This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
File:                     EEwNyHsCIy5J3FTU_79Ele4DNlU.mft (raw, json)
Hash identifier:          PhKrae++ZtCH5EnbkbggTnPpfhJeudCp1gte0HA0OSY=
Subject key identifier:   3B:31:2C:57:D1:0B:0D:11:1B:05:5D:EC:BC:40:C9:8B:3F:CC:13:B5
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Certificate issuer:       /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial:       019B1A974508D56FB9D677636FFA5E89554F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
Manifest number:          0C6B
Signing time:             Sun 14 Dec 2025 02:01:19 +0000
Manifest this update:     Sun 14 Dec 2025 02:01:19 +0000
Manifest next update:     Mon 15 Dec 2025 02:01:19 +0000
Files and hashes:         1: EEwNyHsCIy5J3FTU_79Ele4DNlU.crl (hash: F0Ywn38lfdcNKFstDUHfVnZn7jiH91FTN5qNSx+eSLo=)
                          2: gFd5tgCJMeij35zzi5bD-2NK_Kg.roa (hash: Z6aGas3PZ0QdIX51TPr1IW3EEbWOk5nQI3+RmZvvBLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:97:45:08:d5:6f:b9:d6:77:63:6f:fa:5e:89:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
        Validity
            Not Before: Dec 14 02:01:19 2025 GMT
            Not After : Dec 15 02:01:19 2025 GMT
        Subject: CN=3b312c57d10b0d111b055decbc40c98b3fcc13b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:a9:b7:b6:2b:6c:58:af:0b:89:2a:b7:1e:
                    b4:4b:f6:a9:20:0f:d3:ad:2c:47:ba:11:b4:10:17:
                    1a:0f:34:a1:3f:dc:07:b3:f9:f6:29:dc:a6:57:39:
                    7d:5f:d0:a9:92:e0:86:85:89:f1:5e:06:ac:be:70:
                    80:41:70:95:72:e1:1a:51:6f:68:a5:a8:45:e8:6c:
                    e5:4b:cb:12:be:93:20:22:0b:0d:7d:54:a1:3d:ed:
                    37:97:99:9a:81:8c:e5:31:25:59:99:74:75:40:e0:
                    64:6b:9e:50:e2:d7:1a:11:20:c5:e6:1f:fc:84:73:
                    f8:1c:8a:b8:25:66:a8:4c:be:7d:3e:9e:f8:16:a5:
                    d9:13:bc:53:d0:e2:2b:5b:f9:18:dd:f5:55:8b:d1:
                    40:f3:ef:97:c8:ab:56:59:fe:b2:3e:ae:7f:9f:a9:
                    7d:c4:99:bd:03:ee:1f:35:e8:7f:28:7a:40:14:5b:
                    0b:05:24:e4:c2:d3:b4:c9:7c:2e:f7:c3:92:37:ea:
                    ba:b8:fd:c1:b1:95:a5:2b:d9:7b:ce:41:cd:c1:11:
                    bf:06:3c:5b:ef:66:f4:ff:b6:3d:5e:72:c9:c8:5c:
                    1a:b2:ff:0a:49:3d:f6:79:91:84:5d:2a:f0:06:c0:
                    ea:78:51:01:63:48:50:16:05:66:aa:f5:80:0e:c3:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:2C:57:D1:0B:0D:11:1B:05:5D:EC:BC:40:C9:8B:3F:CC:13:B5
            X509v3 Authority Key Identifier:
                keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:58:36:5e:94:51:96:2f:b8:02:d4:b4:a9:32:e4:bc:c7:
         d6:1e:1b:e7:28:35:1b:c2:b5:6b:49:95:bb:82:5e:b4:3f:38:
         8c:e1:17:4d:1c:53:9e:98:0e:97:34:8e:d3:05:00:44:b5:bc:
         3c:0f:3d:bd:6d:5f:8d:63:a5:6b:86:17:95:28:3e:29:1d:b2:
         3d:86:59:ef:5c:36:81:09:1e:13:b6:b1:05:58:52:fb:35:89:
         98:3f:13:35:fe:47:0c:6f:94:87:d9:77:02:4f:5f:f9:1d:49:
         7b:24:85:a7:40:f0:4b:8c:d7:fd:2b:e7:64:2d:a7:5c:10:8d:
         b1:41:ed:b1:cb:bb:87:39:ad:40:26:ce:18:b5:63:7e:02:22:
         c2:3d:62:6b:6d:c7:70:7b:1f:96:ef:06:3e:5a:09:ca:d7:06:
         44:77:d7:7e:da:99:9f:93:6d:55:a6:e2:eb:b0:2f:b0:86:48:
         7c:b0:76:65:95:a0:33:de:be:7f:bf:60:b6:f8:88:93:4a:03:
         f7:c6:2a:27:b1:e4:26:9e:9c:e4:03:d0:ee:3f:77:b5:b0:4f:
         77:57:2f:e9:08:f3:b5:93:e5:02:1d:7e:ea:3a:57:1d:69:53:
         af:92:1b:5e:45:d1:d3:4e:a7:c8:25:97:4a:f7:07:a9:74:97:
         c0:55:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:39:27 2025 by rpki-client