This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          SBYPIZ4IO1how9QZZgpnwenHUheRsKH/h4w0j62hihg=
Subject key identifier:   59:69:6B:DD:2D:CD:19:BF:89:AB:A1:E6:12:FF:44:E0:A6:C5:61:68
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019B6B0E17BB941DE81BBCA5428F1A08B68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          13EA
Signing time:             Mon 29 Dec 2025 17:00:44 +0000
Manifest this update:     Mon 29 Dec 2025 17:00:44 +0000
Manifest next update:     Tue 30 Dec 2025 17:00:44 +0000
Files and hashes:         1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: 7MWxxqdy4KiL2W1EFZRuAxlt5vrc0vbiblBTzyDrxok=)
                          2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 15:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:0e:17:bb:94:1d:e8:1b:bc:a5:42:8f:1a:08:b6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Dec 29 17:00:44 2025 GMT
            Not After : Dec 30 17:00:44 2025 GMT
        Subject: CN=59696bdd2dcd19bf89aba1e612ff44e0a6c56168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:2d:ef:e4:70:51:ce:9a:95:1c:9d:50:fb:
                    c5:58:df:50:d7:3b:06:5a:70:45:d7:e1:2e:23:4c:
                    a6:57:1c:c1:a6:ed:33:34:0c:84:05:79:1f:32:9a:
                    7b:d3:5a:75:44:58:79:9a:c4:e1:ba:c3:82:0f:d6:
                    1e:8c:21:0f:3c:a0:bd:c4:01:09:f3:41:04:93:fb:
                    fd:aa:0b:aa:ef:63:33:2f:79:97:86:13:16:33:66:
                    ab:01:c9:97:e4:50:4d:29:e7:3d:b5:39:da:2e:ac:
                    6b:5d:06:e0:6c:27:b9:d3:e0:aa:c4:68:37:95:4b:
                    c4:7f:21:3f:39:89:98:ab:68:28:e9:45:f7:54:38:
                    ce:ac:10:a1:52:97:84:2c:b7:c4:eb:cb:74:36:fe:
                    df:27:bb:08:f7:1e:45:b8:e6:86:69:68:ef:d2:6b:
                    9c:1b:bb:83:51:35:0a:95:f6:db:48:d7:3a:c9:18:
                    02:a4:85:8c:74:77:fa:ea:d4:66:d0:89:3a:71:26:
                    43:59:0a:97:96:36:2c:37:ee:1b:66:d4:36:e6:e8:
                    f0:38:70:66:86:fb:38:af:04:ff:ba:97:0e:c9:18:
                    99:cd:a3:cc:fa:ea:3e:40:5d:c2:3f:ac:8b:38:5a:
                    2e:91:bd:00:68:a5:5a:2a:15:34:cd:e6:36:b2:ab:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:6B:DD:2D:CD:19:BF:89:AB:A1:E6:12:FF:44:E0:A6:C5:61:68
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:6e:f5:7a:fb:97:ff:bd:53:a4:cb:12:19:df:63:3a:6b:
         dd:63:40:4c:03:71:6f:8c:d2:72:ae:31:ab:d1:3f:ee:5e:f1:
         14:39:47:a3:2d:03:72:fe:da:28:83:6d:0e:5d:5e:52:4c:83:
         0e:97:31:10:4d:d1:86:c8:83:98:34:b9:d4:fe:3a:e2:47:f7:
         db:8c:27:d2:67:76:47:3a:83:b0:3e:35:da:48:31:ea:e2:b3:
         fd:b0:c8:82:dc:54:60:52:cd:4e:1b:75:db:60:56:fb:8b:8e:
         59:e3:4c:87:ff:cc:2d:e3:40:3c:4d:7b:c7:f0:9a:86:b3:2d:
         97:96:b0:90:40:18:51:ff:2c:66:d7:d5:b2:d2:2e:2c:73:34:
         6a:92:34:6a:0e:04:81:22:05:38:20:73:0d:86:c8:54:9a:1b:
         e6:5a:ec:64:d4:2f:6f:82:67:7e:ff:9b:57:b8:8d:21:09:5a:
         02:aa:5c:02:05:e8:1a:be:c3:0b:a3:6e:c4:86:9f:0d:d1:67:
         77:0c:4b:28:ee:be:c7:23:4b:4b:e2:b1:03:d6:f7:e6:a5:91:
         c6:9e:3b:0d:96:b7:54:0f:36:ef:8d:91:c9:d0:80:c5:40:7d:
         87:53:3b:55:d8:3f:26:ae:0b:10:47:18:db:be:19:7f:c4:d2:
         c3:6d:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:39:06 2025 by rpki-client