This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          MC2MjCbjCAv2dmnO2cKSnFIw37c8BEiUAxiOyfhXj68=
Subject key identifier:   52:46:65:08:7A:55:E4:F1:F2:2B:B9:24:8D:87:6D:88:BB:94:31:63
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       019AF19B56F76BF4980DFFB73D77A97E2534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 03:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:20 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: KaiRP0cOuxraMXpLngQ3l3nmg11PkA/Rrrxz/cnzVpQ=)
                          2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
                          3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:56:f7:6b:f4:98:0d:ff:b7:3d:77:a9:7e:25:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Dec  6 03:01:20 2025 GMT
            Not After : Dec  7 03:01:20 2025 GMT
        Subject: CN=524665087a55e4f1f22bb9248d876d88bb943163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:33:0f:5f:4e:16:8c:4d:de:2b:bd:f7:93:
                    2d:13:dc:91:66:78:42:5b:57:be:47:01:cd:60:bb:
                    ab:a2:5d:9d:78:3e:ce:5f:bb:08:81:89:f0:9d:b5:
                    ff:bf:76:d8:b5:7d:65:67:44:45:f3:80:1b:d1:ff:
                    45:07:fb:15:ad:57:47:05:f8:23:d0:25:2e:b3:11:
                    ec:55:83:78:df:aa:35:c8:dc:84:a0:48:24:f2:b8:
                    36:b8:ef:37:d4:2c:3b:80:ca:32:63:79:cd:22:2f:
                    9e:15:7b:89:0c:da:bb:d9:da:28:cf:21:21:77:19:
                    7a:88:04:29:47:58:4c:74:64:98:88:c9:e2:99:03:
                    92:17:bc:2d:5f:59:d5:77:88:65:ce:0a:86:02:90:
                    e0:29:e2:8b:ba:24:5a:bb:30:5b:a6:6e:8f:5b:d6:
                    2e:68:c8:3a:87:30:f3:9b:cc:17:d9:c1:2f:5d:39:
                    be:09:46:78:f2:c2:00:ce:be:85:a8:70:ae:03:46:
                    ee:71:41:f9:a5:8a:83:21:9d:12:de:7c:5f:1b:e4:
                    17:dc:78:2a:5e:11:9b:4a:c3:04:46:cc:e7:c0:87:
                    77:de:b4:23:23:eb:8e:be:92:a7:91:4f:86:d6:2e:
                    be:fb:a1:8d:86:f7:22:cf:9e:44:b7:f9:2a:db:40:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:65:08:7A:55:E4:F1:F2:2B:B9:24:8D:87:6D:88:BB:94:31:63
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:97:31:7c:45:80:39:82:a6:b5:16:e8:da:9a:07:7a:86:
         27:73:b3:2b:5f:9e:de:d1:9a:1f:bd:e2:25:1c:cf:f5:da:12:
         ef:f0:03:b4:dc:8d:5e:d7:84:7f:fe:18:51:ef:d0:09:26:3c:
         e0:af:2a:17:65:f5:59:ef:41:00:99:19:28:e8:43:d8:70:fa:
         9f:81:4d:c2:30:67:00:0a:de:b2:9b:35:21:07:7b:33:25:a7:
         4f:f4:a9:83:ef:8f:75:fb:7b:35:7a:5e:66:d1:b8:f7:be:a6:
         19:9a:5c:b5:4e:ce:a9:92:5d:70:3c:b3:91:ec:ce:0b:cf:d0:
         60:da:fa:90:01:23:49:b5:63:16:61:0b:ad:3d:4e:ab:07:79:
         54:95:8e:08:4c:9b:93:ae:54:c3:7f:03:01:44:2d:2a:03:af:
         61:c9:69:b3:62:47:c9:4d:99:90:6f:60:f3:07:9b:f3:38:3d:
         0f:11:02:18:46:bd:71:34:4a:0f:0f:5b:cf:a5:28:c5:f8:f8:
         55:73:6c:af:a9:3e:7a:78:f4:3d:c2:dc:1d:18:6f:79:dd:c4:
         91:30:b1:af:39:94:1d:07:8f:b3:e6:8a:bd:2a:7e:5e:80:30:
         47:37:4a:12:38:7a:06:c9:16:e8:73:1c:aa:f5:f4:ec:c6:4a:
         c8:f8:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:58 2025 by rpki-client