This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          Chqi0nOmv8zmFs7qSvEHoQeCKe8Br0oVmKttXyuYx6o=
Subject key identifier:   D7:DF:26:CB:C5:E8:4A:EC:70:A4:4E:67:D2:DE:AE:FC:AD:47:30:24
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       019AF23F81736F5F1960A81FD4ECFB109393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          086D
Signing time:             Sat 06 Dec 2025 06:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:39 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: odR+8OqQD6CVgK7Vv4+iMdnuIDsOuqLke5HgTiYL/kc=)
                          2: qs7BbSv0fO0BPXU-Iz3031gKExA.roa (hash: doqNGmfmNSThnCzcC+uqauIEfH+4+SUm/6IU5DxkDTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:81:73:6f:5f:19:60:a8:1f:d4:ec:fb:10:93:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Dec  6 06:00:39 2025 GMT
            Not After : Dec  7 06:00:39 2025 GMT
        Subject: CN=d7df26cbc5e84aec70a44e67d2deaefcad473024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:1d:d6:e1:60:cf:f9:f1:2a:7d:6e:c8:c2:
                    2f:32:0d:fb:d6:25:00:09:3c:e2:8f:87:d4:ee:68:
                    e1:aa:17:34:8c:cb:8c:81:36:bd:21:d4:38:52:d9:
                    30:9f:af:6c:40:f1:7a:98:62:10:0f:fd:ad:62:4b:
                    18:6b:c3:d9:90:ad:e3:25:0d:b6:3c:6e:c0:df:5d:
                    7e:fb:80:cd:99:94:fd:62:d6:07:ff:a9:7a:d3:d2:
                    31:07:7f:64:40:39:7d:5d:6d:01:34:34:71:42:12:
                    2e:b8:2b:9f:75:d5:15:68:4a:24:f1:75:6d:dd:6a:
                    4a:9f:ff:17:ef:b0:ce:30:8c:14:c5:37:c2:90:18:
                    95:5d:c6:d8:d7:69:db:d2:34:52:ca:ab:26:cc:f8:
                    ca:32:95:fc:30:28:b0:97:39:5d:67:71:4d:69:e3:
                    8e:02:dd:3b:06:4a:d5:d1:40:b6:73:de:ca:8d:e8:
                    66:80:a2:dc:bf:be:d8:4a:33:67:fd:f0:b0:e9:dd:
                    2a:3f:f7:08:d4:02:06:58:05:a7:12:4a:05:5e:78:
                    2a:0b:ab:6b:2f:7c:12:6c:f6:02:d1:43:5e:87:36:
                    dc:92:19:42:87:67:60:c7:7d:15:76:51:dd:3f:ee:
                    80:74:f8:76:e6:47:2e:d8:9f:f5:f2:83:03:a7:7d:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:26:CB:C5:E8:4A:EC:70:A4:4E:67:D2:DE:AE:FC:AD:47:30:24
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:d7:ed:8f:98:38:dd:57:17:b8:9d:14:b2:34:7b:6a:92:
         a9:5c:bc:51:90:a3:fb:84:d4:a9:af:21:ec:f1:d6:3b:36:00:
         f9:08:5c:6c:89:d2:ad:a5:c9:6d:04:97:18:cb:08:24:d1:8e:
         35:aa:ef:8d:d6:f7:eb:96:97:fe:62:4b:ac:2c:0b:da:00:c0:
         94:70:97:aa:7f:09:d4:eb:78:92:e2:ef:cd:7e:0a:07:fa:9e:
         1c:f2:08:e7:24:86:db:3c:83:0d:41:28:6b:9a:24:70:5a:cf:
         75:5d:cb:30:e7:07:80:5b:78:cb:aa:ca:d0:4f:ed:61:60:0d:
         f4:46:1f:21:c4:fa:ac:df:79:8b:ed:d6:68:92:c3:c7:d4:83:
         42:21:5b:cb:8a:b1:95:9a:2f:cf:e5:d7:be:bd:42:9b:51:f9:
         47:c4:59:96:4a:2c:14:72:22:d6:2c:92:39:71:57:a7:71:95:
         a6:13:22:ae:dc:4d:d5:f2:92:4c:3e:dd:58:f9:71:12:ac:f4:
         ac:83:b8:25:7f:61:33:a4:01:2e:00:2b:20:58:f1:ca:61:fe:
         c0:ba:8f:52:04:c5:49:72:83:31:08:15:96:42:e1:14:e2:fc:
         0d:33:04:91:6e:9f:45:b5:69:ae:9b:3d:c1:a7:7c:2f:c1:f0:
         47:a2:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:01:30 2025 by rpki-client