This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
File:                     eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft (raw, json)
Hash identifier:          4vmb95OqoVPrWeIOu+l4fP0mcI607vMzwuvINbOFMc8=
Subject key identifier:   20:DE:2E:CD:D0:30:38:6F:83:77:77:0C:D6:49:98:79:97:AB:0B:E6
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Certificate issuer:       /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial:       019B397D4BCBDE1CE268819D7BD2972C26D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
Manifest number:          0CA2
Signing time:             Sat 20 Dec 2025 02:01:11 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:11 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:11 +0000
Files and hashes:         1: BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa (hash: QoejBXywxlS59Ku6I9XeNMEgUGcsO7GymdNfXSFLhps=)
                          2: GBm_VAZMm95tvGvpR8c8CkKdzyw.roa (hash: /MkVaXn8Lh0U59FVf0qSK7VZuxTGbFM8GznUiwatBTk=)
                          3: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (hash: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=)
                          4: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl (hash: 9XpnYf4z41TkHqlMB2uUIECtKJ35gq+0eX3/qDPQais=)
                          5: iYjj4YqAYkDaJ9eptskKUPFJFTk.roa (hash: ZJZirU9LjNKyBMjTuKlZGLz5q49ZAFYRK8BpWP4E6Qs=)
                          6: xv9HfwhggDXbUMv-czQzhIKTeZ8.roa (hash: 8zbraxRvCOHngoKaCuyrD6Tzu9xckameA/akAOr4XQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:4b:cb:de:1c:e2:68:81:9d:7b:d2:97:2c:26:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
        Validity
            Not Before: Dec 20 02:01:11 2025 GMT
            Not After : Dec 21 02:01:11 2025 GMT
        Subject: CN=20de2ecdd030386f8377770cd649987997ab0be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:a9:c1:39:bd:4b:09:bc:04:39:3f:e4:e4:
                    5a:82:41:6e:b1:24:cf:aa:31:19:95:03:64:6a:f0:
                    77:29:1b:2f:6e:ed:5c:31:52:ec:9f:f9:77:75:58:
                    21:6e:a8:55:c1:14:73:75:a8:53:c1:95:e4:2c:48:
                    1f:21:a2:01:c6:47:4d:53:f2:e3:0c:9c:0e:d0:34:
                    05:12:f8:47:29:ed:91:59:d2:c4:5f:64:fb:b3:7b:
                    74:86:a1:a1:95:0a:1d:49:7a:08:f8:19:0b:56:e4:
                    3e:83:b8:bb:53:c1:15:b3:25:ee:89:6a:8f:b0:0f:
                    f1:7f:2a:d6:32:23:1f:59:99:14:2f:8e:6e:0a:3d:
                    b4:00:bd:e7:63:fd:1e:f7:65:61:43:1f:9d:e5:c1:
                    00:ae:34:e8:f7:b8:b3:62:16:d8:6c:13:8f:54:48:
                    ed:dd:e9:38:f1:19:44:2e:db:82:80:72:8e:db:32:
                    4c:cf:e7:ed:e3:df:32:48:08:c5:ec:4f:a1:09:50:
                    cb:91:e6:98:83:d5:db:64:e1:10:37:c3:08:f3:7f:
                    ef:98:1f:f8:3a:25:6a:ab:44:c7:aa:5a:06:11:ab:
                    d5:59:fa:b3:f5:3f:d2:f7:fd:c8:ff:80:37:b4:9b:
                    9b:4c:e3:86:f3:bf:a6:11:03:12:7d:49:ea:cc:8d:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:2E:CD:D0:30:38:6F:83:77:77:0C:D6:49:98:79:97:AB:0B:E6
            X509v3 Authority Key Identifier:
                keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:06:f6:af:98:dc:ee:18:bb:ff:23:67:02:25:a1:71:23:
         e7:7e:52:bb:66:57:3e:09:2a:d2:4c:00:0b:3e:ef:d6:1c:d7:
         b7:92:1f:7b:06:c1:f8:7e:d5:cd:1e:c0:3b:9d:98:db:70:03:
         6b:7b:fb:68:95:f6:69:dc:31:00:59:97:a7:34:0d:9a:b8:74:
         20:7e:96:13:8f:d4:01:68:f6:73:00:4e:c7:c5:c3:52:af:7a:
         82:e9:10:f1:9e:40:fa:6b:ff:4e:12:e4:fc:9e:b5:ec:0f:31:
         f3:59:03:27:c9:a8:74:dd:50:67:56:ac:67:4d:e4:95:15:62:
         4b:cf:15:66:7c:d6:ec:b2:bc:cc:53:6e:55:77:eb:ba:3f:1c:
         18:84:72:81:53:05:28:83:d2:88:fa:b4:eb:d2:a0:4e:f4:d2:
         d1:20:dd:32:cf:c7:d2:ab:57:0f:2b:44:c7:7b:82:0f:00:22:
         6b:fa:65:67:a1:4e:91:60:1d:e8:fa:ca:49:4a:7f:f9:97:e1:
         96:a7:bc:aa:b9:2e:f0:c5:3e:d5:fc:bc:13:e2:13:a0:aa:6d:
         b3:e8:65:87:da:58:0c:50:27:37:98:22:a3:c1:f6:b3:fd:1d:
         b3:49:63:96:e3:23:bc:ea:fa:58:1d:b6:92:5f:28:d9:3d:fc:
         6c:a9:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:41:23 2025 by rpki-client