This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          AmfVYYqq1Hs/bTtSETTPeJ9uWxmYydVhYdMuD+oNnT4=
Subject key identifier:   55:47:6E:59:F3:D2:4F:43:CD:88:F7:EC:BC:8C:9A:F7:5A:24:C4:E0
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019B330D35A79A3F3677EE8402061CC5E4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          08C0
Signing time:             Thu 18 Dec 2025 20:01:02 +0000
Manifest this update:     Thu 18 Dec 2025 20:01:02 +0000
Manifest next update:     Fri 19 Dec 2025 20:01:02 +0000
Files and hashes:         1: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: si4Xcfnue8UYESGmh0bLs+gKRExRb1ie7mIgRXBNf0A=)
                          2: n2ywdwAxh_5A6fhmbinLsjV_74w.roa (hash: KHmvQ0UKMcNm8rNxLKWRsULyUAvt5HBPZFXUNE/Pe7Y=)
                          3: vtVkCOLjDQSopCb33az0PmasrbI.roa (hash: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0d:35:a7:9a:3f:36:77:ee:84:02:06:1c:c5:e4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Dec 18 20:01:02 2025 GMT
            Not After : Dec 19 20:01:02 2025 GMT
        Subject: CN=55476e59f3d24f43cd88f7ecbc8c9af75a24c4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:14:79:20:9e:09:03:c2:77:30:27:04:26:
                    2e:c8:e7:a6:6a:f0:a3:b6:d3:a8:41:38:54:00:60:
                    50:ae:2d:a4:0b:3d:7d:c3:c3:36:3f:37:da:1c:59:
                    e8:d1:de:e1:0a:14:75:6c:6e:73:e2:82:cf:a1:86:
                    72:db:94:ae:fd:c9:ed:13:c4:37:25:56:3f:9d:4b:
                    03:4d:1c:47:a5:75:87:b1:4d:47:16:9e:eb:8e:91:
                    47:f4:22:d6:a8:ab:82:b9:21:2a:13:96:32:c2:5f:
                    36:7f:3b:27:c4:5e:6f:9a:3b:9e:62:d6:04:8a:5b:
                    ec:0c:06:4f:b2:4a:a4:68:d9:52:bb:5c:7f:50:49:
                    46:69:00:ab:14:76:ac:0b:7d:35:18:11:72:61:1d:
                    8c:1e:59:88:05:b6:48:71:1a:d4:a9:8e:58:71:15:
                    75:e2:3f:b8:d3:be:8e:d8:24:be:27:f8:99:c4:89:
                    c6:88:95:fe:22:16:9d:75:2d:7f:f1:aa:fb:96:9c:
                    a1:7b:21:c1:9d:0c:5b:6d:61:70:cd:b9:36:03:0f:
                    7b:ae:78:17:70:6c:4e:67:9b:55:17:47:5d:a3:da:
                    aa:5f:62:8a:c1:5a:cd:66:a4:ce:7e:8c:10:26:71:
                    fe:50:87:54:e9:b3:77:d4:ba:17:7c:bf:21:90:e1:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:47:6E:59:F3:D2:4F:43:CD:88:F7:EC:BC:8C:9A:F7:5A:24:C4:E0
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:70:f4:5f:aa:99:f2:eb:b6:02:e2:8f:d2:d3:2e:1c:ae:
         23:6e:cc:95:39:95:98:30:5a:9b:a2:0b:54:62:45:d0:fc:6c:
         95:26:af:00:c5:bc:35:71:66:5e:50:26:ba:16:29:c1:bb:a9:
         d9:d0:df:87:0f:46:63:97:2f:a7:84:b8:39:89:e3:4b:48:a3:
         6e:01:e0:9f:45:e8:e8:35:b0:d9:fd:86:ab:c0:62:5a:de:31:
         ba:93:44:f8:7c:f7:29:7b:a8:8c:5c:b3:57:48:03:12:5b:36:
         03:0c:ba:02:28:39:5f:d4:a5:cc:4e:b2:0a:7e:56:48:c2:09:
         7a:9c:69:52:bc:8b:02:fd:3b:df:1d:07:fd:2f:fc:da:67:10:
         a2:fb:ad:9b:9d:7f:aa:b8:a5:ab:3b:d9:ac:f5:5e:cd:07:ad:
         b2:62:dd:3d:bd:87:26:95:4e:53:21:92:7c:d1:f6:c2:36:63:
         93:89:e1:97:d3:0d:cb:25:fc:f9:02:d7:62:1a:4a:37:f9:72:
         71:c1:45:ff:2a:8c:92:85:63:7e:7b:cb:36:e6:ec:ea:5a:be:
         d6:f3:f6:39:c1:e6:e1:38:5c:e9:a7:49:96:90:c8:23:8f:b0:
         a1:5e:bb:46:5a:b2:00:81:1f:85:f9:fa:89:19:31:aa:de:0c:
         d4:89:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:15:47 2025 by rpki-client