This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
File:                     EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json)
Hash identifier:          NyXs3m2bHBIU+5kQzwlmXPEaopoyoVQSu5xwczReZJk=
Subject key identifier:   51:54:27:5D:61:08:B3:90:97:AE:E2:D3:98:46:14:83:C8:54:80:F6
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Certificate issuer:       /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial:       019B5A88CB8865449F5DD8D63E6DD46C41F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
Manifest number:          EA
Signing time:             Fri 26 Dec 2025 12:01:13 +0000
Manifest this update:     Fri 26 Dec 2025 12:01:13 +0000
Manifest next update:     Sat 27 Dec 2025 12:01:13 +0000
Files and hashes:         1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: DzrWuHRDhcp5YpPoNxYzKXN/pXZ+pt1uOSQp7b4buGo=)
                          2: FO2yOCStuvN-G30wp_1YO7jAtJQ.roa (hash: 86zJ2vb8NETGOzpiOhgBq69QPVqk1M4tQ+6yHOa0RZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:88:cb:88:65:44:9f:5d:d8:d6:3e:6d:d4:6c:41:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
        Validity
            Not Before: Dec 26 12:01:13 2025 GMT
            Not After : Dec 27 12:01:13 2025 GMT
        Subject: CN=5154275d6108b39097aee2d398461483c85480f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:8b:e5:b1:3c:07:a8:8f:27:73:ec:b2:eb:
                    5d:bc:ab:da:b9:6b:7c:e6:15:15:1e:1b:b4:12:7d:
                    a5:b7:e3:e4:5c:4e:4b:01:8a:f8:68:31:ff:49:b5:
                    f1:68:0c:ae:e0:68:72:f6:be:89:95:9c:a2:34:a3:
                    36:bc:f0:1f:4a:64:21:14:ad:cd:95:4b:8c:bc:b4:
                    e9:51:11:ea:a0:95:a4:4b:6c:e8:52:89:d4:d6:a9:
                    ce:b7:56:f3:19:48:e3:88:64:05:04:3b:e9:6d:91:
                    60:b9:b2:85:ff:ba:40:6b:10:7d:d3:cb:08:d8:17:
                    e9:b0:6e:4c:a8:fb:fb:4f:6f:d1:8a:62:75:d0:c0:
                    da:4d:cd:ad:6e:ab:5a:b9:5a:a7:6a:e2:be:79:e0:
                    b6:f4:b1:df:2e:f5:bd:76:fd:3d:45:89:b4:00:38:
                    f7:9d:ee:58:3a:c8:c4:a8:2e:f3:a4:b8:38:e5:79:
                    11:c5:85:6e:05:e0:76:a1:41:c1:ab:b0:b4:6c:93:
                    15:3d:61:a2:df:a6:57:20:db:aa:39:84:03:7f:e5:
                    94:6c:bf:86:a8:4c:12:ac:d5:02:dd:2c:c1:fc:0c:
                    80:d0:6e:e2:be:17:64:5b:e1:ee:b4:46:c1:f3:21:
                    a5:10:2b:6d:72:a5:59:b2:b5:01:21:04:a7:1e:c5:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:27:5D:61:08:B3:90:97:AE:E2:D3:98:46:14:83:C8:54:80:F6
            X509v3 Authority Key Identifier:
                keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:80:11:85:f2:ad:f4:28:9c:d1:11:b6:d1:fc:55:de:eb:d2:
         83:cc:57:49:5e:35:3b:ee:05:14:cb:41:ab:7a:07:50:5e:b3:
         05:e9:0b:dc:0c:ed:7f:7e:e1:d0:89:88:e4:44:05:25:ec:7a:
         ff:4d:e5:40:9a:60:65:d3:5d:5e:0c:af:4f:12:04:6b:54:0b:
         1f:11:c0:02:d8:c9:4c:01:93:07:d2:8a:8c:f1:c2:79:dd:13:
         0f:c5:66:8a:24:9d:bf:34:19:fa:4f:d5:cc:13:bc:3e:72:34:
         a3:1f:34:0c:f7:0a:74:73:d9:59:43:15:3e:3f:9d:f9:7b:47:
         c0:fc:c9:27:df:7f:68:f6:57:87:6c:af:c6:64:8f:31:e2:0d:
         dd:09:08:b7:07:49:3c:31:6d:f6:c4:21:49:04:5a:77:77:54:
         6a:3c:6a:b2:a3:04:34:65:b8:10:f6:de:06:bb:a7:c5:25:d4:
         60:b0:be:4d:4d:50:16:77:8a:99:bc:05:05:d8:07:38:92:07:
         ec:f2:52:90:dd:cc:ca:7d:6b:f1:d1:8d:b0:59:49:03:78:08:
         97:c4:e5:9c:98:26:54:19:01:ca:81:62:fd:87:9f:9e:08:4f:
         bc:2d:74:65:28:d4:72:e8:1c:65:ac:2a:15:69:bb:9b:e7:b9:
         1b:89:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:47:11 2025 by rpki-client