This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          M94zbj6lwTENIG9waw02fqhfkyY22lDz/3CcG0su+zg=
Subject key identifier:   6E:D0:2E:19:75:23:2F:CB:F0:0D:B0:FD:E6:45:2C:CC:D4:41:35:B2
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       019AF31B4CDC422557FAB05333F0619E1DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          0DCD
Signing time:             Sat 06 Dec 2025 10:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:43 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: NwC/YsrEcPahYBS6iNpvdmNBUq9Fq/RSlUl8OWETVvA=)
                          2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
                          3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:4c:dc:42:25:57:fa:b0:53:33:f0:61:9e:1d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Dec  6 10:00:43 2025 GMT
            Not After : Dec  7 10:00:43 2025 GMT
        Subject: CN=6ed02e1975232fcbf00db0fde6452cccd44135b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:8e:3b:2f:91:7c:de:eb:5d:75:9b:9c:47:
                    77:b2:e5:31:1f:e9:49:b1:1c:3d:65:1e:67:95:9f:
                    ec:9b:66:63:03:06:3e:3f:68:81:a4:09:24:2a:2b:
                    a0:f4:01:df:28:98:4e:9d:6c:35:fc:23:35:c2:39:
                    e6:3f:52:cf:7a:a4:97:9b:64:27:df:00:ef:9b:0c:
                    f5:c7:57:b2:20:fc:ed:6f:cf:94:fb:a3:06:12:3c:
                    69:15:27:38:66:4b:c8:7d:26:2c:09:08:0b:ef:85:
                    95:1d:f2:36:54:97:9f:9e:fc:5b:5b:65:ef:d2:7e:
                    2e:c6:7f:91:59:1c:32:da:80:63:96:0e:ee:a0:c1:
                    a3:d6:fd:ab:fe:b9:25:62:cb:95:7c:fb:f4:cd:43:
                    c8:d0:8a:84:d4:cc:e1:16:9c:6d:2c:58:93:e7:b3:
                    cd:d2:b1:15:9a:77:82:49:3f:7c:34:92:06:a9:e2:
                    91:24:3b:77:00:06:58:ce:ac:9a:bf:f2:e1:af:c8:
                    42:ab:df:ec:f1:49:48:32:e1:d3:62:44:bb:32:c7:
                    16:e1:35:78:0f:f5:07:cc:d0:e1:37:02:e0:8e:c0:
                    51:4d:d8:44:f0:da:fb:84:8c:2f:ed:75:47:1f:31:
                    39:13:b8:4e:17:ca:eb:d1:7f:9c:ac:2a:42:76:0f:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:2E:19:75:23:2F:CB:F0:0D:B0:FD:E6:45:2C:CC:D4:41:35:B2
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:15:0d:df:c0:83:12:ed:53:c8:6e:99:66:a0:52:7f:67:
         00:30:9d:03:5d:83:a1:1d:24:b5:c0:0f:30:15:2d:9d:53:f4:
         6c:ae:c8:22:c3:06:9e:dc:5b:b7:a4:d5:08:e7:f1:9e:68:71:
         29:46:13:bf:74:20:5f:6d:e8:ad:59:fa:07:c5:6f:32:b2:df:
         ed:67:35:e5:c4:a5:7c:a6:26:71:e7:7a:5b:3e:c6:44:c8:cd:
         f2:d9:3a:0a:9c:e3:c1:25:5d:03:8d:5b:6f:01:e9:4d:70:14:
         43:bd:c8:a1:ef:5e:ee:fc:cb:85:d7:0d:b6:21:52:fa:b1:08:
         e9:d6:21:dc:d4:f5:ee:c8:88:a0:e1:97:76:92:02:e1:d1:b5:
         d2:42:f2:ad:6b:b6:99:e9:48:51:d4:6d:e4:69:ab:a6:e9:16:
         48:7c:fe:42:cb:26:15:a2:4e:11:56:6e:79:0c:65:db:95:08:
         a2:aa:af:bd:93:e2:8e:a1:b2:71:d4:ad:36:78:24:7b:ef:96:
         d3:23:aa:72:e4:fb:59:90:e5:44:fd:fe:65:78:f9:51:ea:95:
         df:e2:2f:71:81:d1:58:51:d4:c0:e3:91:b0:76:ae:3c:20:80:
         80:57:04:b0:9c:18:f5:37:a5:02:a1:0c:d8:54:e8:37:e1:20:
         f3:7b:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:05 2025 by rpki-client