This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.mft (raw, json)
Hash identifier:          cJHRi3j04vRyeT6w5XLFVnoYK3AKKUseP1keGFdKp1I=
Subject key identifier:   7D:D5:33:83:50:1C:EE:6B:29:C7:02:58:A1:12:6A:98:C9:24:32:94
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Certificate issuer:       /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial:       019AF2AD75DECA9AFF9753C176A7121F9A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
Manifest number:          1346
Signing time:             Sat 06 Dec 2025 08:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:45 +0000
Files and hashes:         1: EynNPuL-EmqCyipYyH7Vg4_ir1c.crl (hash: j3JMoSCw3zHS+OShc40ORptAYuVFBz+tEfRxS6aITB8=)
                          2: xRuQVNxBS_3Mgbe42rndbMsNass.roa (hash: A1raJrfsn9sVKt/kmB4hYgZNVWgJqoDFFUH8LA8mWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:75:de:ca:9a:ff:97:53:c1:76:a7:12:1f:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Validity
            Not Before: Dec  6 08:00:45 2025 GMT
            Not After : Dec  7 08:00:45 2025 GMT
        Subject: CN=7dd53383501cee6b29c70258a1126a98c9243294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:b7:99:a7:7f:31:30:5a:88:fa:71:ea:af:
                    14:61:e7:28:5f:64:d9:a6:67:98:1e:a1:07:52:28:
                    e4:13:cf:f1:72:48:60:2d:33:49:30:be:fb:df:e9:
                    fb:41:95:f1:3e:f0:5f:f1:5c:d2:d8:7d:cb:14:a0:
                    6e:68:36:95:3b:cd:54:fe:b8:84:bf:62:35:1c:d5:
                    b1:e2:6c:35:e1:ae:e6:a1:f9:9d:f5:ea:e1:8a:47:
                    26:41:47:a5:89:bf:ea:86:b4:c0:91:ec:f4:44:cd:
                    47:55:dd:bb:ca:94:35:79:2e:c1:7e:f8:06:8a:45:
                    5d:93:8b:59:dd:ff:81:da:aa:6f:61:aa:fe:27:83:
                    be:e4:1e:de:24:61:78:77:c9:a3:4b:85:1e:0a:a1:
                    10:57:71:61:51:70:57:8a:6d:8d:28:b6:e9:03:6b:
                    10:57:98:b0:03:f9:13:4c:a5:bd:6e:ad:c5:08:8d:
                    92:22:45:a4:38:85:c0:d0:f0:1a:1b:07:10:bf:a3:
                    15:0a:6e:db:b3:1e:53:2e:f8:58:b8:5b:e4:68:42:
                    7e:fe:8e:ff:ea:fb:b5:e4:3f:b9:3f:81:e6:0e:20:
                    36:b8:8f:ad:52:45:f5:8d:01:00:5c:06:10:75:c8:
                    34:a7:ff:48:7f:f0:c1:c5:45:11:4a:99:59:cd:30:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:33:83:50:1C:EE:6B:29:C7:02:58:A1:12:6A:98:C9:24:32:94
            X509v3 Authority Key Identifier:
                keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:27:7e:7a:c6:ad:c9:18:27:32:86:6f:fa:8f:a7:b9:51:
         ff:55:3b:4c:e5:8e:03:ad:aa:87:66:d1:07:70:37:4a:dd:2a:
         7d:af:2a:5d:60:1e:68:b9:06:54:52:eb:82:80:f4:0c:bd:63:
         05:c4:c7:dd:34:7b:f9:9c:1a:e5:34:d7:f1:fc:ab:07:92:25:
         c8:91:4c:8e:c7:fe:d5:8b:3d:04:68:d6:f1:71:1f:b6:17:fa:
         f2:0d:48:91:c6:eb:82:97:4b:b1:0b:e1:90:c2:8a:61:9e:49:
         91:e6:db:cb:ac:26:67:d6:51:96:b2:22:f1:31:79:49:ba:24:
         25:52:bb:ab:0a:16:ab:dd:4c:09:dd:e6:47:0c:94:a3:7e:e2:
         ca:06:0f:e0:6e:26:01:f5:cc:02:a0:42:c9:d0:c8:db:2d:bc:
         d5:1b:45:7c:bf:0b:a7:e2:ce:23:aa:c8:ad:01:46:18:93:bf:
         82:02:6a:ef:ff:91:40:04:d4:72:b8:da:c6:b7:1d:9f:ed:28:
         9f:d9:a1:68:63:61:15:9a:5f:5d:8c:c4:a2:d4:6b:4d:0e:3f:
         74:0f:9e:18:35:65:9e:f8:ab:f0:50:4f:d6:6f:6a:fc:37:f5:
         f8:9c:7d:30:1b:6c:29:fd:2f:dc:09:c5:ee:4b:02:45:aa:83:
         7e:66:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:05:05 2025 by rpki-client