This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File:                     EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier:          gBiRt0jHM44lKatMHSZwCqnUjGLMJekZnXPoPbq2mtg=
Subject key identifier:   DC:ED:B2:C2:60:6C:EA:9F:91:32:6D:32:F0:DA:79:F3:11:21:71:CB
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer:       /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial:       019B2EFA44EFAC0E76E84A20FAF32495A0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number:          1780
Signing time:             Thu 18 Dec 2025 01:01:51 +0000
Manifest this update:     Thu 18 Dec 2025 01:01:51 +0000
Manifest next update:     Fri 19 Dec 2025 01:01:51 +0000
Files and hashes:         1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
                          2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: gMDon59IERIUDorcxyFF1iTJbYhQohH/o9q67vOmc2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:44:ef:ac:0e:76:e8:4a:20:fa:f3:24:95:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
        Validity
            Not Before: Dec 18 01:01:51 2025 GMT
            Not After : Dec 19 01:01:51 2025 GMT
        Subject: CN=dcedb2c2606cea9f91326d32f0da79f3112171cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:ef:41:42:65:b4:5c:ad:95:0b:c2:79:9a:
                    a9:e5:f1:50:f3:05:ae:fd:bf:47:5a:97:98:c6:12:
                    87:51:f4:d0:dd:5f:3f:96:b1:a5:d5:7d:a1:ef:50:
                    24:4f:d5:8e:2f:1a:e1:a3:98:31:64:fa:50:84:9a:
                    19:26:20:39:50:7b:ac:ce:38:d1:21:f6:2d:31:08:
                    8f:94:70:e9:c4:53:ba:1e:17:e0:81:da:5b:26:d1:
                    c8:35:e4:10:dc:f6:8a:78:35:75:9a:9d:e6:ee:d7:
                    e0:1d:84:a5:a9:c6:e4:a5:d1:81:22:99:18:03:5a:
                    7d:5a:f8:de:7f:c5:ff:1a:69:c2:00:fe:13:cd:9f:
                    2c:92:c8:57:73:e7:ca:6d:ed:56:1c:c5:fd:11:c0:
                    09:94:bb:28:7c:a1:9b:08:64:bd:f5:9e:ff:ad:ac:
                    ce:fd:41:cc:a9:04:7b:ee:12:a0:e3:4d:b8:f2:00:
                    39:17:78:ce:4d:33:68:d9:47:7b:21:fa:d6:80:d6:
                    c8:f4:eb:b0:98:85:df:09:e8:2c:46:2d:13:88:cc:
                    bc:b0:ba:49:13:e2:cb:25:7a:1e:25:15:73:c4:33:
                    7d:1d:62:dd:83:1d:5e:5f:ef:ed:8f:05:94:21:85:
                    78:4b:3f:a1:9e:e3:50:19:01:fe:71:88:3f:d4:19:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:B2:C2:60:6C:EA:9F:91:32:6D:32:F0:DA:79:F3:11:21:71:CB
            X509v3 Authority Key Identifier:
                keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:13:b1:74:ce:c8:74:ca:f6:01:9a:16:7a:a0:9c:0e:c9:
         e8:a9:1e:df:25:da:2b:7d:22:39:40:7a:ff:39:5a:09:f1:fb:
         03:28:b7:e2:60:fc:49:ea:8d:ed:66:cb:06:f1:96:03:49:cf:
         82:fa:a3:63:3e:5e:07:9f:6c:6b:79:e0:e8:de:58:3a:50:c0:
         17:6d:3b:36:bc:48:ac:c7:54:7d:cb:d2:73:a0:3a:25:43:88:
         cc:8d:0a:fd:e4:7f:83:a6:fc:b8:00:a8:4e:2e:5d:0d:ad:be:
         89:55:5d:ab:e4:d7:f9:d8:01:cc:da:10:33:18:e2:13:c0:d7:
         79:a1:50:98:df:c2:ba:1f:b8:70:1a:2c:df:1a:a1:fc:08:d7:
         74:eb:9a:bf:ae:91:76:d7:e7:76:25:04:72:c9:d9:a3:a4:f7:
         8d:9b:b0:20:11:69:41:b4:67:9e:c1:5a:76:0c:11:c9:63:54:
         de:d0:f3:51:bd:88:ba:ba:bf:a7:7f:2c:22:d7:8b:e6:64:af:
         87:c1:ed:32:b1:ad:13:4f:5f:2a:c5:61:49:00:c6:5f:50:1a:
         53:2b:3b:4d:81:22:48:63:23:a9:e4:e5:26:0b:1f:65:8f:04:
         e7:6b:22:3e:16:c0:c5:5c:d5:d2:ca:cb:3e:15:03:83:7f:a4:
         e1:78:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:55:54 2025 by rpki-client