This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File:                     Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier:          8Xxyt85m3FWKxhhQEqI19cpPU8HTRPvZJl3JFzFBGsc=
Subject key identifier:   11:50:40:5D:41:F4:85:EF:1B:67:5B:D6:5C:58:C9:6D:5B:A6:A0:2B
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer:       /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial:       019AF1D2474C5E6211015361E849A93B474D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number:          15B1
Signing time:             Sat 06 Dec 2025 04:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:20 +0000
Files and hashes:         1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
                          2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: YF2AR0F3//lp8dSvG7Qxer4nVSRCsY9rFMN7kcV66Ow=)
                          3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:47:4c:5e:62:11:01:53:61:e8:49:a9:3b:47:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
        Validity
            Not Before: Dec  6 04:01:20 2025 GMT
            Not After : Dec  7 04:01:20 2025 GMT
        Subject: CN=1150405d41f485ef1b675bd65c58c96d5ba6a02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:63:87:2e:14:7d:60:58:8f:be:cd:58:87:
                    7d:b1:af:1c:7a:32:c5:99:11:62:17:2e:2a:42:90:
                    08:52:dc:72:04:ea:13:ad:9c:f0:b2:c2:fc:02:ba:
                    69:6a:d7:b1:98:c4:48:bd:2d:b4:d4:93:3b:c2:9a:
                    ac:f2:db:f5:34:f4:e6:fa:9f:47:b9:e3:8a:63:8b:
                    2e:08:7d:89:1d:cd:e7:e3:3f:33:67:bd:51:24:b6:
                    21:b1:1c:c7:0c:1f:83:97:e8:2c:89:30:de:d1:18:
                    8a:98:e1:9f:19:a9:30:21:34:60:bf:99:12:9e:4c:
                    81:83:64:c3:02:52:f5:6e:34:cf:e2:52:cb:5d:17:
                    6b:81:b5:00:46:85:a3:0b:77:45:9f:7f:90:38:8f:
                    52:98:4e:95:61:8d:ad:a4:fc:4a:d8:80:09:ff:47:
                    77:62:ab:39:bc:23:6b:94:c4:6c:49:d9:54:b9:b6:
                    2e:f8:72:2e:28:65:d0:a6:5f:ad:d7:7c:55:18:88:
                    44:09:bf:c9:ca:55:b4:48:9f:e8:9e:e9:28:c7:c3:
                    b3:c5:b8:56:66:b9:44:f5:e8:81:d3:6c:87:4f:fe:
                    8c:2d:69:0c:e1:fb:ad:30:f2:a1:75:96:0b:e5:bf:
                    e8:80:b2:1c:f7:b0:1c:23:d7:35:92:46:00:a4:1f:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:40:5D:41:F4:85:EF:1B:67:5B:D6:5C:58:C9:6D:5B:A6:A0:2B
            X509v3 Authority Key Identifier:
                keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3c:b7:1c:9a:6f:7c:7a:4a:0c:e5:d8:14:0a:7f:8e:d8:bd:
         10:d8:18:fe:33:51:0e:24:11:49:51:35:07:f8:87:59:65:b8:
         3c:23:80:71:3e:f7:fb:08:f6:1e:1f:a3:d3:47:fd:30:0a:65:
         86:ed:d9:16:11:a5:bd:6f:57:ee:9d:f0:41:cd:dd:ae:83:3d:
         b0:9f:f7:9e:c8:89:45:34:23:aa:ab:70:82:39:7d:a2:3d:1a:
         5f:21:cb:58:9e:d5:3a:b2:8f:c6:f9:10:76:f9:bd:15:05:54:
         cb:cb:42:76:60:b7:4a:38:5f:3a:a2:4a:2b:91:ec:5f:c3:96:
         52:24:66:67:56:39:3a:54:e1:38:a6:c5:73:cf:3c:a7:b9:ad:
         a8:2c:03:3f:0b:64:bf:60:d6:f9:58:d4:31:56:4b:60:cc:27:
         32:5b:3a:e5:75:e1:d6:10:d0:3f:d9:07:8c:99:57:c9:d1:40:
         5d:b5:fb:d7:41:33:07:e9:22:9d:76:ce:d7:1e:b3:2d:ff:0b:
         44:1b:ce:31:89:a8:6f:ed:a2:3a:03:47:69:74:f4:68:87:21:
         c7:1a:b9:56:30:a9:82:6c:25:cd:9a:17:f9:ff:0b:ba:96:9b:
         9f:b8:6a:a6:6d:5b:64:d6:d9:c2:90:12:ae:c0:ed:0a:f3:5b:
         0b:35:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:21:20 2025 by rpki-client