This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File:                     63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier:          QjHAT8LAEToBqDMalUV3xqMbTx6AZ+PUGA6ysizjqMQ=
Subject key identifier:   4F:E1:64:B2:50:0E:31:D5:45:E4:84:87:80:C9:82:26:F6:A4:D5:51
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer:       /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial:       019B3EA3152E7A72719F872CB349A25003C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number:          1787
Signing time:             Sun 21 Dec 2025 02:00:33 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:33 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:33 +0000
Files and hashes:         1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: wGEOOKVrGQkR2pBaOhLmzpDWzpKFTZIUBlu/vi5xGmo=)
                          2: Hped2Nzw9BDgcMc7ThR7ZTJVfxo.roa (hash: EKotSeR3NXVLufe9gjVtCFUvkJNJlOJcwE3m9ndLGj4=)
                          3: hEjknnJNpRTS-Fn_xua20G61iFo.roa (hash: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:15:2e:7a:72:71:9f:87:2c:b3:49:a2:50:03:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
        Validity
            Not Before: Dec 21 02:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=4fe164b2500e31d545e4848780c98226f6a4d551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:32:13:e8:61:34:0a:3c:9c:5c:cc:be:0f:
                    b5:4e:1b:85:63:85:cc:3e:bc:c7:cd:d0:5f:25:06:
                    61:3a:ed:a3:1f:2f:66:8c:03:5b:90:38:c6:b1:bb:
                    12:cd:f1:08:d1:2e:5d:60:cd:11:6a:0d:31:88:6a:
                    73:fe:d4:27:22:e8:99:b2:8c:3e:dd:05:75:ea:f4:
                    85:46:77:dc:5a:f2:db:5f:f1:61:1f:87:53:57:a2:
                    7c:1d:1e:03:c2:83:ec:a8:c3:c3:a8:e3:ce:8c:24:
                    f8:7d:36:2a:b1:bd:3c:34:70:bc:16:2f:ba:66:59:
                    65:8b:42:c2:43:7a:0b:3b:4e:50:c1:86:c5:c1:e0:
                    3f:a2:ef:92:e1:48:58:6c:a7:33:b2:1f:f2:7e:b2:
                    36:63:41:cd:cd:c2:1b:ab:36:bb:b3:75:6b:e7:a7:
                    88:10:eb:fb:08:2b:c9:ab:50:9e:f9:8e:cf:b8:04:
                    4c:21:a5:17:96:10:eb:3f:41:d1:7b:28:9f:74:99:
                    63:71:dc:6f:a6:c3:68:ca:f9:c5:8c:a6:7e:b7:f9:
                    53:29:99:cb:b6:28:cb:0c:f6:97:38:f0:1b:3f:ee:
                    8c:9c:48:b8:53:54:ad:1a:bb:ee:5e:2b:b4:9c:66:
                    45:f4:6b:2d:d3:e0:e1:93:73:4f:6c:8c:04:5f:2d:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E1:64:B2:50:0E:31:D5:45:E4:84:87:80:C9:82:26:F6:A4:D5:51
            X509v3 Authority Key Identifier:
                keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:7d:0a:7e:86:80:69:f4:27:ea:2f:58:b3:9e:da:41:01:
         34:1a:3a:b9:9a:5d:7f:c3:ff:17:22:3a:db:e7:76:ca:65:2b:
         8e:ab:9d:5b:99:ee:bb:fa:04:4b:9f:bb:43:38:fb:df:1b:1f:
         30:b7:8f:26:b1:9a:76:b8:cc:dd:ea:6c:ce:98:e9:67:24:0f:
         f8:4a:2d:f4:c5:2f:a0:1d:04:50:c8:89:17:27:fd:6f:d7:6a:
         ab:3a:d6:13:ec:9d:ee:13:93:93:60:c3:1a:26:e1:bc:42:a1:
         41:10:fc:ad:96:ae:90:23:30:66:af:4c:21:45:6f:ef:14:29:
         a3:4f:bd:b4:c2:4a:b5:5f:08:36:eb:c1:3c:a6:36:b9:3e:46:
         0f:c3:44:46:42:51:0f:3a:ad:1d:73:a6:8a:82:89:0f:be:6f:
         43:91:8b:e7:cb:fd:42:ff:41:cb:4d:a2:1c:21:b9:49:02:d6:
         2c:3d:77:35:de:91:68:a1:9e:0c:94:88:28:42:be:41:42:79:
         bb:a9:81:45:f3:22:08:2c:a2:ac:b7:7c:45:79:4c:5b:23:6e:
         cf:0d:50:fd:a0:00:80:eb:33:bd:45:40:d8:01:0e:27:17:b3:
         5f:4f:e1:ba:d5:18:7a:bd:b6:36:36:b1:2d:9f:55:e2:80:d9:
         cc:8d:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:07:36 2025 by rpki-client