This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          I5FJcvyA2s9Eq/NXuagdjJ+mKBeE+MD/4X5iSrkbHJ0=
Subject key identifier:   AE:95:60:6F:6C:BA:D3:DC:31:CF:A2:FB:A2:53:2E:22:F6:F1:52:13
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       019B416D4278DA87870D579D2382E6CA2349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          0896
Signing time:             Sun 21 Dec 2025 15:00:38 +0000
Manifest this update:     Sun 21 Dec 2025 15:00:38 +0000
Manifest next update:     Mon 22 Dec 2025 15:00:38 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: uBWoiFif9E7G6S6TgyPqkT1lwaREDrO3ycSFLyuTfKM=)
                          2: qs7BbSv0fO0BPXU-Iz3031gKExA.roa (hash: doqNGmfmNSThnCzcC+uqauIEfH+4+SUm/6IU5DxkDTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:6d:42:78:da:87:87:0d:57:9d:23:82:e6:ca:23:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Dec 21 15:00:38 2025 GMT
            Not After : Dec 22 15:00:38 2025 GMT
        Subject: CN=ae95606f6cbad3dc31cfa2fba2532e22f6f15213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:e5:16:e8:dd:86:58:35:89:8a:bb:88:6f:
                    2e:20:7f:38:9d:4f:02:5b:d6:10:f3:0e:2e:61:59:
                    6f:ac:78:76:23:6d:44:2f:ce:a6:5d:da:df:30:af:
                    57:23:2e:1e:67:25:0e:a0:1d:0f:8e:6b:69:2a:95:
                    bf:11:38:de:d1:80:b1:2c:36:60:c2:fd:9e:da:24:
                    e3:7a:5d:8e:15:e7:57:a6:27:94:be:6b:79:4f:c6:
                    77:e3:06:a1:4f:c9:df:70:b9:ba:d6:d2:1e:ce:9a:
                    e2:9e:ea:53:2c:67:78:30:b7:fe:45:56:f5:c5:94:
                    ba:68:59:26:f0:9c:59:db:67:26:e0:4d:5a:d5:41:
                    4e:53:70:87:95:a2:5c:8d:ba:9d:82:24:87:5c:52:
                    4b:d3:da:6b:a7:eb:6e:33:e7:20:9a:3e:76:9b:a0:
                    e8:1f:5e:07:55:22:ac:2b:61:4f:7b:95:b3:55:0d:
                    13:e1:d6:df:42:8a:6f:6a:d4:94:39:f8:b1:50:ee:
                    44:f3:69:2b:90:d6:57:d4:05:39:54:09:13:d8:b1:
                    58:25:05:74:d6:2c:ad:6f:f3:91:a1:12:d3:a5:54:
                    7a:f2:17:b9:1f:68:cb:9d:b1:57:16:20:ad:e5:35:
                    f0:93:fb:1f:cd:34:23:a3:d5:10:a8:ab:ec:69:a6:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:95:60:6F:6C:BA:D3:DC:31:CF:A2:FB:A2:53:2E:22:F6:F1:52:13
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:52:dd:e9:0c:0f:91:db:af:77:a9:1b:92:af:ab:cb:93:
         41:68:83:ce:16:06:bf:35:b7:ee:21:20:64:16:57:2b:16:e9:
         99:42:70:6f:0b:d1:77:af:b1:59:05:6c:aa:65:9d:bd:91:53:
         71:63:48:97:ae:2e:cc:45:8b:4f:47:b2:4b:b6:83:3b:d5:23:
         ac:67:bc:24:b2:a6:b6:c6:6c:5a:bc:a0:20:b1:18:e6:65:35:
         63:7f:17:2b:98:7a:64:15:25:a2:2c:26:6a:bc:d8:6a:43:a4:
         a0:4b:e5:03:b8:e8:39:36:f9:33:a5:72:a4:a3:79:1b:52:43:
         0e:5d:c5:dd:f2:b5:7c:a9:d4:dd:44:e2:8b:4a:a7:4f:7c:b7:
         dc:cc:08:47:bd:82:a6:8e:49:99:40:b4:da:86:c0:62:1b:c5:
         01:8a:f7:f4:dd:44:3d:74:d2:21:f6:b7:0a:67:06:5f:2a:28:
         89:33:54:75:31:e0:7e:bf:f4:5b:c9:fa:3f:0c:cf:1d:05:28:
         b2:1d:9e:29:6e:bb:34:33:ee:70:bb:01:35:59:7b:11:0e:99:
         c8:e1:6e:59:6c:9b:2e:92:37:cb:e7:a2:90:3f:71:79:01:7e:
         f8:b8:51:5a:23:f7:cb:2f:4a:b8:7e:08:2f:ec:c3:08:07:2a:
         53:91:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:59:52 2025 by rpki-client