This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File:                     EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier:          PDcVQtDHSI8Xhf0q7jU0qRE5n7o/Vc5V9lGxp6B4XBQ=
Subject key identifier:   EA:95:F0:B8:72:71:0B:6F:43:D6:27:B6:04:63:3A:2D:67:FD:C0:79
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer:       /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial:       019B5CAD93A2804211123E287EC76EFBF55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number:          10FE
Signing time:             Fri 26 Dec 2025 22:00:37 +0000
Manifest this update:     Fri 26 Dec 2025 22:00:37 +0000
Manifest next update:     Sat 27 Dec 2025 22:00:37 +0000
Files and hashes:         1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: m0a1k5ILySUJhiySk54Z0HXKQo0LPmV3f2dgAbOm4uk=)
                          2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
                          3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:ad:93:a2:80:42:11:12:3e:28:7e:c7:6e:fb:f5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
        Validity
            Not Before: Dec 26 22:00:37 2025 GMT
            Not After : Dec 27 22:00:37 2025 GMT
        Subject: CN=ea95f0b872710b6f43d627b604633a2d67fdc079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:06:0b:1e:22:80:d9:9e:dd:7d:71:02:e2:
                    ec:6a:de:48:e4:63:06:a7:17:b8:ee:df:25:f3:59:
                    db:96:b8:5c:f9:e8:74:9d:29:8f:71:01:35:b8:a6:
                    9a:ad:0a:a8:b9:96:99:f1:ca:ce:ff:b3:f2:05:33:
                    38:12:ed:64:40:28:3d:2a:f7:a8:35:38:49:96:04:
                    3f:49:78:2d:aa:84:9f:b0:b8:5e:fa:52:75:46:bd:
                    15:31:e2:c6:e3:19:69:19:b3:c0:4d:16:1a:b8:a2:
                    c1:36:f9:d5:83:cc:2a:68:f3:89:9a:cd:3b:4b:94:
                    e5:fb:1b:b8:35:9c:73:7b:a7:39:6e:6d:a7:fd:b5:
                    4a:77:24:a7:a3:07:75:60:12:9d:ae:c6:be:4d:ff:
                    6b:a5:a3:31:5a:e2:2f:42:6f:8a:8d:76:25:6b:56:
                    9c:f7:f6:87:d4:53:e0:45:b2:09:30:3a:81:13:33:
                    46:6c:61:42:66:8f:eb:a7:75:ea:d5:0c:3f:8e:ef:
                    3f:39:6f:19:36:4b:f0:43:5c:b2:2a:f6:36:a0:85:
                    33:b3:a6:6d:5c:d0:8b:6a:25:a9:6d:6d:ee:70:80:
                    e1:22:cc:01:a0:5b:01:2a:3d:94:ea:12:5b:58:98:
                    d5:7c:3c:44:98:22:de:9a:4a:52:73:67:66:e2:40:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:F0:B8:72:71:0B:6F:43:D6:27:B6:04:63:3A:2D:67:FD:C0:79
            X509v3 Authority Key Identifier:
                keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:58:b3:1c:ac:50:25:21:66:3d:a1:c7:b8:29:c1:1e:57:
         78:d1:62:ca:dc:aa:ea:90:4d:81:bc:37:f0:ca:a7:75:61:58:
         ea:bf:7e:b5:c3:01:c7:5a:60:f0:a8:c7:95:80:4f:b7:51:0a:
         38:9d:2f:f7:85:a0:70:73:91:92:16:34:ef:d0:36:0c:78:22:
         ba:64:e1:d7:4f:1b:7c:2b:e7:bc:15:71:ba:31:16:0f:25:39:
         07:3a:5a:b3:47:82:c8:7d:4d:10:25:01:a8:38:1c:91:41:09:
         c6:3b:c6:9b:af:fe:d7:80:66:b4:74:b3:8d:70:a9:6b:ae:0a:
         b2:41:69:01:98:29:04:95:b6:c9:7b:1c:58:00:7d:4d:46:e0:
         36:9d:c9:86:a2:20:ec:06:1d:ac:1b:7f:a3:13:ec:4b:d7:eb:
         6f:86:1d:07:06:5c:55:ec:f9:3f:4a:c7:69:b9:73:90:ba:ae:
         32:6f:f7:a1:11:73:cd:62:71:e7:04:ec:42:65:78:3f:81:74:
         d7:db:3f:26:81:09:6b:23:c7:56:50:ea:ee:13:77:0f:a7:64:
         bb:43:78:33:f3:b7:24:98:fd:0e:f1:6d:ef:c4:5c:a5:fa:6e:
         9e:9b:1f:9a:da:d4:11:11:33:7c:a3:f7:92:ac:33:7b:d5:60:
         7d:f4:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 00:45:28 2025 by rpki-client