This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          ZmMYAG8xAv+JJ4YDZHIEliwVbig6BP5mvmfvBR05IwY=
Subject key identifier:   3E:69:22:21:4B:8D:73:34:D6:BA:92:6C:8E:FF:D1:2A:57:6A:F7:FB
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019B41000D7380613A0ABC22DE5DD17BBF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 13:01:21 +0000
Manifest this update:     Sun 21 Dec 2025 13:01:21 +0000
Manifest next update:     Mon 22 Dec 2025 13:01:21 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: EhOB3DayyURuM/HKbwNAVws3yALGORcS2w9Lac40Os0=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:00:0d:73:80:61:3a:0a:bc:22:de:5d:d1:7b:bf:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Dec 21 13:01:21 2025 GMT
            Not After : Dec 22 13:01:21 2025 GMT
        Subject: CN=3e6922214b8d7334d6ba926c8effd12a576af7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:e6:14:bf:22:0e:04:54:61:9d:34:54:c4:
                    f8:e4:10:88:36:d3:16:6b:68:1a:66:bb:b6:eb:1c:
                    91:20:d3:75:1e:84:e0:80:0f:64:61:99:a0:f5:c1:
                    98:a4:bf:71:30:fd:39:de:b7:02:f9:6a:00:ee:61:
                    9d:07:44:c0:86:c5:30:df:d5:1e:36:f2:70:4e:f6:
                    e4:af:05:a0:52:3b:59:29:66:29:da:f7:48:60:57:
                    0e:e6:a7:04:cd:d0:cb:32:cf:29:06:20:11:34:c2:
                    af:3e:92:68:da:26:d8:0e:2e:f5:b1:c5:19:e5:07:
                    19:ea:3c:75:49:3f:13:b1:8a:77:aa:cd:1e:20:17:
                    99:15:d3:20:db:50:e4:0a:d9:ea:a4:eb:ef:c1:b6:
                    9f:a4:05:b8:12:b4:cf:76:cd:a7:f8:68:34:c0:44:
                    bc:2f:46:34:9f:91:bd:b2:12:c2:cb:07:82:da:6b:
                    39:36:67:9b:f5:bd:90:ee:27:07:eb:38:96:33:51:
                    21:b0:9a:fc:61:1b:f0:8a:71:62:c6:37:52:f4:5e:
                    a9:3b:e4:26:73:81:80:96:74:ec:9d:17:29:2a:c3:
                    ee:a2:b1:38:d0:b8:24:90:82:d8:8e:77:95:aa:65:
                    bc:02:e0:9f:9c:66:d4:dc:12:c1:de:72:05:b1:35:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:22:21:4B:8D:73:34:D6:BA:92:6C:8E:FF:D1:2A:57:6A:F7:FB
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:49:d0:1d:66:63:cf:62:ee:05:57:e9:a0:4e:e0:8f:9f:10:
         2c:13:9d:03:9a:97:48:fe:43:ed:dd:cb:34:76:43:bf:bd:94:
         8c:24:df:a7:25:50:c2:fc:37:44:9c:ec:64:64:39:68:e8:32:
         66:c2:88:31:63:d5:a6:b0:9d:3f:ed:c9:88:f1:82:ee:11:46:
         1b:2a:84:69:00:14:de:37:81:d8:df:66:ec:d5:70:d3:88:88:
         2b:96:a4:35:48:63:d5:9b:ce:0e:3a:70:e1:dc:bf:d1:ca:aa:
         ee:9b:12:a5:95:5f:60:f4:dd:9b:30:d7:b6:e7:ee:a0:2d:98:
         46:f6:1f:12:33:e4:8a:ee:0d:db:bf:02:07:e8:68:bd:f8:9d:
         11:91:57:67:24:e9:0a:8a:8e:01:ce:3f:05:73:62:f1:cc:f7:
         94:16:64:29:6b:c5:0a:90:6d:38:15:09:0b:9a:ce:09:4d:5f:
         3f:c0:c3:ca:bc:dd:cb:1f:e3:aa:9f:ca:40:27:5b:4e:f0:7d:
         58:93:8a:98:bb:e4:7d:05:2d:7e:09:3d:b6:18:d0:c4:55:03:
         f0:7f:32:ad:ea:4e:13:e3:a8:d7:0d:18:3f:9c:f2:db:de:77:
         7c:14:5a:8a:7d:13:d3:42:ee:7a:a8:a1:91:c5:cb:bb:3c:1e:
         ef:30:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:17:07 2025 by rpki-client