This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          OJtL+f7gZYEmrrR7GOznznardokCB46eaFSzDIwiQnU=
Subject key identifier:   36:FF:A5:9E:4B:32:D4:3B:F6:B3:AD:68:F9:66:AB:12:DE:B2:01:0A
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       019B3CEB9E78A1463362275640D41294CFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          178B
Signing time:             Sat 20 Dec 2025 18:00:32 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:32 +0000
Manifest next update:     Sun 21 Dec 2025 18:00:32 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: 15CtNuiaeUGoY7X/M88rBGlswaSj0wSRy+6VCuGQ3a4=)
                          2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
                          3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:eb:9e:78:a1:46:33:62:27:56:40:d4:12:94:cf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Dec 20 18:00:32 2025 GMT
            Not After : Dec 21 18:00:32 2025 GMT
        Subject: CN=36ffa59e4b32d43bf6b3ad68f966ab12deb2010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:8e:72:8e:a7:3b:ac:19:fa:c0:ce:55:06:
                    9c:8e:2b:c2:7b:08:04:82:1c:4e:e9:80:82:7a:26:
                    ec:68:ae:7d:91:9c:7e:76:34:5b:3e:be:e7:0b:ff:
                    ca:9b:11:c2:5a:a4:06:23:5e:17:91:35:59:fd:b1:
                    55:92:54:95:3e:62:84:a0:f3:1c:0d:bc:21:e4:7e:
                    c2:b1:10:4f:8d:cd:c3:22:27:12:4b:ec:84:65:f8:
                    c9:b9:c4:1e:a7:31:6c:5e:40:94:ca:09:a2:70:3b:
                    a7:4e:89:f1:bf:7b:3e:72:04:89:4b:24:a7:17:fb:
                    36:7f:40:e8:73:d6:96:34:cf:82:3e:cb:48:e0:91:
                    54:ef:3f:02:96:43:ca:ff:07:4e:48:8a:81:5b:84:
                    e6:f2:10:ad:09:0b:d1:6a:15:b7:22:4b:63:81:3b:
                    8e:bc:8c:35:b4:71:a8:ca:c9:90:be:3e:47:90:cd:
                    3d:e3:c1:3b:1d:26:09:f7:76:49:78:ee:f9:0f:12:
                    8d:c6:02:19:14:e7:40:b9:5a:76:7b:ec:96:ca:7e:
                    43:71:38:2e:57:b5:03:86:cd:29:9b:7e:e7:62:36:
                    6d:54:0e:5b:3f:2a:70:5b:25:c9:6a:1a:ff:fe:25:
                    ab:7e:b1:d2:22:cf:c8:3a:2a:0d:5e:b4:27:8c:f4:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FF:A5:9E:4B:32:D4:3B:F6:B3:AD:68:F9:66:AB:12:DE:B2:01:0A
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:2c:01:66:4a:d5:bc:19:15:e6:3a:1f:71:c4:f1:7f:0a:
         7b:8c:9d:95:75:b1:7a:0d:ec:f8:de:16:10:ce:ec:16:8a:ff:
         d5:22:f2:7f:a7:ec:91:fa:14:12:3d:7e:74:54:69:eb:f5:d6:
         61:eb:5e:39:11:78:be:b5:81:c4:bc:75:66:5c:88:55:5c:77:
         83:e0:c0:f1:f8:d9:50:71:8e:27:17:60:d1:09:98:11:a7:94:
         c2:87:22:8d:f3:e4:5d:3c:1e:37:b9:ea:00:67:2a:2f:eb:59:
         af:a9:49:99:be:4e:f0:cc:8c:5d:ab:28:1f:24:c7:1c:67:51:
         3e:17:04:b1:56:a8:27:69:b9:78:3e:31:1e:61:e8:95:3c:50:
         80:43:e0:27:6e:48:cd:a6:e6:22:cc:0a:d7:1f:b3:11:cb:a3:
         5b:c7:28:cc:95:f7:a9:64:6b:f3:80:83:bf:9c:91:4c:c7:9a:
         d1:d2:bf:19:1d:98:38:32:dc:fd:e4:33:ce:2b:6b:ba:9f:b2:
         f2:7d:1b:0f:76:31:3d:c6:b0:58:2f:00:5e:3b:f6:bc:40:41:
         0d:c9:67:72:a5:c4:00:08:ec:f8:49:db:48:04:55:78:76:a2:
         8a:17:70:8a:f5:4d:c8:4d:51:77:50:89:60:f6:9c:bc:bd:87:
         21:75:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:07:38 2025 by rpki-client