This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File:                     E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier:          kl8UVyGv73kB17tbXFD/W78ee8T7nbpAxygqUrUF99I=
Subject key identifier:   D2:7A:C2:A5:71:33:D5:03:B4:FC:31:62:00:9F:36:9D:CB:BF:BB:86
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       019B378E5E72982EA3EB6D9D928988F26DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 17:00:35 +0000
Manifest this update:     Fri 19 Dec 2025 17:00:35 +0000
Manifest next update:     Sat 20 Dec 2025 17:00:35 +0000
Files and hashes:         1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: du9Pr6YFMzi31QgVnVj/lo5tZ0GwfXWeX+XQV+4yj/I=)
                          2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
                          3: mp_GHNV3oXauSfYTml7M5-B_SzE.roa (hash: o6TxNWrAQ4DmV0/jzWqCauUXKEHG2x6UUHTMIwvWqGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:5e:72:98:2e:a3:eb:6d:9d:92:89:88:f2:6d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Dec 19 17:00:35 2025 GMT
            Not After : Dec 20 17:00:35 2025 GMT
        Subject: CN=d27ac2a57133d503b4fc3162009f369dcbbfbb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:67:8c:83:3c:e7:36:97:31:f8:96:cd:f0:
                    8b:4a:fa:91:c6:ce:2c:b3:b7:dd:55:cd:ab:da:77:
                    7b:08:36:c7:71:39:49:5d:c9:8b:73:b1:77:42:9b:
                    b0:17:96:21:f7:fa:22:4e:d5:76:3f:3d:3e:83:85:
                    d8:30:26:77:a8:e9:d1:ee:3e:4f:1b:f7:a5:c3:6e:
                    5e:cb:8c:94:25:33:63:06:96:49:bb:68:6d:a7:02:
                    8f:67:fc:f3:85:9c:de:08:98:7d:fa:b9:93:d0:e3:
                    9a:23:96:b7:5f:9c:89:96:6a:14:0d:af:61:c3:07:
                    79:eb:f3:35:66:ec:0f:8e:84:e4:62:53:ed:76:9d:
                    fb:48:39:cc:46:35:78:f9:36:88:1c:cc:51:55:89:
                    cd:42:8a:1d:f9:c3:c4:02:f5:8f:ee:8b:1a:75:15:
                    25:a7:69:e3:5f:fa:4a:84:46:65:76:19:11:21:82:
                    3e:ab:df:71:77:64:ac:69:88:f1:78:5f:28:a0:04:
                    19:6d:72:33:75:2c:e7:33:18:b9:ed:e6:7b:0f:f7:
                    fe:6a:04:4b:65:99:47:0e:78:22:33:0e:e8:ba:3f:
                    87:3b:ec:90:ec:20:31:74:a9:5a:84:c7:d7:32:c7:
                    37:e6:01:be:a0:3c:33:b9:24:31:fb:ba:86:5a:67:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:C2:A5:71:33:D5:03:B4:FC:31:62:00:9F:36:9D:CB:BF:BB:86
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:28:4f:8b:02:af:aa:a8:54:70:0f:d1:7b:f5:d4:30:a6:
         56:eb:d2:f2:07:3d:30:2c:a3:dc:c9:07:84:84:ce:2a:3c:38:
         9a:70:bc:f2:0e:35:91:64:1b:44:54:80:a4:6d:2b:b6:c2:0e:
         84:c6:21:08:7b:89:0b:c8:23:df:ac:01:d3:1c:32:e4:6f:76:
         b8:22:9f:8b:13:6a:b8:23:78:bb:e1:7b:dc:a4:28:06:a6:52:
         46:27:44:45:eb:e3:0e:f1:5a:50:73:69:85:1a:f1:31:eb:ea:
         06:5d:67:94:fa:0e:bb:b5:e4:e7:ff:84:b7:14:c0:8b:5b:1c:
         e9:a4:c0:82:1a:bf:9f:9d:cf:e3:d3:b1:06:58:a4:f0:62:02:
         b5:e6:5e:8a:f9:a8:a2:f0:07:75:93:48:3f:70:73:34:34:a1:
         d9:1b:2e:ef:ac:fb:4f:f2:f1:7d:d8:7e:cd:74:82:b5:bc:ff:
         4b:8e:cf:7a:6e:78:21:f7:09:56:a2:03:8d:96:d3:c9:03:b3:
         67:b2:3a:5b:15:29:32:37:89:06:12:36:49:f0:8f:9b:2d:30:
         a5:26:e0:dc:a6:17:f2:77:ad:94:ef:61:bf:99:85:0c:0c:2a:
         e2:23:2c:e1:8a:8f:a0:63:3a:7e:bb:2a:dd:5e:6e:85:d7:7b:
         f7:a6:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:54:10 2025 by rpki-client