This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          aGD61XTBBB49CEpcvo+S/TvPdvIaRCiGpQtX91BoVrc=
Subject key identifier:   AF:C7:85:FE:33:B4:6D:D3:60:A0:C3:7E:79:E0:28:E3:6A:39:67:A9
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       019B3344BB5A852C45DB8F64F662824E8C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          0526
Signing time:             Thu 18 Dec 2025 21:01:40 +0000
Manifest this update:     Thu 18 Dec 2025 21:01:40 +0000
Manifest next update:     Fri 19 Dec 2025 21:01:40 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: M11BE7dX7VavWJqBCO6jyMLLcogx1S5yLx0ERKFLhhI=)
                          2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:44:bb:5a:85:2c:45:db:8f:64:f6:62:82:4e:8c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Dec 18 21:01:40 2025 GMT
            Not After : Dec 19 21:01:40 2025 GMT
        Subject: CN=afc785fe33b46dd360a0c37e79e028e36a3967a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:6a:e3:76:ec:4d:d3:fa:60:4c:8d:d3:cd:
                    1e:55:ad:ef:1f:0f:13:29:a7:c3:af:7d:1c:20:d1:
                    15:2b:7a:09:a3:61:96:aa:c5:51:75:ac:d1:4c:11:
                    85:4b:fd:26:db:56:4e:79:f9:27:f3:a8:7f:d5:93:
                    4a:2b:20:a5:d5:12:fd:f0:28:05:cb:9c:27:73:1d:
                    07:5c:78:79:c6:75:6a:f0:e3:82:2d:2c:61:2c:e6:
                    50:a0:8c:7f:13:6c:39:36:87:31:5e:eb:68:65:c0:
                    0a:51:61:db:15:02:32:a3:9b:bc:88:4a:ed:31:c2:
                    1e:56:ff:c6:26:a2:be:01:3e:79:7a:b9:41:22:f4:
                    ad:d6:9f:8c:13:c2:f8:3a:c7:3e:e4:22:a5:77:71:
                    e1:96:c3:9b:47:0d:ce:56:fc:f1:01:84:1d:f5:61:
                    a0:ef:7e:f0:3e:16:67:41:25:b6:60:aa:96:40:24:
                    18:0a:29:34:90:b4:68:b0:9d:9a:0a:95:42:6b:bf:
                    a9:c7:2b:b1:c2:d1:3d:12:5d:ae:d7:61:bb:b2:71:
                    f9:37:0b:aa:27:ad:a1:06:85:34:dd:b3:a9:9f:ca:
                    53:d3:b2:f7:1e:a2:8b:1d:d1:00:67:d3:68:9e:7a:
                    83:f9:5a:58:bb:fa:47:a7:b8:53:66:8a:13:4d:cf:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C7:85:FE:33:B4:6D:D3:60:A0:C3:7E:79:E0:28:E3:6A:39:67:A9
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:f6:c8:69:33:6d:45:43:80:15:0f:16:19:f0:ea:aa:c3:
         bc:af:1a:c6:e0:db:da:31:e7:c5:fd:31:20:5a:5b:0d:f9:2f:
         47:62:4e:b7:74:be:72:be:f1:88:0e:ff:08:fd:a6:db:c6:87:
         9c:aa:7a:7d:f8:51:c0:ba:c3:b4:12:95:c0:71:db:a0:11:14:
         56:7a:26:ae:a0:b4:86:2f:c5:c2:9b:08:43:ac:9c:d6:93:f7:
         ef:ce:e2:a0:2a:d6:48:25:6b:26:d7:54:ea:fe:56:21:54:e7:
         52:df:a7:b6:6a:ad:99:0f:b5:2d:77:b4:ac:75:af:c3:4a:b1:
         1c:1b:40:f9:81:78:5f:b7:76:31:80:77:26:a1:c4:47:60:05:
         a0:50:be:e3:a9:b5:cc:8e:b1:8b:48:67:02:85:50:28:e0:63:
         18:81:8c:4a:dd:9f:26:77:a5:52:ef:8a:6d:b2:bf:74:8f:e8:
         61:81:08:7e:93:ec:58:39:4c:03:3f:4a:29:3a:94:0e:f1:dd:
         2a:72:7e:c4:3a:d2:42:26:0a:6e:c3:f6:22:50:1c:32:c1:11:
         32:8e:b7:6a:b1:1c:37:37:1c:58:ce:4e:34:64:be:1d:a8:57:
         ed:21:9f:d8:a5:a4:1b:ee:63:62:73:16:ae:d2:85:6c:30:46:
         1e:a6:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:39:01 2025 by rpki-client