fa:7a:77:b7:e9:94:12:98:6f:18:d6:d9:9d:72:21:
                    a1:94:75:30:56:17:f7:ed:85:e2:fd:ae:fe:ba:b1:
                    97:69:6b:c1:b1:93:11:b4:4f:b5:5b:28:d6:47:24:
                    84:38:fd:d7:b4:77:d2:c6:08:72:a9:3b:54:0a:62:
                    01:62:6a:94:ad:7b:f0:e1:47:20:37:d0:bb:bd:31:
                    3d:18:5b:62:d2:b2:0c:d9:14:a5:c1:1f:92:cd:e7:
                    9e:99:6f:91:76:dc:34:13:04:8b:2f:20:a3:19:46:
                    eb:64:69:37:66:fb:2c:5d:dc:5a:71:a6:b5:f8:b4:
                    8a:83:9a:7d:fa:0e:b8:90:b8:8b:7d:38:2d:c1:3e:
                    6b:04:35:a9:bb:5e:a2:e1:85:8b:98:91:4a:e7:e6:
                    52:95:70:a3:19:f6:78:6b:26:1c:a4:90:5e:73:34:
                    d2:76:f8:6d:88:33:66:8a:d7:a0:33:20:37:8a:a5:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:D0:C3:FA:11:9D:5D:EC:F8:12:89:EF:35:38:53:0C:39:BA:44
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:db:08:ae:d8:e5:4e:03:30:68:80:bb:a6:47:a0:70:16:
         1c:df:3c:0c:fa:59:57:39:21:83:ff:d5:db:2e:3c:4f:0e:8f:
         a2:42:5c:3b:15:b4:81:2a:df:f1:79:78:75:0d:44:60:d5:17:
         4f:b7:89:8e:7a:41:45:6c:f2:e2:33:09:32:be:43:65:8e:e4:
         4d:05:2e:e3:77:70:0a:09:e2:e7:e4:20:f0:4f:4f:c6:ca:54:
         4f:da:8e:2d:ef:0d:28:44:ef:38:14:62:5e:97:cd:6b:32:9e:
         ea:bc:67:7e:9e:df:f9:c0:7a:5f:68:fb:23:45:bb:26:26:b4:
         ec:4d:55:0c:7a:b5:4b:6f:4c:8a:8b:6e:2f:e5:f7:27:ca:1a:
         96:9a:42:02:e5:a3:1f:fc:99:07:e1:33:1e:ee:88:0d:44:3b:
         ef:57:6b:14:9e:85:6b:2c:f1:cf:c4:f7:f6:fe:54:e8:6c:38:
         07:ba:99:94:17:66:77:a7:4a:3c:f2:ac:34:05:97:ad:e1:b5:
         a9:a1:89:11:af:91:91:a3:5d:f2:e2:e6:5f:e0:89:ff:15:95:
         92:5a:04:fb:ef:1e:e6:cf:ed:5a:af:17:63:bc:4b:80:02:bb:
         58:f4:75:df:5f:c6:d9:ce:81:51:dc:d9:0d:16:2b:d4:c7:96:
         e2:76:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:59:29 2025 by rpki-client