This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          nZZ/1YpZDlQMk6NsRu494FGSqvU42SOWfDv2PSFped8=
Subject key identifier:   4A:7E:BB:90:A7:0D:DF:29:87:F4:B5:92:AD:6E:CF:B1:88:A7:F5:82
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019AD65B1793D922F95DA10B5B4CE3280D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0890
Signing time:             Sun 30 Nov 2025 20:01:25 +0000
Manifest this update:     Sun 30 Nov 2025 20:01:25 +0000
Manifest next update:     Mon 01 Dec 2025 20:01:25 +0000
Files and hashes:         1: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: sUpueQXAn1LwMHIcW/FE7NEDc8jI75bTNiAvHW48ZUo=)
                          2: n2ywdwAxh_5A6fhmbinLsjV_74w.roa (hash: KHmvQ0UKMcNm8rNxLKWRsULyUAvt5HBPZFXUNE/Pe7Y=)
                          3: vtVkCOLjDQSopCb33az0PmasrbI.roa (hash: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Dec 2025 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d6:5b:17:93:d9:22:f9:5d:a1:0b:5b:4c:e3:28:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Nov 30 20:01:25 2025 GMT
            Not After : Dec  1 20:01:25 2025 GMT
        Subject: CN=4a7ebb90a70ddf2987f4b592ad6ecfb188a7f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:21:a6:4e:a3:40:f3:b5:2e:93:93:1b:53:
                    02:b5:27:ff:46:be:c5:42:c0:42:1d:3c:2b:bb:43:
                    ce:df:89:e8:98:3b:8b:4b:22:12:d9:d8:90:f3:32:
                    a8:e1:48:fc:86:b8:4c:44:b3:13:4f:7d:73:e3:53:
                    6d:8d:1d:6a:e9:e3:30:47:d6:76:0e:cc:37:1e:98:
                    2e:83:08:41:52:2f:89:9d:c7:37:f8:83:57:8d:35:
                    2d:bb:50:28:11:54:49:bb:09:15:07:2d:ed:55:2a:
                    a6:34:e0:81:54:ed:30:a1:0e:9b:d6:e8:6a:80:45:
                    5e:62:72:8d:18:3b:b8:97:18:a1:1c:1c:85:d9:de:
                    25:cf:a0:fe:a0:d8:55:fe:61:a4:8b:16:26:c6:d4:
                    cd:2e:5f:6f:80:be:26:ae:a9:cc:15:9e:3b:e4:04:
                    e8:d2:6b:9d:44:29:3b:18:a4:af:39:c5:fb:53:e4:
                    63:69:07:1e:59:7f:2e:d3:3d:90:29:05:65:47:44:
                    cd:6c:d7:d2:29:e5:ed:9f:a9:17:cc:29:20:ed:40:
                    b1:d6:58:cc:f9:5a:3c:21:d9:29:59:7f:73:c5:0a:
                    f1:52:db:ce:00:91:56:dc:2d:45:f3:a7:80:cd:c2:
                    3e:bb:cb:ff:44:d0:ef:8f:cd:b0:a3:4b:37:7e:86:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:BB:90:A7:0D:DF:29:87:F4:B5:92:AD:6E:CF:B1:88:A7:F5:82
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:9d:47:ed:86:99:91:fc:68:16:9b:d6:e6:f8:cb:8c:82:
         6d:b7:1e:14:c8:1c:7b:51:40:85:4f:e1:c7:11:3d:3e:33:fe:
         b8:6c:27:ab:af:23:0b:15:cb:c7:15:5a:2d:7b:b0:02:c9:51:
         0b:de:27:ee:90:2f:78:6f:02:a3:5c:a1:fe:97:26:22:68:98:
         1e:04:8f:d6:43:be:b1:ea:ed:a4:9b:36:19:d8:c4:2b:2e:ba:
         50:4c:bd:26:ec:5a:de:cd:09:87:44:0b:3b:25:67:1a:9a:fd:
         9c:2b:a1:b0:fd:5c:6c:71:8f:d9:1f:0f:01:9f:48:2f:6a:30:
         1d:92:47:8c:30:ad:dc:a6:f8:8b:59:8c:69:16:ab:bd:ed:cb:
         dc:98:25:63:ba:d8:d9:3b:01:23:42:9b:20:04:cd:5e:03:22:
         90:86:e6:80:cf:bb:cf:ac:3d:9f:bb:ae:35:be:61:ed:46:c7:
         6c:c6:43:df:a7:f8:75:2a:59:23:7d:3c:3b:12:1c:b1:b9:d9:
         cc:c3:6e:34:2a:bd:23:e0:d6:52:b5:51:84:78:02:d6:84:2e:
         36:67:cd:76:ff:b1:e0:63:6b:21:9c:38:8a:43:3d:7f:3b:24:
         4a:29:27:e6:61:80:7a:c4:3c:d2:91:2b:dd:51:36:ac:60:b8:
         ca:03:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 1 04:23:29 2025 by rpki-client