This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
File:                     EuKAOWRtzDLs61hCj5fMmUuZhXc.mft (raw, json)
Hash identifier:          zC5Lj7wfZYcnVJEdioZyza59jI1VTdg+xUPyBdTzsug=
Subject key identifier:   C6:3E:87:21:2B:A2:9C:E2:CD:B2:60:00:C1:B4:DC:77:A4:24:10:30
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Certificate issuer:       /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial:       019B38D89877301562A54CE42D0B3A6C8AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
Manifest number:          8E
Signing time:             Fri 19 Dec 2025 23:01:17 +0000
Manifest this update:     Fri 19 Dec 2025 23:01:17 +0000
Manifest next update:     Sat 20 Dec 2025 23:01:17 +0000
Files and hashes:         1: 7SeHePakv-49QV1iivppyY5FGGM.roa (hash: LH5P1T9uSw4R9Uj7sF/hp+4LcLByZVEyPgzphgUmL6o=)
                          2: EuKAOWRtzDLs61hCj5fMmUuZhXc.crl (hash: tQQJUn49eWUHcdx54Ak+BjFWaGrkgXjzTnAkvHUrh1E=)
                          3: O2g_KCSHTBtUkTmnZj5xACpZSnI.roa (hash: uP/CG7/+H7QBwYSZ9ySWOvBQiMlDRJGawcJEkDkwNtc=)
                          4: mthvTy4E1EiDk73f3uwFyAG7KJQ.roa (hash: YixVgctcvu1THgjSuBQJDrR+WqI/9yv3o3HH6A442co=)
                          5: sppSM2y7rJT-h7ADD-NU7WDxdyw.roa (hash: 4LbWqx/mTc+oUB9onuqY3e927U8194epwh7XyKhVMwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:98:77:30:15:62:a5:4c:e4:2d:0b:3a:6c:8a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
        Validity
            Not Before: Dec 19 23:01:17 2025 GMT
            Not After : Dec 20 23:01:17 2025 GMT
        Subject: CN=c63e87212ba29ce2cdb26000c1b4dc77a4241030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:96:bc:9f:aa:97:8d:fa:54:31:d4:8e:1c:
                    0c:d3:34:00:4a:9d:8b:aa:8c:18:93:ad:74:64:b6:
                    75:7a:04:b1:55:27:41:81:a7:08:23:02:d8:67:0c:
                    25:2b:a9:0d:36:bc:b6:f9:f6:81:b7:71:83:ce:6e:
                    bf:d3:3c:84:5e:0d:86:15:10:22:02:f4:f5:1f:6d:
                    6c:50:4e:eb:dd:c9:50:94:2b:15:3e:4a:a4:80:26:
                    30:3e:0b:df:96:20:fd:84:25:43:60:bb:ea:9e:c6:
                    46:5c:7d:0b:3b:27:b6:c7:08:0a:1f:70:66:d5:cc:
                    b8:2a:9d:4e:5f:5a:1d:52:4c:71:fb:69:f7:27:a5:
                    20:06:2c:22:27:14:6e:a2:16:48:fc:c7:70:c0:61:
                    db:e6:65:11:c8:c9:5a:b2:8e:b0:a1:61:92:0a:e5:
                    ed:27:51:42:0e:73:b5:7a:be:5b:06:41:19:f8:6d:
                    33:96:49:62:10:c9:ca:a3:b9:3c:1c:db:3a:0a:61:
                    97:ce:b2:05:bf:23:d7:d8:4c:86:9a:c3:20:bd:9a:
                    0b:4d:45:8f:2c:9c:6c:21:cf:85:65:a5:c6:f0:17:
                    9e:25:a3:fd:dd:6c:53:0e:b1:2e:29:f2:e8:8a:e5:
                    fd:7f:db:af:76:9c:b5:9a:89:f0:56:b0:56:17:ee:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:87:21:2B:A2:9C:E2:CD:B2:60:00:C1:B4:DC:77:A4:24:10:30
            X509v3 Authority Key Identifier:
                keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:cd:36:40:55:69:ec:3a:32:e9:3f:b5:96:89:df:3e:98:
         fa:ac:64:55:27:9d:8f:ed:63:0f:ed:aa:3b:03:60:6e:63:27:
         f3:97:45:29:da:b4:f3:97:d3:91:2c:9a:f4:31:7d:3f:56:e4:
         d0:05:e0:b9:e5:a1:d8:9c:ec:58:6b:9f:cf:b0:5e:76:bc:97:
         cf:83:ca:02:a7:f6:fc:ec:f5:39:49:7b:62:4d:ca:4f:92:27:
         be:cc:4a:c4:70:53:12:e9:82:9a:1c:9e:05:65:f1:5a:1c:0e:
         dc:71:0c:57:89:8b:4e:64:61:01:71:19:58:5d:97:22:3d:c1:
         12:db:c5:74:a4:13:93:89:83:be:c2:3a:64:e6:ae:f3:9e:af:
         bf:07:92:e4:4d:4f:34:08:cd:f4:be:a2:47:5c:9b:f3:06:64:
         5d:23:a6:5f:43:0e:4b:d1:72:cd:3c:37:59:bf:70:d7:2b:df:
         08:9b:80:0e:92:c6:74:e5:27:6d:d0:64:d1:ba:51:71:d8:34:
         24:16:c6:b7:bf:0e:a0:4e:62:d3:33:f9:0e:a6:de:5a:94:8d:
         1a:42:9c:ff:36:e7:26:0c:dc:83:4b:eb:44:f4:ce:9c:46:21:
         22:b5:0d:7d:c3:c2:60:72:80:0e:d2:c5:b9:87:55:8c:f2:da:
         43:3e:c2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:28:43 2025 by rpki-client