This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          I1EGS2Rwm8YrjUCgEbor+KCTA4agas0nzjauW2MgM+4=
Subject key identifier:   25:C9:C1:8B:AA:E9:20:C0:EA:08:E9:E1:E5:78:AA:A2:A2:64:ED:E2
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       019AF1D1FE53769BEDB611A47FEFCA763E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          1060
Signing time:             Sat 06 Dec 2025 04:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:02 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: dN9FgHGeQzgRhINA1nIX9dZBdDdH4sw8AuaJAZAdbos=)
                          2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
                          3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:fe:53:76:9b:ed:b6:11:a4:7f:ef:ca:76:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Dec  6 04:01:02 2025 GMT
            Not After : Dec  7 04:01:02 2025 GMT
        Subject: CN=25c9c18baae920c0ea08e9e1e578aaa2a264ede2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:ee:97:a7:03:96:46:9d:0d:8c:97:71:59:
                    0a:69:b6:56:a3:78:0c:05:07:fa:d5:b7:c3:4f:b6:
                    80:90:3d:e3:2d:42:4a:4d:46:b4:9e:f7:be:30:68:
                    f2:0c:c1:72:42:bc:9e:83:99:e6:25:6f:a0:0d:88:
                    00:df:fe:f2:64:c2:15:dc:85:95:e5:bf:69:d8:13:
                    00:9e:ec:47:68:29:54:4b:4b:cf:0b:fa:22:36:c9:
                    f5:1c:d8:55:bc:e7:30:94:27:d9:5c:7e:8e:db:ea:
                    51:d7:26:5c:fb:3d:95:dc:4f:6f:49:8b:d2:0a:48:
                    6e:f5:ff:b9:f1:ab:d1:65:9a:3a:8d:b3:1d:b1:22:
                    63:ea:46:b6:7d:32:7f:d0:54:05:28:70:16:b8:6c:
                    e8:92:fa:99:79:53:4a:74:03:7b:74:f5:6c:ff:b3:
                    de:d8:3d:5e:9c:1f:9f:1a:ca:2e:bb:a4:15:e9:85:
                    35:d3:04:33:8b:c1:a2:e5:30:7e:2b:ab:c0:65:42:
                    2e:a3:62:d2:1f:f9:f6:77:94:6e:c1:94:2d:d2:c4:
                    83:21:b7:cd:83:58:55:a8:a3:e3:9d:f5:f0:9f:96:
                    42:8b:e5:97:d4:6e:f6:db:9d:a3:50:98:88:6e:4c:
                    15:9a:45:f6:4a:d7:9d:c0:fe:d4:58:4c:ca:ae:29:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:C1:8B:AA:E9:20:C0:EA:08:E9:E1:E5:78:AA:A2:A2:64:ED:E2
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:32:f4:84:30:7b:36:3c:91:d7:c1:f2:55:44:d9:8e:18:55:
         67:95:2a:00:40:af:a3:16:fb:38:bd:b0:5c:a4:9a:99:c2:84:
         0a:2c:e6:6a:07:d7:34:35:e1:fe:e4:49:ea:94:25:64:00:94:
         4a:85:d2:2b:fd:00:d2:b3:e8:f3:7c:19:90:2e:12:aa:6d:f7:
         be:ad:b2:dd:80:58:cd:16:64:37:19:45:88:e1:9b:5b:bf:b3:
         95:e1:a7:72:16:e8:bb:65:2d:42:d9:1e:49:a6:6a:61:94:d3:
         6d:c5:6e:16:77:88:8f:79:f7:12:7c:80:22:95:df:b1:bc:b2:
         28:77:71:6d:25:11:81:a6:bb:a4:f7:a6:24:9e:c4:d4:7d:8e:
         88:b3:c7:99:23:c1:21:98:64:c6:dd:f1:af:25:05:80:af:5d:
         49:e9:59:b8:3d:0c:ad:17:23:24:1f:c6:31:a2:9d:7f:a4:c9:
         b7:cc:e4:ab:e5:83:19:bb:32:fb:87:df:22:b1:ee:57:b1:7e:
         25:a6:39:a2:79:05:4b:c4:97:6f:d5:fa:f5:0a:09:5f:8a:ad:
         15:93:db:35:c1:54:18:dc:30:f0:42:de:66:1d:a5:6b:89:b7:
         08:dc:57:7d:d1:aa:30:2a:ca:05:aa:05:f8:1d:6e:84:f4:d4:
         9d:6b:c6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0f5TdpvtthGkf+/Kdj4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD
EygyNWM5YzE4YmFhZTkyMGMwZWEwOGU5ZTFlNTc4YWFhMmEyNjRlZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ful6cDlkadDYyXcVkKabZWo3gM
BQf61bfDT7aAkD3jLUJKTUa0nve+MGjyDMFyQryeg5nmJW+gDYgA3/7yZMIV3IWV
5b9p2BMAnuxHaClUS0vPC/oiNsn1HNhVvOcwlCfZXH6O2+pR1yZc+z2V3E9vSYvS
Ckhu9f+58avRZZo6jbMdsSJj6ka2fTJ/0FQFKHAWuGzokvqZeVNKdAN7dPVs/7Pe
2D1enB+fGsouu6QV6YU10wQzi8Gi5TB+K6vAZUIuo2LSH/n2d5RuwZQt0sSDIbfN
g1hVqKPjnfXwn5ZCi+WX1G72252jUJiIbkwVmkX2StedwP7UWEzKrikR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXJwYuq6SDA6gjp4eV4qqKiZO3iMB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDL0hDB7
NjyR18HyVUTZjhhVZ5UqAECvoxb7OL2wXKSamcKECizmagfXNDXh/uRJ6pQlZACU
SoXSK/0A0rPo83wZkC4Sqm33vq2y3YBYzRZkNxlFiOGbW7+zleGnchbou2UtQtke
SaZqYZTTbcVuFneIj3n3EnyAIpXfsbyyKHdxbSURgaa7pPemJJ7E1H2OiLPHmSPB
IZhkxt3xryUFgK9dSelZuD0MrRcjJB/GMaKdf6TJt8zkq+WDGbsy+4ffIrHuV7F+
JaY5onkFS8SXb9X69QoJX4qtFZPbNcFUGNww8ELeZh2la4m3CNxXfdGqMCrKBaoF
+B1uhPTUnWvGPA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:50 2025 by rpki-client