This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          mzLujItgczIl2Gw0fT0xs67rMrG2yMNaU7YdCyx/O1I=
Subject key identifier:   54:42:05:31:B6:AA:0E:D5:8E:E8:FC:C4:88:98:83:AC:B8:F8:C0:7E
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       019AF208C9423F948B4868CE061D1365B432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0E5A
Signing time:             Sat 06 Dec 2025 05:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:53 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: NRePfQXaUCCUQ5XlzpcEb3DExgyUE5G6LHHGKhb9Mvo=)
                          2: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (hash: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c9:42:3f:94:8b:48:68:ce:06:1d:13:65:b4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Dec  6 05:00:53 2025 GMT
            Not After : Dec  7 05:00:53 2025 GMT
        Subject: CN=54420531b6aa0ed58ee8fcc4889883acb8f8c07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:33:f4:86:d3:5e:57:2e:de:9c:ae:b4:e5:
                    ec:a3:9d:98:f4:76:3c:5c:e6:70:54:39:49:a9:2b:
                    7f:be:5f:51:ce:bc:04:7d:fa:5d:9a:c5:05:fb:91:
                    4a:08:59:cc:bc:4b:21:e2:6a:1c:a5:28:c6:bc:74:
                    59:e7:c3:48:b3:68:50:5a:d4:86:46:f8:9f:60:6c:
                    4b:4f:f1:ad:0a:f2:2e:65:9f:05:ea:3e:15:52:4d:
                    77:fe:d1:2a:d5:c9:f5:46:81:ad:50:3f:63:ff:57:
                    f7:1c:84:13:28:22:a5:93:6d:50:78:8f:bb:bd:23:
                    bf:d3:7d:1c:ae:a9:cf:44:b6:d8:fc:7e:53:6c:d8:
                    c6:59:28:c6:d1:d1:6d:88:e7:f2:12:ec:93:a3:2e:
                    13:34:16:ed:96:b9:31:79:e3:21:0f:a1:2c:2f:f1:
                    8a:00:3b:11:02:60:9d:d1:c4:c2:21:15:c6:8d:8b:
                    56:4c:17:35:4b:be:e6:d4:72:a7:60:6b:9e:b6:95:
                    ae:97:06:e4:07:c6:c1:ec:d3:22:56:d3:f3:72:7c:
                    06:eb:ec:3b:6d:bc:38:c0:17:cc:a1:d6:da:1d:79:
                    d4:9e:76:75:cf:ce:27:15:6e:23:3c:28:d4:a3:f0:
                    9c:ae:88:7d:fe:ac:ff:60:17:ca:a4:8a:71:29:da:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:05:31:B6:AA:0E:D5:8E:E8:FC:C4:88:98:83:AC:B8:F8:C0:7E
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:19:44:e7:89:72:bf:49:e7:dd:2b:f1:1f:ee:3e:51:7a:
         f2:d6:93:e9:c4:ac:3d:08:e3:c8:41:83:c9:78:73:17:a8:40:
         e7:79:74:0e:45:06:81:23:90:55:e5:27:b8:17:ab:d3:7b:f3:
         cb:ac:c7:0f:bd:19:d4:82:41:3c:99:5a:1d:60:a8:ad:27:b0:
         cb:c7:bc:34:ff:c1:82:3a:f7:e0:b2:de:c9:35:36:06:52:21:
         e8:ab:0b:3d:15:48:8a:ec:2e:11:dc:26:92:fe:a0:e9:ea:10:
         8f:fe:03:8e:4e:df:cd:b1:21:a9:4e:0f:44:3f:c3:0b:8b:37:
         21:e7:ba:ad:7b:fe:f8:35:f6:2b:56:7b:2b:37:52:35:a8:c8:
         88:29:b3:4a:f5:b6:9e:f7:f7:eb:13:f2:43:a2:cc:85:63:fc:
         66:36:1c:15:4e:16:f8:9d:a8:1f:53:78:fa:e9:53:96:ac:97:
         6f:33:f2:26:84:b1:58:3e:09:25:25:22:f5:58:a4:ed:34:06:
         ae:b0:c1:ec:e6:c4:f2:2c:7d:8b:d3:ea:b1:57:0a:42:07:45:
         c3:61:61:f8:aa:67:05:0b:3d:7d:de:12:fb:d1:cf:be:f1:96:
         8b:08:f9:2c:4e:b5:bd:33:74:fc:36:d1:67:50:76:db:3c:21:
         72:46:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:57 2025 by rpki-client