This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          Q/k+3cktVRQ7BKNoJrkG2VKscuxYI4/WCTuldXV0BPE=
Subject key identifier:   D0:40:BA:6F:44:52:8B:97:4B:67:5A:B0:70:55:48:66:95:A2:F1:EE
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019B353270C2019CDC9A783F45D717AF20AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          07ED
Signing time:             Fri 19 Dec 2025 06:00:56 +0000
Manifest this update:     Fri 19 Dec 2025 06:00:56 +0000
Manifest next update:     Sat 20 Dec 2025 06:00:56 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: VPyfJXf6mzuVJsA2QarPgNTa7b9Af5FjTeFGPMetrx0=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:70:c2:01:9c:dc:9a:78:3f:45:d7:17:af:20:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Dec 19 06:00:56 2025 GMT
            Not After : Dec 20 06:00:56 2025 GMT
        Subject: CN=d040ba6f44528b974b675ab07055486695a2f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:4d:8c:ae:13:24:3f:c0:e1:58:9c:63:3c:
                    03:36:16:68:cb:0f:ed:49:6f:91:f1:46:f2:58:a0:
                    c0:e0:c5:d4:ba:d4:70:09:e9:a4:6b:49:77:d3:81:
                    7f:81:b4:c1:ee:99:cb:c9:b6:dd:d3:47:61:ef:4a:
                    99:23:91:6e:90:a7:b4:01:a6:7c:58:a3:76:42:a0:
                    3d:56:da:cd:e6:d4:43:0b:f4:f5:75:82:ba:98:55:
                    c8:e9:6e:70:4b:dc:07:5a:c3:6c:59:b1:3d:b4:a7:
                    4e:fa:e3:ce:19:51:d4:74:80:89:84:a7:f7:8c:6f:
                    69:80:6f:99:ca:cc:92:86:06:c7:30:03:25:15:41:
                    7d:77:09:87:8c:73:54:1f:2f:9d:6f:24:e4:e0:c3:
                    0a:6d:1e:b2:ac:10:6c:b2:0b:89:d4:f8:e6:b5:7c:
                    f3:0a:07:0d:f3:1e:62:88:94:e3:b8:74:bd:86:77:
                    b2:02:b2:56:a5:0f:9a:4f:bc:49:f4:d8:c1:4f:3b:
                    1c:92:b1:0c:a8:81:7e:5c:7c:ed:be:95:1b:c7:fc:
                    e1:ea:9b:6f:cc:b9:52:57:08:9a:f8:dc:f1:a7:a8:
                    e2:cb:d3:99:d1:5d:de:2d:a8:d1:e0:f1:c0:b0:c9:
                    e8:61:fe:af:78:af:84:19:4b:1b:31:d7:81:d5:3f:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:BA:6F:44:52:8B:97:4B:67:5A:B0:70:55:48:66:95:A2:F1:EE
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:72:2d:ff:f6:1e:7b:1c:b4:a4:d4:88:45:85:bb:ee:50:
         89:ef:ca:ad:d0:19:c0:07:39:fe:3a:45:37:d8:08:00:76:dc:
         37:95:2e:8d:26:bb:c1:cc:94:9d:52:8d:57:14:b8:58:fe:bd:
         45:9f:24:e7:e8:97:89:41:ea:f7:54:46:51:92:f2:1b:f1:1f:
         d1:cb:16:54:8b:ff:11:49:13:5c:0c:09:2c:97:0d:4b:5f:1c:
         ec:a3:7b:7c:59:65:15:40:56:4a:b9:49:6e:25:34:bd:39:a6:
         00:18:d6:a3:82:45:dd:25:9b:15:0c:34:2a:e5:be:d2:6b:04:
         41:8f:78:af:56:83:af:ea:2b:6b:b1:1e:9e:35:c1:7a:81:a6:
         76:78:84:79:d1:bd:8b:0a:d6:61:a2:9e:82:e0:d6:14:b4:e9:
         d5:22:6e:b9:71:d7:19:2a:0f:ca:c7:23:97:76:36:4b:46:2b:
         a0:49:83:e6:5f:3f:7d:71:96:e0:64:ed:9f:3b:6c:4b:a0:bf:
         dd:e6:ed:09:a4:ce:97:f3:9d:71:f1:b8:33:41:4b:ca:b5:ae:
         74:a9:84:3e:9c:ac:e1:e6:8d:18:7a:f3:68:6e:03:ef:05:eb:
         47:e3:b4:15:a8:df:0a:fa:78:ff:3f:f6:53:e3:82:c9:e0:31:
         9b:eb:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:41:54 2025 by rpki-client