This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File:                     EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier:          ngdCfuji72lWUf/8nRdTdjzDZQJ3yFe4IshXkTLGdpk=
Subject key identifier:   81:65:09:43:D2:33:34:2E:7B:B4:35:26:13:57:55:58:65:90:90:35
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer:       /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial:       019B3BD9040C5C2819E5874E1CF2AC07810E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number:          10ED
Signing time:             Sat 20 Dec 2025 13:00:36 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:36 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:36 +0000
Files and hashes:         1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: qPqgNtPdqG9tRePO13rV9nYXIICojuzLoObnkLsYYas=)
                          2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
                          3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:04:0c:5c:28:19:e5:87:4e:1c:f2:ac:07:81:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
        Validity
            Not Before: Dec 20 13:00:36 2025 GMT
            Not After : Dec 21 13:00:36 2025 GMT
        Subject: CN=81650943d233342e7bb435261357555865909035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:57:0d:1c:7b:26:7c:85:bc:61:7d:90:b6:
                    c7:c0:c8:6a:c5:58:b7:8e:d2:48:cb:2e:40:38:9d:
                    c0:9a:34:0c:52:ec:f8:fa:ec:6b:1b:90:69:82:e4:
                    ee:8a:60:4a:ac:6d:d3:ae:c2:da:72:1c:9c:e0:3f:
                    49:af:7b:3a:07:03:58:bf:fa:53:bd:83:2d:24:3f:
                    0e:e7:4e:73:b3:79:76:52:75:ff:cd:36:f2:cf:e6:
                    58:7e:b0:c6:44:d0:1f:e0:38:79:af:3a:fa:ea:dc:
                    a0:e0:e2:0e:ef:95:0b:b8:75:bf:d0:5d:ae:b8:69:
                    83:93:d6:6d:90:92:4c:fb:78:af:44:82:1a:49:91:
                    ff:5a:e3:e1:a1:02:72:6a:04:55:5b:d3:88:7d:05:
                    43:a2:44:7f:bf:b8:94:21:d2:c1:28:49:1e:52:86:
                    d2:41:ab:93:f9:c0:c2:48:87:ff:71:20:7e:98:26:
                    9a:43:ff:3e:20:df:58:ca:ae:d6:dc:06:6a:71:58:
                    a6:0b:18:b2:0e:76:7e:6d:08:be:f3:85:3a:46:d2:
                    28:37:2c:ca:29:26:9e:79:45:2d:2e:fe:a3:f5:04:
                    78:3f:9d:09:c3:d8:c0:42:36:b5:ce:61:28:e6:84:
                    13:4b:91:1e:8c:f5:5e:22:93:c9:8b:4e:d0:db:36:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:65:09:43:D2:33:34:2E:7B:B4:35:26:13:57:55:58:65:90:90:35
            X509v3 Authority Key Identifier:
                keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:44:95:f2:31:3e:66:05:f8:f3:28:c4:f2:94:68:c3:45:69:
         cc:89:7a:16:8c:d3:fb:f7:0c:bc:8d:66:f4:82:d8:3e:42:a7:
         04:26:9f:20:69:20:02:f9:34:d9:0e:43:5c:af:0e:97:d3:6e:
         0a:25:f3:35:d9:d2:79:84:5a:f9:4b:89:93:2c:e7:00:75:91:
         f2:7b:a6:95:4a:1e:28:84:1c:67:d1:ab:9d:1f:ba:34:43:4a:
         f6:ef:13:f4:be:b5:5a:b0:41:66:be:87:7b:e7:2e:4b:71:4f:
         d5:98:d2:a9:77:c4:42:64:56:62:f5:cd:27:b7:bc:f4:b4:e5:
         4e:46:61:3a:aa:66:1f:90:0e:5c:39:74:2f:ae:5a:21:11:bf:
         71:1b:50:f4:9d:4f:fe:0c:26:25:bd:e9:2d:56:5a:7d:ba:07:
         bb:59:e8:48:7d:0f:1a:41:c2:19:ba:24:f6:a4:c7:5e:15:ff:
         09:a0:b7:fb:3a:ef:e6:91:3a:49:49:ce:23:cf:0d:48:5b:ec:
         cc:49:da:ed:f0:0d:c5:49:bc:5f:75:ed:31:08:9e:70:de:c9:
         e4:1f:97:5e:6c:6a:1c:8e:3f:cc:71:35:be:82:b7:5c:ca:2e:
         68:99:19:64:7a:73:02:f3:47:fb:d8:69:0e:6d:8e:f2:24:54:
         0e:92:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:01:43 2025 by rpki-client