This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File:                     EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier:          Ky4fLe0+QyYVFm9hK+wX1VPVhznnTMqlP/fUkpOS/BU=
Subject key identifier:   03:8C:EF:EC:BE:37:3D:15:95:9C:2A:92:10:B4:EA:B7:B6:3A:FB:0E
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer:       /CN=122a541caf138341bd32798940de206052910341
Certificate serial:       019B4F2964D43737F2CBD750C805C03E316C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number:          0E13
Signing time:             Wed 24 Dec 2025 07:01:11 +0000
Manifest this update:     Wed 24 Dec 2025 07:01:11 +0000
Manifest next update:     Thu 25 Dec 2025 07:01:11 +0000
Files and hashes:         1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: FHGshgkoZHl+k5AVNtjp7OhFanpW1aDmbYrUpB92E5w=)
                          2: N9zcYe5ReKGYCwNwcNWVqIdGiS0.roa (hash: VpzrJQRuZQfy5BAF/SwMEyOY3wzqdR1C+GvTYF7gE24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:29:64:d4:37:37:f2:cb:d7:50:c8:05:c0:3e:31:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a541caf138341bd32798940de206052910341
        Validity
            Not Before: Dec 24 07:01:11 2025 GMT
            Not After : Dec 25 07:01:11 2025 GMT
        Subject: CN=038cefecbe373d15959c2a9210b4eab7b63afb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:a4:00:ab:1e:4e:23:a6:00:4a:d0:17:41:
                    b2:96:e6:33:5e:77:03:b9:b0:fb:78:3b:af:bf:12:
                    4b:9b:82:27:7a:ad:91:75:8a:e2:a5:27:da:73:46:
                    67:6e:37:b8:3b:73:20:e1:f3:db:a7:9f:a6:47:67:
                    a0:b8:fa:8d:04:95:aa:1e:8f:92:98:f3:4e:fe:96:
                    a1:ac:65:6c:8c:1a:7f:77:1c:d8:95:26:24:41:13:
                    56:63:cb:b7:aa:4e:a4:ab:42:21:98:6f:74:87:2b:
                    ff:e8:3e:b0:ff:cc:59:20:bc:4d:3a:64:b9:af:f8:
                    f9:29:9e:88:cc:bf:dd:77:6d:66:46:9d:85:af:b1:
                    3d:39:76:f1:e0:b9:8f:00:f1:36:87:7a:94:6d:57:
                    4a:ae:3b:4c:c3:70:8f:1e:17:36:2c:38:7b:af:20:
                    59:4b:e6:b3:68:ac:9c:15:b9:a4:43:94:8c:69:04:
                    03:01:75:3a:71:b1:8f:bf:a3:7b:a0:6d:fc:db:f4:
                    eb:b5:56:8f:2c:04:13:9a:38:13:5a:ad:55:4b:79:
                    39:48:e7:58:6f:d9:8a:d2:13:7f:25:df:04:2d:0e:
                    21:6e:a6:93:8a:0e:44:09:81:df:2c:a6:7f:c7:b9:
                    6e:a7:b7:4b:f8:26:33:4c:a3:ec:02:b3:b4:c8:59:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:EF:EC:BE:37:3D:15:95:9C:2A:92:10:B4:EA:B7:B6:3A:FB:0E
            X509v3 Authority Key Identifier:
                keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:16:6d:91:be:92:b9:51:a1:76:f4:82:77:13:0c:52:a2:
         df:94:88:34:ee:98:98:e8:83:01:be:f8:68:26:2e:f3:1d:04:
         ff:61:8c:fd:d3:a3:2e:e0:c3:28:8c:ec:15:33:41:00:b6:d7:
         be:55:60:99:57:3d:af:50:61:07:3f:c0:dd:35:c5:bc:f0:06:
         6b:84:24:b6:3d:23:ec:7e:67:03:61:3b:95:a7:a0:e7:cc:fb:
         e2:a7:6b:ad:7f:aa:13:92:f9:70:bb:fe:0c:2c:c3:59:d2:56:
         8c:3a:84:a8:e5:74:f1:33:31:a1:cb:b2:82:97:06:87:90:ae:
         f3:a6:74:3d:ea:16:44:83:1e:7c:a9:7f:1e:b0:2b:e2:98:bd:
         f5:9c:4d:d6:a9:06:da:5e:9c:02:1e:db:a2:2f:50:b0:5e:f5:
         3e:bd:3f:fb:ae:1a:f6:c1:b6:dd:e3:80:ce:2b:da:83:cd:cd:
         ca:5b:b5:48:c0:b9:7c:18:28:a3:cb:44:84:15:af:45:18:09:
         3b:2a:e1:41:4f:a7:76:0c:4c:c7:13:fc:e8:8b:95:4c:fe:cb:
         44:af:1f:d7:3c:90:fa:8c:f1:27:c1:d4:13:6f:35:ea:72:38:
         1f:7a:b7:f6:77:fd:23:6f:eb:d1:5f:de:b6:e0:94:32:da:f3:
         ef:c5:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:25:08 2025 by rpki-client