This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File:                     eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier:          C1I0FjNwEKstMDAuUIgjLJVbTITafOGajzTwBJ3pruM=
Subject key identifier:   8C:2C:21:E8:3A:91:D3:9C:A7:E6:8D:CC:32:CC:9B:09:92:AB:A0:50
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer:       /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial:       019B5976E5FE1A791BF5C9239CD7D53656C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number:          14DE
Signing time:             Fri 26 Dec 2025 07:02:02 +0000
Manifest this update:     Fri 26 Dec 2025 07:02:02 +0000
Manifest next update:     Sat 27 Dec 2025 07:02:02 +0000
Files and hashes:         1: CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa (hash: vZb7fKK94eyPt6Z0PY3dDQip6IArUPuz51Ar7XUuuO8=)
                          2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: wrN20Cx0QRduylfU1F+wM1RhdATfulw9P5ngysWVX4o=)
                          3: xXuydbuhDhETgHIlcb9KUf9zG4Y.roa (hash: 9XrkxjJNUOJOKboyq6AJj8CALCh/rjZYztA11ZmADyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 07:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:e5:fe:1a:79:1b:f5:c9:23:9c:d7:d5:36:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
        Validity
            Not Before: Dec 26 07:02:02 2025 GMT
            Not After : Dec 27 07:02:02 2025 GMT
        Subject: CN=8c2c21e83a91d39ca7e68dcc32cc9b0992aba050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:a7:cc:6f:0e:4e:c7:38:7e:72:6f:f8:fd:
                    e4:35:1b:dd:0b:41:d1:24:61:65:af:f9:1b:3a:4a:
                    92:f7:ad:31:18:c0:95:24:f0:29:fd:8c:82:c9:0d:
                    d2:29:57:0e:53:e0:87:3d:32:73:66:9e:0e:c2:cb:
                    3c:3e:f4:4b:1b:7b:e0:6a:ca:7f:e2:d0:55:77:4d:
                    6e:ea:a9:8d:d3:19:71:e5:a0:81:49:13:05:0d:6e:
                    34:be:a9:67:02:16:1a:17:93:12:f6:ce:fb:2d:f8:
                    e4:30:af:87:39:06:9f:62:ff:a7:17:d2:48:cc:de:
                    bf:67:d9:3e:3d:0b:38:96:2d:06:42:26:50:91:5a:
                    98:55:a9:2b:bd:1d:c2:8a:66:17:f9:d7:df:4e:06:
                    de:27:f7:36:69:56:31:1e:85:9e:1f:74:5b:d3:0a:
                    a8:b1:2d:81:86:ec:67:a8:79:30:cc:a5:eb:b9:af:
                    05:2e:6e:1f:5c:b4:63:ad:00:26:7e:bc:51:c4:71:
                    43:3e:63:a5:ef:89:06:2c:c9:95:01:b4:bf:78:49:
                    f6:71:d9:9d:b4:98:a6:79:97:9a:46:68:02:95:41:
                    59:94:5a:11:42:fa:f8:6c:8e:0a:30:39:ec:2f:7d:
                    6e:f8:61:aa:bc:77:da:b0:df:d1:58:42:51:e5:7c:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:21:E8:3A:91:D3:9C:A7:E6:8D:CC:32:CC:9B:09:92:AB:A0:50
            X509v3 Authority Key Identifier:
                keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:01:0a:26:08:d9:1d:4c:f8:b3:fa:3b:ad:57:3c:53:59:a3:
         cb:f9:62:dd:bf:ca:0b:aa:75:54:1b:65:f5:60:5d:8d:7d:30:
         61:d1:08:ad:63:e2:10:8b:e5:61:df:cc:e7:70:e7:e9:df:47:
         ad:9f:69:25:80:3a:13:54:30:34:b2:88:7a:a2:4f:a3:30:01:
         fc:30:a5:cc:ec:54:7d:3c:26:58:cb:80:a2:8b:3f:4b:bd:21:
         ca:b0:6c:5d:1f:b4:88:f1:f6:11:2e:5d:cd:02:cb:28:77:72:
         a7:4f:8d:b9:38:fc:29:3a:f6:0d:6d:69:63:6d:d5:90:99:e2:
         33:1c:2c:02:14:f6:d5:68:e6:70:20:2d:e6:5a:09:7a:5a:95:
         5b:fa:be:82:9f:fd:c9:6d:fe:56:60:8e:a5:c0:6d:0f:a8:ab:
         6a:41:8a:c6:25:87:8a:33:8f:b6:d9:84:10:d2:15:ba:4b:03:
         cd:71:63:95:db:53:79:ef:f6:c4:4d:17:18:af:c5:84:92:cc:
         e2:3e:8a:2f:4e:96:62:0a:aa:b4:4c:f3:7d:8f:d4:39:cf:51:
         31:fc:88:ad:86:82:61:f3:9d:19:66:d6:5a:ee:30:e6:99:41:
         3c:41:2a:23:a4:a2:28:88:84:2b:4c:3c:37:c2:3c:0f:d2:84:
         a2:28:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:06:35 2025 by rpki-client