This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          t1DfBSCgKtx22OQTi8/EewOwhA0OwFQcTLhgghaRnkQ=
Subject key identifier:   11:58:93:7C:DF:EB:E2:81:52:36:08:1D:E0:16:9C:1B:07:8E:1D:DF
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       019B405C840F3E6FC3D98E3DB6FA75FDE75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0E54
Signing time:             Sun 21 Dec 2025 10:02:43 +0000
Manifest this update:     Sun 21 Dec 2025 10:02:43 +0000
Manifest next update:     Mon 22 Dec 2025 10:02:43 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: q9sO8hBluQBDkWlzflEzdJb21iNnfaHYPZz4kiYvtnk=)
                          2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 10:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:5c:84:0f:3e:6f:c3:d9:8e:3d:b6:fa:75:fd:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Dec 21 10:02:43 2025 GMT
            Not After : Dec 22 10:02:43 2025 GMT
        Subject: CN=1158937cdfebe2815236081de0169c1b078e1ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:64:c3:5a:eb:52:bb:35:5f:f2:9a:cd:bd:
                    ee:73:49:86:04:cf:33:e4:d7:55:61:b3:1a:00:26:
                    59:f8:a4:77:13:06:af:4e:53:91:0b:a2:f0:fb:4f:
                    85:48:e6:55:9b:37:eb:d9:5a:56:b4:61:30:34:cd:
                    0e:0e:15:fd:80:62:b3:09:50:fc:f5:3c:c1:4b:f0:
                    52:c5:a6:b0:65:9a:ea:7f:39:9e:eb:44:c7:06:0e:
                    07:98:92:26:63:a2:aa:c0:a6:f2:c0:26:2d:22:40:
                    ca:e0:21:22:58:65:af:75:39:7b:b6:9a:7d:66:d0:
                    3a:57:76:36:e9:ad:b0:5b:7f:4a:8f:2d:6c:db:c6:
                    87:8d:3a:43:2b:64:28:53:94:86:16:65:ea:20:1e:
                    62:7b:72:ea:79:e6:72:24:0b:f7:96:32:a3:38:9a:
                    5c:4e:8b:fc:8f:2c:e1:1a:cb:7a:79:56:53:d1:8d:
                    37:47:1c:26:fd:32:39:d8:cf:bd:64:70:e5:0a:01:
                    4f:11:37:6f:92:0b:e9:73:8d:bc:cd:2f:eb:f3:79:
                    b0:70:68:16:c2:e9:e4:9e:ea:e2:58:98:2b:86:85:
                    03:b6:48:db:60:2a:80:af:d0:42:8d:8f:52:ba:9f:
                    f9:18:1c:62:3a:88:a2:49:b7:4e:46:cf:e3:82:9d:
                    3f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:93:7C:DF:EB:E2:81:52:36:08:1D:E0:16:9C:1B:07:8E:1D:DF
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d2:1a:43:3d:d7:f7:b9:3e:36:74:d5:5b:1c:9e:e4:ba:20:
         a8:c5:a5:40:42:2d:b0:22:68:1c:70:2d:57:f3:64:be:5c:9f:
         3c:c8:95:7d:e0:0a:3a:00:a9:dc:1c:16:e8:6b:d8:d2:bf:53:
         08:90:af:2b:11:d0:84:dc:a3:e3:2f:a7:72:b0:d6:d2:6d:07:
         46:73:37:8c:bd:d2:10:e8:0b:5a:70:78:77:12:00:55:4a:4b:
         69:7e:ac:f0:00:b7:b0:31:5e:93:49:9d:77:6e:5c:57:38:58:
         d1:51:26:f7:f6:f2:fe:1c:e2:7a:3e:c0:19:d2:db:52:e9:a4:
         7f:e9:09:d6:2e:1e:66:26:77:7c:a8:d9:fa:7e:a5:b7:6e:99:
         1f:29:21:e7:96:68:a7:91:81:cd:2f:c9:5c:b8:77:15:03:97:
         a7:cb:ea:0b:34:8b:32:11:d1:57:14:eb:76:d5:32:da:4a:83:
         df:45:f1:c1:01:d3:cc:fe:9f:8a:c9:f6:33:63:6f:7a:57:13:
         41:9d:70:7a:90:8a:a0:49:43:06:77:df:67:84:29:43:92:53:
         78:13:9d:a6:f0:28:63:8a:24:d0:6f:39:fb:59:6b:12:5a:60:
         ab:8b:78:20:b9:34:02:cb:fb:df:78:5a:12:c6:d2:5a:fe:fe:
         84:aa:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:19:25 2025 by rpki-client