This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          AQ7OqOTdaA98E5WjUPGRK7QQ0cRnhOqcG5xrNNJcGE4=
Subject key identifier:   90:6C:92:E5:63:E7:61:E0:70:D3:92:5D:7D:59:6A:8F:0B:7A:99:EA
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       019B39EB576CD8AF2614922A48D1B9DA948C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0AE5
Signing time:             Sat 20 Dec 2025 04:01:23 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:23 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:23 +0000
Files and hashes:         1: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: ZIfMsbnP0Xi72q4fVcZycKwBTH28H516qJKHSr+pqqs=)
                          2: cTTyZG3sGYW4--iA37L_e4KKCac.roa (hash: jAHavpEeqSxn7Wz6qgij8QBMxDH2bPHO8CwBbW3Q6eI=)
                          3: jOfgwbHFHsIIF0LL75vu6P_Fe8s.roa (hash: dWpwGB2a9oIdE7pk2wUUzH1wz99i3EaKumQo1e/dHRo=)
                          4: vIp0YDt7EtU03q1mdCUKKWhrqIM.roa (hash: rr8bWQphKD9e3N2SQUwnTk+k6T5454GEBsy/SxB+o6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:57:6c:d8:af:26:14:92:2a:48:d1:b9:da:94:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Dec 20 04:01:23 2025 GMT
            Not After : Dec 21 04:01:23 2025 GMT
        Subject: CN=906c92e563e761e070d3925d7d596a8f0b7a99ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:7d:e5:14:13:d9:1e:59:31:c2:47:62:85:
                    2c:97:c9:2c:4b:8e:0e:3d:1a:7b:67:de:3d:9a:58:
                    c0:56:6d:4e:7e:e4:bb:25:46:51:89:89:9b:d9:b7:
                    88:84:35:86:3d:fe:e8:df:d5:35:80:1d:6d:38:9a:
                    0a:cd:77:27:28:04:53:e2:5f:60:7f:8a:82:32:b9:
                    06:e3:c6:af:5c:ef:31:76:ea:a0:98:cc:31:bb:e1:
                    c8:74:43:c4:0b:5a:c2:5a:99:2d:8e:2f:ec:55:b3:
                    a3:e5:5d:d9:45:a0:c6:06:d2:5d:13:d3:3a:24:a5:
                    ff:32:5d:5f:06:f9:7a:cf:c7:7d:e7:b4:8b:ee:c6:
                    5a:80:1f:07:ca:a7:8e:29:0a:9f:d9:70:bc:ac:72:
                    96:9a:74:c3:ab:c4:47:90:f6:77:db:84:5d:8d:95:
                    29:05:c6:a9:97:4a:b2:37:20:c7:99:24:8e:ef:8b:
                    e7:3f:20:f3:9a:84:cf:37:6d:6d:eb:b8:28:4f:21:
                    80:45:c8:23:6a:29:2c:36:0e:bb:ab:6f:37:86:07:
                    5a:7e:09:4d:ea:90:ef:26:5f:72:d2:d2:1f:df:33:
                    dc:bc:e7:69:b9:95:2c:35:c7:3a:ef:a3:ac:3b:3c:
                    5f:08:80:e5:cb:d7:34:e1:a9:08:88:be:f8:0a:a5:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:92:E5:63:E7:61:E0:70:D3:92:5D:7D:59:6A:8F:0B:7A:99:EA
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:96:85:40:1a:06:fc:bb:b5:4e:18:f9:fd:0a:b7:cc:cb:
         3b:af:03:d6:3f:d1:06:2f:bb:31:90:bb:ff:dc:41:99:35:4b:
         8f:02:8a:91:97:ee:c7:fb:75:c9:a1:7a:93:db:40:15:0f:20:
         de:cc:f1:e0:c2:02:42:99:4c:5a:fb:17:cf:8c:82:0f:f9:cf:
         c6:bb:22:af:88:f0:cc:21:0c:f2:a4:46:0c:d0:f1:01:ee:04:
         67:5b:66:aa:15:ad:d6:89:0c:0f:4d:85:e1:e8:32:4f:03:99:
         7d:9b:65:34:42:a1:7f:a1:2f:bc:e6:18:47:92:ea:4a:31:8d:
         58:f1:ed:5e:89:11:73:89:b0:a9:17:a1:be:fb:c8:49:5a:28:
         b4:c5:44:25:a7:f6:cb:0b:2b:7f:d0:ab:3d:86:0b:17:88:20:
         19:55:31:f4:33:7c:74:fe:0b:64:ce:ba:ce:ea:3e:31:7c:b2:
         05:da:3a:23:5d:7a:42:1f:a1:be:0e:9d:29:ac:b9:9e:49:3d:
         f2:8b:55:e4:df:43:b4:b3:be:6d:05:63:05:17:f5:85:20:a2:
         3e:48:8e:1d:05:14:01:b5:b3:af:a0:73:46:86:fc:f9:f6:f5:
         b5:bc:a4:cd:ff:d4:fc:01:0f:4e:a0:a7:17:35:91:75:25:cc:
         2e:5a:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:17:40 2025 by rpki-client