This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
File:                     EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json)
Hash identifier:          kEa3Xxc8j+2CmsD4MxQn2CXLL8F5TMCUkO+mwC1GDeQ=
Subject key identifier:   8A:22:DC:36:C9:28:EA:6E:D4:D9:18:7A:E7:D6:34:68:66:3A:41:BE
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       019B6CC587F8DBB40B9EC830967F0CBC330C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
Manifest number:          15BB
Signing time:             Tue 30 Dec 2025 01:00:43 +0000
Manifest this update:     Tue 30 Dec 2025 01:00:43 +0000
Manifest next update:     Wed 31 Dec 2025 01:00:43 +0000
Files and hashes:         1: APdV8HOuK_baV9w8xFhYPy7-2P4.roa (hash: IitULqtIj0Y4YtBexT7yVT81AkWjJbb2T56Qs1uC9QM=)
                          2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: ChLhE7sWe3pvYvxvmRIMoJGtLefpsc+r1ZE+94c89oE=)
                          3: Fb0skEyX6qOFH4mxiCD0y38K50g.roa (hash: WuLRLLi+4HFH3PUcwNxaQ3ghnNVvZQgN47f0xDAHYEw=)
                          4: fcEGyk-ShkerhmvdFRcRV3UxI0Q.roa (hash: j94ZQOuH+xS4iNOpDw2YYuethGcrhVLCQhL5yC+U8s8=)
                          5: jGYUYth-JS9LpEgUYHaooWrb7Tc.roa (hash: frlNr3HLKX2GRFBcwYSe2xt1qGCkZ5xJR/twdkhb4cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:c5:87:f8:db:b4:0b:9e:c8:30:96:7f:0c:bc:33:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Dec 30 01:00:43 2025 GMT
            Not After : Dec 31 01:00:43 2025 GMT
        Subject: CN=8a22dc36c928ea6ed4d9187ae7d63468663a41be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:47:40:a2:bc:43:5f:d3:41:60:76:56:fe:
                    1f:a9:18:1f:da:b4:86:1d:05:2b:81:a4:87:57:58:
                    93:4d:28:be:52:a8:8e:33:1a:a8:50:06:fe:45:8e:
                    11:ba:39:ef:03:37:d7:d5:8c:31:a2:87:a1:c4:91:
                    40:a1:9d:db:73:68:94:4a:29:05:f3:31:91:07:06:
                    2a:bf:71:a0:70:63:93:61:ba:ac:e0:86:ba:07:3f:
                    aa:a4:a3:f0:5a:de:5e:c9:78:b2:b5:b0:7c:be:a5:
                    f9:44:fe:6c:db:a4:22:70:ad:61:ca:f1:22:79:5f:
                    9b:00:e8:76:8c:e9:91:22:d8:3e:ea:01:e2:d7:23:
                    17:46:69:8b:2c:0a:ba:8a:3e:f6:26:e9:4a:0b:1b:
                    ee:b1:ab:25:cf:c4:6d:8f:3a:52:a1:dc:83:13:3d:
                    40:95:88:03:22:23:de:fc:30:fb:65:8e:90:74:28:
                    93:fc:fb:c5:74:b3:f2:3f:10:ce:19:a1:45:94:7a:
                    37:74:2e:ca:d2:3a:27:10:24:86:5b:da:e4:a3:62:
                    36:99:50:58:e8:58:da:93:29:8d:d5:8c:4d:ae:e5:
                    50:50:a5:1a:5f:bb:64:d4:db:4d:bf:85:5a:39:54:
                    58:de:ca:ff:fd:b5:15:b3:d8:39:2c:69:f1:a2:fe:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:DC:36:C9:28:EA:6E:D4:D9:18:7A:E7:D6:34:68:66:3A:41:BE
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:99:ed:bf:6b:ff:15:49:e7:e6:12:47:c2:5b:79:b2:e7:5f:
         1e:56:e8:24:b4:51:cb:50:64:dd:73:9f:c7:78:96:0b:8d:3a:
         b0:38:60:a8:83:ab:8a:1f:58:a8:05:e9:28:8f:ce:8e:90:bf:
         08:f1:f4:e3:a5:5f:bb:db:43:91:75:9d:9c:c9:2e:d7:9c:15:
         bb:be:eb:13:09:4a:aa:ab:0e:14:17:f7:ea:aa:ab:c8:98:56:
         c5:96:4f:f6:06:d6:28:f7:76:6a:ae:23:d1:93:33:e3:6e:b1:
         0b:9a:6f:f7:68:a7:23:d3:e4:04:49:80:cc:72:81:11:6d:89:
         37:56:c6:fa:b4:7c:8e:a6:f2:70:4d:a2:d0:8e:eb:3e:81:34:
         a6:cf:ea:a8:b8:0f:e4:ad:e1:a4:c1:ad:d5:bf:22:7e:86:a6:
         b9:80:24:28:5d:f2:cb:9d:86:9f:61:d9:60:c4:b2:3b:90:9b:
         41:f2:50:2c:6e:d5:94:a9:7d:5d:b2:fa:63:31:d0:7e:d7:3a:
         d8:87:66:14:fc:06:ed:d6:a4:00:80:19:c0:2f:02:3e:a3:4b:
         a0:50:7b:1a:52:7b:a9:da:ac:a7:4f:4e:9d:57:11:7e:ed:85:
         51:66:36:25:df:84:17:a7:a2:7e:cd:32:e5:fe:99:9b:01:f5:
         85:31:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:21:07 2025 by rpki-client