This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          m7FGKzwO9sGqzm2nFQyPPAhFEBmDlFKebpvfkrJXzvk=
Subject key identifier:   EC:72:99:F2:8E:E1:25:78:DE:E4:C9:FD:7D:EA:2B:BD:AC:8A:D3:92
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019AAFBA685CDE57F75D3B923AF98DA82851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          087C
Signing time:             Sun 23 Nov 2025 08:00:20 +0000
Manifest this update:     Sun 23 Nov 2025 08:00:20 +0000
Manifest next update:     Mon 24 Nov 2025 08:00:20 +0000
Files and hashes:         1: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: qFZDz0wLnvlhG8C6jVffPjzPWRuYXz1ERWYz/+Vhwj8=)
                          2: n2ywdwAxh_5A6fhmbinLsjV_74w.roa (hash: KHmvQ0UKMcNm8rNxLKWRsULyUAvt5HBPZFXUNE/Pe7Y=)
                          3: vtVkCOLjDQSopCb33az0PmasrbI.roa (hash: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Nov 2025 06:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:af:ba:68:5c:de:57:f7:5d:3b:92:3a:f9:8d:a8:28:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Nov 23 08:00:20 2025 GMT
            Not After : Nov 24 08:00:20 2025 GMT
        Subject: CN=ec7299f28ee12578dee4c9fd7dea2bbdac8ad392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:ae:99:b5:21:c4:25:43:e3:17:b0:f7:c9:
                    9f:15:71:64:a8:2e:0f:bf:ea:05:6e:ce:4d:9e:43:
                    92:da:80:3a:a3:d8:66:3a:5c:16:06:d3:b5:5f:93:
                    f6:ad:ae:b4:d0:52:02:0b:75:bc:25:ad:79:b7:90:
                    38:d7:53:cb:90:78:eb:69:18:9e:c5:86:08:42:d3:
                    3c:7f:cd:6a:f9:b1:5c:cd:95:bc:3f:95:56:b3:38:
                    d0:26:06:ac:e4:f3:18:32:4b:ae:9c:04:f1:93:ac:
                    e9:20:e7:43:28:5f:30:b2:6a:7c:3a:49:a5:b2:f3:
                    70:b1:fe:3d:fb:28:ef:fc:55:e0:77:7d:90:75:08:
                    0e:e1:a3:29:54:db:39:1a:e4:90:3b:08:8d:17:da:
                    c9:4a:54:1a:76:89:15:e6:5b:23:1b:18:e8:00:5c:
                    84:89:73:1c:59:e6:e2:f9:d6:3a:1a:68:1b:93:da:
                    ae:11:f8:ac:85:74:ed:9f:65:58:92:01:67:0f:b2:
                    55:43:0e:2e:77:de:2e:94:78:65:83:79:10:cc:e3:
                    b4:76:99:59:b8:2f:3c:69:86:ec:67:94:df:8e:a4:
                    5f:86:60:fd:f9:29:d5:e9:55:0c:ac:94:46:ff:fb:
                    4c:d7:8c:ae:34:17:7f:5a:5b:ca:5c:29:e7:46:3e:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:99:F2:8E:E1:25:78:DE:E4:C9:FD:7D:EA:2B:BD:AC:8A:D3:92
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:70:65:cc:66:3b:3c:92:ef:6d:74:d1:e9:db:15:af:d8:21:
         51:33:9e:51:2a:85:63:e7:4d:49:86:45:9b:5a:c7:2c:29:a7:
         f4:e8:c8:65:40:c6:b4:dc:dd:00:4d:4f:13:10:0c:91:c4:cc:
         62:3c:44:a2:aa:16:b9:d6:0a:fd:cf:f2:39:f2:be:2e:7c:b6:
         02:79:ed:c0:b1:5a:84:a0:59:8b:f2:29:91:df:fc:75:04:3c:
         f4:5c:24:38:36:43:cd:b9:a8:c1:f9:f6:5d:cf:5d:e9:9a:f1:
         b7:3f:25:b0:25:c7:7b:10:8e:42:ea:7a:90:35:a0:e2:3c:68:
         c6:90:a9:84:00:a9:f8:85:20:2e:4f:b6:e6:36:66:51:7f:5f:
         c1:d4:74:ff:93:48:94:dc:93:db:48:20:2a:6f:ef:56:c1:37:
         ac:4d:b8:cb:87:b9:94:bd:20:30:a8:6e:ef:a9:ea:21:f2:0b:
         1b:16:9f:62:78:23:16:66:41:ba:78:b4:d9:e6:dd:ca:0d:40:
         4d:5b:ba:f7:ee:2e:e4:32:1b:9a:59:c2:d0:65:fd:ce:a7:e6:
         41:d4:d3:13:c4:8b:ee:e3:da:e2:e0:58:93:df:ce:c8:68:7a:
         5e:49:95:d3:11:92:84:a3:0d:78:ea:b2:9f:5d:7a:5e:17:2a:
         b4:9d:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 09:59:48 2025 by rpki-client