This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File:                     MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier:          dY7Ew8siipBxJm/36DGsjrriFbLXaeSzQkrwyPkyEF8=
Subject key identifier:   D8:4B:77:94:A9:6F:ED:B8:27:96:86:EC:9F:EF:6F:60:7C:A7:AC:CA
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer:       /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial:       019B281B9642D7FF87386C05E615C097FB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number:          059E
Signing time:             Tue 16 Dec 2025 17:00:55 +0000
Manifest this update:     Tue 16 Dec 2025 17:00:55 +0000
Manifest next update:     Wed 17 Dec 2025 17:00:55 +0000
Files and hashes:         1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: jNutN62oAjXFgcqbytUsCsInSiLlX9Za8qHPQewQDJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:1b:96:42:d7:ff:87:38:6c:05:e6:15:c0:97:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
        Validity
            Not Before: Dec 16 17:00:55 2025 GMT
            Not After : Dec 17 17:00:55 2025 GMT
        Subject: CN=d84b7794a96fedb8279686ec9fef6f607ca7acca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:d5:15:fd:c8:62:b1:e3:b3:7b:2b:29:42:
                    9b:7b:f7:41:f3:42:17:7c:7f:bc:7b:f5:89:c6:f2:
                    30:3d:73:b8:d8:ee:85:c5:24:ac:7e:40:9f:b4:6d:
                    22:59:9a:f1:25:17:8a:7a:d0:33:81:62:df:ed:ca:
                    3e:f4:dd:c9:78:bb:1e:81:de:c5:c9:70:c8:6a:d6:
                    b1:4d:d5:31:5a:0e:b7:22:4d:d7:e2:38:b5:b0:86:
                    d4:7e:72:71:22:37:5e:cd:45:7b:5d:97:4b:99:4d:
                    13:18:fc:36:c7:b5:65:54:b8:fc:15:92:da:0d:94:
                    7f:7f:f9:87:e4:95:5c:cd:27:9a:5f:3e:7a:8e:29:
                    3e:7f:f2:52:9e:8e:69:f9:ee:7a:12:14:f3:89:ca:
                    cc:59:2d:ca:93:e9:4d:c2:6a:68:59:62:70:2d:c7:
                    1a:e6:47:21:2c:46:d0:93:36:f5:7e:13:60:c6:07:
                    ef:ad:52:37:a6:a9:21:2e:ee:d7:c5:e5:e9:91:55:
                    0a:c9:0f:87:a5:92:7e:7e:6f:48:9e:75:0d:fb:34:
                    9b:e2:14:ef:c4:c4:c5:b8:aa:cf:20:ca:4c:70:3b:
                    7e:f2:f0:ff:23:28:82:ec:d9:4e:7d:2f:49:bd:e5:
                    0d:79:da:c6:ca:da:d7:74:d9:e8:e1:96:92:33:a4:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4B:77:94:A9:6F:ED:B8:27:96:86:EC:9F:EF:6F:60:7C:A7:AC:CA
            X509v3 Authority Key Identifier:
                keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:33:c4:4c:86:3a:a4:b9:0b:4f:67:35:e8:29:59:40:a9:eb:
         70:79:07:62:0d:48:1a:1a:46:43:20:a1:65:19:95:af:04:59:
         30:3c:0b:2e:5e:bb:d1:d9:6f:00:8e:c3:14:1a:6a:cd:85:d4:
         4c:cd:b8:6a:8a:55:c9:9c:d2:9e:d0:bf:bb:8c:f4:e6:99:86:
         98:3e:ee:f3:13:7b:c6:cc:5a:cc:f8:0d:0d:e9:6c:bb:2e:cb:
         9a:7c:4e:a5:d6:38:ac:d1:63:2c:f8:88:ad:4f:1b:60:60:5e:
         cd:b5:c9:d1:9e:44:ec:00:22:d7:cd:8f:db:dc:f3:7c:e2:f1:
         9b:28:93:46:3c:c0:7c:96:c4:ca:be:c2:b9:7e:d5:51:a5:51:
         3e:3f:ae:76:46:a2:a7:5f:7c:d6:16:5f:4f:ce:56:ac:f1:61:
         c0:6e:52:aa:60:60:a4:8a:3e:f5:25:bd:08:5c:de:b6:0a:b6:
         19:17:e9:44:19:b0:e2:9f:a3:b4:e5:f3:62:06:8d:49:c8:20:
         da:2b:51:30:8d:81:a4:f3:e0:30:e6:cf:c3:a1:8e:40:cd:cf:
         d0:a2:58:65:46:13:2e:1a:32:4c:64:f3:98:ae:67:6e:15:27:
         c1:9f:17:9f:cb:d5:55:2a:47:d9:e5:7d:1f:90:c8:cb:66:c6:
         34:68:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:59:57 2025 by rpki-client