This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          2bG8g5sn3mRtTMybM9UVAg91nhSb8hO37VJM7RQsLKk=
Subject key identifier:   33:B7:FB:84:AE:C8:74:20:3E:95:22:40:FC:15:7A:CC:48:68:D0:03
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019B38A17774E373435585F34F8B6A60E835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          1785
Signing time:             Fri 19 Dec 2025 22:01:04 +0000
Manifest this update:     Fri 19 Dec 2025 22:01:04 +0000
Manifest next update:     Sat 20 Dec 2025 22:01:04 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: aimh4dlaqm77talXxe9qROgGHhoPKuHArxIdPvjXzGI=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a1:77:74:e3:73:43:55:85:f3:4f:8b:6a:60:e8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Dec 19 22:01:04 2025 GMT
            Not After : Dec 20 22:01:04 2025 GMT
        Subject: CN=33b7fb84aec874203e952240fc157acc4868d003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:14:f4:d4:c9:3a:6e:c6:23:d3:76:23:27:5e:
                    96:8c:79:9f:c9:21:61:25:94:c1:1a:46:5b:11:cf:
                    43:a8:4f:83:8e:f0:4f:50:4e:05:f4:2d:33:f1:7a:
                    ce:cf:9a:78:d5:11:61:42:ab:c3:86:4f:23:d4:52:
                    0f:c7:3f:51:a2:f4:e0:50:da:e7:88:6a:82:21:07:
                    ec:01:a2:2d:8b:90:9d:68:c6:0b:bb:db:50:bd:15:
                    fb:a5:bf:8c:97:40:3e:e6:dc:5c:fc:bd:91:b3:e6:
                    c3:d9:11:f4:d2:5f:2a:d5:9a:c3:6d:25:72:ec:86:
                    97:61:37:b2:71:ba:6f:dc:06:a3:50:ad:fe:28:54:
                    0c:21:82:3e:22:2d:98:f5:fb:f3:6c:2a:08:ee:85:
                    1d:d1:a4:61:38:dd:1e:1b:71:62:96:ae:55:94:7c:
                    87:78:f5:41:f9:c8:9e:02:fe:d5:74:4a:a2:20:9c:
                    4f:da:b9:f9:17:10:bc:e9:c9:1f:1d:1c:37:58:b8:
                    36:5d:dd:1e:07:18:9f:d1:f9:b0:ca:52:55:91:00:
                    8f:1b:0d:53:4c:73:3a:d0:c0:a3:17:e2:b9:4e:cd:
                    57:cc:ad:41:2e:cd:6e:8a:30:82:06:6d:52:29:8b:
                    e9:ee:11:c8:aa:83:c3:28:f9:fc:08:54:76:1f:2d:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:FB:84:AE:C8:74:20:3E:95:22:40:FC:15:7A:CC:48:68:D0:03
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:b4:50:e7:dd:46:a3:f9:85:a2:72:ff:37:a4:d6:ab:a4:
         ff:c8:5f:59:7e:38:5f:41:ad:94:a1:bb:32:7f:b0:84:ee:62:
         92:9b:df:f8:c5:6a:64:53:b7:c5:e8:4a:87:9e:19:d3:26:49:
         f4:60:99:1e:b1:96:a0:a9:1a:37:24:94:23:c4:0d:f0:c7:00:
         f3:5d:08:9b:f2:bf:cc:8e:d7:c6:f7:a5:fe:c6:8a:a2:ce:dc:
         52:e0:7e:cc:31:0b:fc:8d:67:bf:2d:c7:83:78:b7:aa:73:55:
         03:1a:63:8b:3c:2d:7c:f5:59:42:72:0e:7c:a1:1b:3d:10:b0:
         9b:fc:d0:b4:ad:4e:31:99:7e:e0:61:6c:34:c4:48:5b:31:43:
         ab:ba:b1:a7:91:af:60:c5:7e:53:05:a1:c6:72:25:1f:22:d5:
         06:e2:2f:cf:d1:4a:3d:cb:4a:b1:21:ec:06:80:cf:ef:8b:05:
         bc:48:a0:23:48:66:5f:23:4b:66:9d:64:e1:d3:8d:9b:e3:d6:
         b0:07:77:d7:74:5e:5d:14:88:bb:70:c8:b3:1f:d4:00:ee:64:
         42:e4:8c:76:4c:b9:ec:83:c7:13:ee:a8:30:de:81:e1:7d:46:
         44:a5:09:90:3f:f9:30:02:ce:63:7e:6c:ed:7a:1c:d7:6d:b4:
         63:60:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:04:57 2025 by rpki-client