This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          b9y0L7YlLf5GIb140xMC3hLWgSWo6yMxUGnN2yIuGHs=
Subject key identifier:   DB:FB:B2:FE:43:F2:1F:AB:19:A7:5F:F0:11:A5:D6:1D:E9:3B:5E:0C
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       019B70D930F5AE845D8009DD85A27DC2C37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          1217
Signing time:             Tue 30 Dec 2025 20:00:40 +0000
Manifest this update:     Tue 30 Dec 2025 20:00:40 +0000
Manifest next update:     Wed 31 Dec 2025 20:00:40 +0000
Files and hashes:         1: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: hBoxfj0dP4HBGwURLlZx+o4ugphrTmwrHSfFxh3gJuA=)
                          2: EkuLKLwBZy9Ew-cW-qDf_L2DQZ0.roa (hash: wabdO88bjoZkvWTZ1oDgrViKiBuLG+cwDnC+1ngAcnE=)
                          3: _u_l27IwldJdamRG8nCKm7qzuG4.roa (hash: 3u0NeIL8w+up1AeuOPP++YzT/XlJSwTH6E2UXyQIQ2g=)
                          4: fdHmNhmeaGN63Rfej1kx6Ds_ug4.roa (hash: bsbovLdKgWXWubLDq3efB8YJNM57kBg5PR8i1Ba+Dfs=)
                          5: qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa (hash: cEPHwqf9ZGQy4f5t4JvJXVhOqo0mssjCD9DkTCC84C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:d9:30:f5:ae:84:5d:80:09:dd:85:a2:7d:c2:c3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Dec 30 20:00:40 2025 GMT
            Not After : Dec 31 20:00:40 2025 GMT
        Subject: CN=dbfbb2fe43f21fab19a75ff011a5d61de93b5e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:af:5b:13:b4:9c:0b:43:a2:3e:ee:b7:3a:
                    59:39:0b:cd:9a:3d:b9:28:3d:be:d5:7b:d7:fa:b9:
                    f5:ae:4e:49:17:c2:41:8a:d7:50:17:cd:cc:d2:96:
                    2f:93:70:22:8b:3b:9a:72:d7:f3:e0:3d:fb:fa:4b:
                    10:bf:a8:95:f2:cc:56:46:5c:3d:9d:88:12:f8:da:
                    6a:23:84:22:12:d3:65:79:c1:f8:0e:62:90:aa:7a:
                    d8:b5:05:9d:04:8f:58:2d:3e:aa:c8:49:c4:d4:1d:
                    81:ba:41:c7:65:0c:21:bd:b6:96:5e:9a:08:53:a0:
                    3e:4b:0e:26:3a:bb:f9:38:c0:9c:55:2b:7c:a6:de:
                    50:87:6a:29:94:cc:d3:f3:72:e7:72:74:52:73:ec:
                    b0:2e:18:e7:61:1c:70:92:17:92:b1:51:92:d4:5f:
                    a8:9a:48:3f:55:f4:59:a7:a4:51:66:47:7b:b7:aa:
                    60:01:90:20:f4:5b:16:fc:04:06:04:3d:78:c1:7a:
                    f3:f2:06:3d:30:fe:dc:62:09:64:25:a6:75:6e:b9:
                    36:7a:d1:a8:ff:81:9e:59:47:ec:4c:86:13:18:16:
                    2e:b8:44:c0:a4:e0:08:1e:53:56:4c:05:53:37:d5:
                    ac:a9:5a:5f:05:dc:cf:89:17:cf:76:a5:c6:b7:8d:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FB:B2:FE:43:F2:1F:AB:19:A7:5F:F0:11:A5:D6:1D:E9:3B:5E:0C
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:7a:f7:24:3e:4b:1b:d3:c2:42:ff:68:b8:6f:36:fb:1b:
         35:b8:9a:13:5d:0a:ee:43:ab:9f:dc:a8:eb:9e:b9:4e:a7:93:
         64:06:f1:54:3c:e7:db:b3:3c:ee:56:31:7b:09:bb:d6:27:aa:
         66:db:2c:2b:f0:d0:79:4d:98:24:ca:2b:bf:63:f8:9c:9a:35:
         d5:b4:98:17:87:60:dc:c9:c3:e2:e9:4c:41:4b:c5:f1:8c:41:
         81:3e:a0:09:fd:0d:e5:ec:44:36:bc:f6:a2:1c:30:17:6b:16:
         42:40:10:8e:a3:8f:47:64:8d:b2:a4:c6:85:a3:44:6b:c2:95:
         5e:81:93:98:c9:22:17:8a:34:01:c3:6d:c6:0c:d4:92:f2:f3:
         34:d8:7d:fa:a4:30:87:c7:d8:4b:f4:6b:ad:5a:ed:f5:9c:2f:
         49:00:6e:a7:03:9c:3f:a5:0d:72:3f:8a:b1:f3:82:e6:ac:71:
         b0:5b:9d:c9:41:2f:6c:e1:21:fa:52:1d:28:be:3d:79:33:30:
         3e:f6:01:2d:b7:a4:6e:4c:9d:6f:20:1c:57:52:c3:e2:28:36:
         e7:1d:19:ac:af:fa:9a:5c:a6:19:34:41:3f:14:13:63:1d:c0:
         88:99:04:e7:c8:0f:48:7a:5f:9f:cc:44:35:8e:c7:40:20:e8:
         61:cc:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:21:46 2025 by rpki-client