This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File:                     eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier:          p13Rf1GKLb9Pz0KJ9RFAiA+tqLn+bC+Ggbukl0HXiiA=
Subject key identifier:   CF:AD:0D:0E:23:64:CE:83:76:EB:94:E2:43:C3:A7:41:27:1F:E2:49
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer:       /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial:       019B5A51BEBEAACFA26E8BB2F567E8607F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number:          8E
Signing time:             Fri 26 Dec 2025 11:01:05 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:05 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:05 +0000
Files and hashes:         1: A6miDIxB8Wdjtr_lFnVP3zc1yEU.roa (hash: u75fl3PpONlhzAXKJftyifbBGQ2cdDNjbrEViQz/gYc=)
                          2: Wi7lq0EepuoKE1ECDq4hgwqhTJ4.roa (hash: snR41jbhkVx99lA80we836PNmUV3pPf4+CmkKZ9ZfHs=)
                          3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: /a8uODwu8c70XLcYky25sO1K3Eec1aF/JDWr6z++jbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:be:be:aa:cf:a2:6e:8b:b2:f5:67:e8:60:7f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
        Validity
            Not Before: Dec 26 11:01:05 2025 GMT
            Not After : Dec 27 11:01:05 2025 GMT
        Subject: CN=cfad0d0e2364ce8376eb94e243c3a741271fe249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:ea:e4:f0:46:88:9f:49:5e:be:77:ad:82:
                    04:61:96:e1:48:c4:22:fe:cf:1c:96:83:d0:9f:3b:
                    89:5f:b0:89:b7:b4:d0:d9:76:83:f6:e1:5f:bb:13:
                    5b:58:0e:b4:bc:3e:32:bf:2b:8d:fb:2d:3e:cd:81:
                    8d:6d:ba:a2:ab:92:7e:10:0b:10:4e:57:d5:4f:fc:
                    4f:a0:77:09:4e:ea:25:88:50:fd:c7:2f:98:a6:bb:
                    92:32:f8:c5:69:07:79:63:8e:4d:1c:7a:13:c7:a3:
                    8d:05:7e:2d:8c:51:d8:63:ab:95:3e:0e:b8:75:59:
                    1a:1d:fb:de:ef:d8:3b:6a:ba:84:13:8b:ac:e5:1c:
                    0d:f5:89:2b:b9:24:5b:fd:e1:76:a6:5d:17:84:8e:
                    00:d6:b0:18:6a:64:7f:67:5a:32:57:df:9a:30:b9:
                    d2:3c:e0:79:e6:50:15:8f:50:d5:6d:a8:9f:a9:fe:
                    e1:91:02:a5:d1:06:0e:6b:fa:2f:c9:bf:01:91:25:
                    28:c9:e2:dd:d8:b0:90:36:91:5e:5a:9a:48:34:a9:
                    3e:41:91:df:f9:30:89:8f:6a:55:d3:cd:c8:07:f1:
                    bc:30:2b:00:57:7b:be:f0:26:54:a2:6e:11:2b:18:
                    77:9e:fa:ca:34:8e:5e:fb:ad:f3:ea:c2:04:19:5b:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:0D:0E:23:64:CE:83:76:EB:94:E2:43:C3:A7:41:27:1F:E2:49
            X509v3 Authority Key Identifier:
                keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:82:0c:ad:d8:33:79:49:58:fd:57:ce:c6:e3:f2:64:fe:
         0b:ad:2b:19:10:b6:2e:02:1f:ef:92:48:d1:ee:db:61:7f:96:
         a6:90:db:10:34:f4:7b:a7:42:4f:c2:4c:11:61:d3:13:e9:65:
         d2:a0:b4:25:49:a9:09:6b:2a:f6:d1:01:2c:91:f4:ad:a1:91:
         27:2e:ef:bd:f1:e0:18:8c:cf:2f:fa:4e:f3:27:8a:03:e8:81:
         7b:eb:e0:36:f1:20:9e:56:50:64:89:b8:c7:ef:73:fb:a5:fa:
         7f:7d:87:39:59:dc:af:ef:04:07:64:46:ef:b7:c3:ef:05:ef:
         67:d3:27:15:58:c6:7e:b6:8f:3f:a6:7f:21:2b:b1:dd:96:48:
         f5:a6:50:28:6d:91:f8:55:4c:9a:92:8e:62:52:17:db:59:1f:
         14:f0:f0:8d:8f:91:db:e0:c7:08:6b:ee:64:5c:f8:7d:32:91:
         4c:a0:29:04:2d:ba:ad:02:72:ae:dc:e5:e9:ee:c7:2e:f5:1f:
         45:35:90:41:6b:1d:e9:0c:48:b7:eb:82:64:e4:b5:b6:51:2e:
         a1:39:ce:91:a8:74:59:f5:b2:4b:e4:62:73:5f:b4:c9:e2:33:
         8d:70:74:ec:19:05:50:70:d4:1e:37:8f:12:ad:9d:d6:c3:34:
         fa:a3:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:03:43 2025 by rpki-client