This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File:                     EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier:          bveJjrTbwbM7LeLS/gxQ+7Cj/Md/xrxSc3NfXK/c/fg=
Subject key identifier:   46:61:20:11:56:91:94:79:F0:9C:49:11:48:FE:E0:40:4D:80:1F:CC
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer:       /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial:       019B10EF345EBD67650E1FE3D1D6A065C500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number:          1771
Signing time:             Fri 12 Dec 2025 05:01:10 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:10 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:10 +0000
Files and hashes:         1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: 3OiFB4wYD2GgiRMfgDnpU/C2aOkGe1F5VhqxgrE9sMI=)
                          2: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (hash: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:34:5e:bd:67:65:0e:1f:e3:d1:d6:a0:65:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
        Validity
            Not Before: Dec 12 05:01:10 2025 GMT
            Not After : Dec 13 05:01:10 2025 GMT
        Subject: CN=4661201156919479f09c491148fee0404d801fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:c4:9b:b6:65:50:88:13:c6:98:52:b2:69:
                    c9:9f:4d:e5:c7:31:6a:d6:ab:1c:d9:d5:a9:fd:e2:
                    1e:d7:17:24:03:54:15:32:23:d4:f0:4f:69:59:bb:
                    60:cd:91:9d:41:30:b3:f3:e5:9e:19:f7:79:0d:c4:
                    70:82:5b:87:62:1b:9c:2f:b9:69:7b:54:9d:a3:14:
                    f6:ea:5d:33:48:9e:db:69:5a:e1:d7:78:c0:a4:0d:
                    b1:73:c3:59:15:65:d5:71:7a:b7:70:bd:aa:0e:b9:
                    eb:09:42:65:66:52:dc:ac:1e:e3:c0:5a:df:a0:86:
                    90:63:e0:32:71:a8:99:d5:99:ee:8f:2f:f9:ec:b3:
                    b7:a5:d9:fb:3f:a5:3d:58:74:d1:e7:97:e1:5a:4f:
                    f8:aa:dc:6b:38:6a:bd:35:61:f0:ba:a4:78:c5:80:
                    2c:b3:49:49:cf:8d:29:76:bf:6d:01:43:55:6a:4a:
                    35:60:35:90:d2:1c:00:94:82:03:91:2c:20:44:13:
                    05:58:06:5e:1a:81:e5:0c:c6:2e:32:ad:bb:0f:d4:
                    b3:15:db:f0:dc:ec:ba:0b:0d:4e:2c:70:59:a5:3a:
                    2e:a2:c1:28:e7:65:94:d0:61:b5:a9:dd:6c:1f:cd:
                    3c:76:c4:7f:15:b8:7d:c8:c7:ad:02:c0:f9:a2:7d:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:20:11:56:91:94:79:F0:9C:49:11:48:FE:E0:40:4D:80:1F:CC
            X509v3 Authority Key Identifier:
                keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:58:ee:03:5c:21:c7:a4:c3:60:9a:ff:72:fa:06:bd:38:9c:
         59:98:c5:66:39:a4:b5:3b:20:c3:17:50:18:d0:5c:63:e8:7e:
         5c:72:fd:9d:99:4c:3e:42:15:8c:88:15:4b:2a:cb:75:61:e2:
         2f:82:83:da:85:b5:b2:c8:a8:6a:cd:eb:87:ba:4c:12:f5:3f:
         f0:20:d8:68:c0:6c:69:bc:ae:d5:bc:5e:8a:28:7c:61:0f:66:
         dd:8d:12:43:2f:3c:ec:40:7a:a9:85:03:f0:4b:2e:f6:68:f8:
         0e:30:77:76:c9:e7:48:a4:fb:60:00:9f:98:43:ec:75:74:e3:
         b0:a0:49:d2:e2:37:a5:fc:d7:d1:69:ba:c2:85:1f:87:bd:a6:
         af:ac:54:ec:db:1b:09:9f:18:0f:33:8f:f2:f5:0e:ec:c7:c1:
         23:12:23:92:c3:42:2a:03:24:e0:07:9c:07:c5:62:f3:4f:e3:
         14:94:9e:62:96:e9:8a:4a:7e:42:a2:f1:ba:19:09:a7:08:f0:
         be:b9:7b:51:d1:a2:30:c7:56:68:a1:07:12:f3:9f:d4:5c:ba:
         22:84:95:56:14:cd:4a:1e:c3:6e:e6:20:3b:02:26:a0:f3:c7:
         13:f5:36:72:39:8a:ad:c3:2a:6c:b4:b2:61:c6:c2:e1:1c:a0:
         c7:8e:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:01:05 2025 by rpki-client