This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
File:                     1-10-EU-84s8PkgQxxWp8c9_aWn4.mft (raw, json)
Hash identifier:          DJvwbbMMwocJsL3w1BEgXZ8bZxlWi6rbLsIYp9ebO8w=
Subject key identifier:   B5:C9:C4:5F:A4:66:B4:94:A1:40:84:39:48:1E:34:AA:A4:37:4B:91
Authority key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Certificate issuer:       /CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Certificate serial:       019AF2AD9E43010582CC732E5554911617B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
Manifest number:          0643
Signing time:             Sat 06 Dec 2025 08:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:55 +0000
Files and hashes:         1: 1-10-EU-84s8PkgQxxWp8c9_aWn4.crl (hash: wAW9wO6ETNrcfDUnYt+ZFNyD88IDybp43CpVh8fHEZ8=)
                          2: cH_DJKgBmzslket3VUx6YX5cgVY.roa (hash: uLbc4oJP9W2SYmp+K5RveZ5JkK6djDmntWnr1BfZmrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:9e:43:01:05:82:cc:73:2e:55:54:91:16:17:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
        Validity
            Not Before: Dec  6 08:00:55 2025 GMT
            Not After : Dec  7 08:00:55 2025 GMT
        Subject: CN=b5c9c45fa466b494a1408439481e34aaa4374b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:20:eb:d1:35:b6:f6:68:f7:3d:05:58:aa:
                    81:77:15:89:cb:74:bb:c3:a6:c2:b9:1b:89:30:48:
                    8c:e8:3f:91:cb:fd:6d:c8:24:fe:c7:d9:70:d1:b3:
                    e6:f2:40:74:44:31:18:8d:a2:04:dd:6e:52:dd:74:
                    b1:6c:a8:99:20:7c:8c:3e:1a:d9:30:e6:e5:cf:75:
                    f7:d1:b2:36:a2:90:e6:88:2f:d3:ef:a4:c4:3e:8c:
                    83:e1:31:46:9e:74:7c:d2:1a:32:94:8b:bb:f3:da:
                    cb:d4:8c:e6:b3:2e:f8:5f:50:dd:75:2d:71:6b:65:
                    d7:38:dd:a7:da:a7:05:c6:60:c4:0a:92:2d:41:e8:
                    9e:6d:e5:8a:99:d0:da:2e:23:99:4a:29:22:6b:31:
                    c5:b5:dc:f7:7e:95:96:de:47:59:46:08:4f:c0:52:
                    50:3e:0c:b2:6f:9d:23:bf:77:3f:48:c7:9b:dd:0f:
                    99:9a:01:73:8e:7b:b7:01:0f:1c:69:fa:d4:21:b5:
                    6c:6b:a5:80:17:81:d5:31:57:d9:84:e4:35:06:f2:
                    54:aa:07:8f:47:33:9b:64:af:ce:fb:17:a3:67:e4:
                    8b:b7:92:64:98:02:26:1f:f9:1c:72:62:ee:8f:72:
                    26:78:48:10:38:79:e1:ab:2e:77:f9:28:3b:a7:f0:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:C4:5F:A4:66:B4:94:A1:40:84:39:48:1E:34:AA:A4:37:4B:91
            X509v3 Authority Key Identifier:
                keyid:FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:01:c5:21:51:13:08:16:df:8a:44:64:17:db:61:e1:7e:
         96:1d:f3:c0:ea:9e:23:31:8c:23:e3:72:6a:00:83:32:ef:7b:
         77:5a:37:e3:d6:89:98:ad:4c:61:c0:23:7b:b8:20:08:6a:95:
         f0:47:8e:26:87:bb:3c:53:49:2a:41:b0:e0:ce:5d:ed:b3:b6:
         79:99:79:23:82:b3:2d:a9:41:2b:f1:c5:bd:36:3e:47:9e:c0:
         07:57:12:bd:b5:85:c8:40:22:08:64:65:2d:24:d4:8f:d9:33:
         50:59:02:6a:bb:df:c3:f8:cf:38:70:c5:ff:d0:0d:8e:09:cd:
         26:36:33:08:dd:1f:89:fe:76:6e:04:ce:79:a8:52:13:43:1c:
         09:48:4c:8a:22:fb:11:35:c9:93:85:da:15:d2:a7:1a:1d:fa:
         93:57:86:d3:d2:e9:22:db:5c:3c:ea:f3:6f:db:5d:09:df:a2:
         ef:c6:3e:b9:46:62:a5:39:aa:1e:7e:9f:21:90:1b:47:b1:c9:
         fd:1c:e3:b7:4f:bd:67:cb:81:48:cf:2b:02:33:f9:eb:f2:79:
         9b:a6:d9:6c:63:38:e6:df:bf:e4:8e:1a:dd:79:f0:e7:38:3d:
         2b:7d:16:6e:77:fa:21:8e:ff:68:23:46:49:97:e4:28:6b:c6:
         91:d8:b2:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZryrZ5DAQWCzHMuVVSRFhe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNWQzZTExNGZiY2UyY2YwZjkyMDQzMWM1NmE3YzczZGZk
YTVhN2UwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD
EyhiNWM5YzQ1ZmE0NjZiNDk0YTE0MDg0Mzk0ODFlMzRhYWE0Mzc0YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkEg69E1tvZo9z0FWKqBdxWJy3S7
w6bCuRuJMEiM6D+Ry/1tyCT+x9lw0bPm8kB0RDEYjaIE3W5S3XSxbKiZIHyMPhrZ
MOblz3X30bI2opDmiC/T76TEPoyD4TFGnnR80hoylIu789rL1Izmsy74X1DddS1x
a2XXON2n2qcFxmDECpItQeiebeWKmdDaLiOZSikiazHFtdz3fpWW3kdZRghPwFJQ
Pgyyb50jv3c/SMeb3Q+ZmgFzjnu3AQ8cafrUIbVsa6WAF4HVMVfZhOQ1BvJUqgeP
RzObZK/O+xejZ+SLt5JkmAImH/kccmLuj3ImeEgQOHnhqy53+Sg7p/DiQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLXJxF+kZrSUoUCEOUgeNKqkN0uRMB8GA1UdIwQY
MBaAFPtdPhFPvOLPD5IEMcVqfHPf2lp+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xMC1FVS04NHM4UGtnUXh4V3A4YzlfYVduNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvZTcwZDk4LTQyNmUtNDZmZS1hZmFm
LTgyMTM5ZjNiNDMzYy8xLzEtMTAtRVUtODRzOFBrZ1F4eFdwOGM5X2FXbjQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YyL2U3MGQ5OC00MjZlLTQ2ZmUtYWZhZi04MjEzOWYzYjQz
M2MvMS8xLTEwLUVVLTg0czhQa2dReHhXcDhjOV9hV240LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY0B
xSFREwgW34pEZBfbYeF+lh3zwOqeIzGMI+NyagCDMu97d1o349aJmK1MYcAje7gg
CGqV8EeOJoe7PFNJKkGw4M5d7bO2eZl5I4KzLalBK/HFvTY+R57AB1cSvbWFyEAi
CGRlLSTUj9kzUFkCarvfw/jPOHDF/9ANjgnNJjYzCN0fif52bgTOeahSE0McCUhM
iiL7ETXJk4XaFdKnGh36k1eG09LpIttcPOrzb9tdCd+i78Y+uUZipTmqHn6fIZAb
R7HJ/Rzjt0+9Z8uBSM8rAjP56/J5m6bZbGM45t+/5I4a3Xnw5zg9K30Wbnf6IY7/
aCNGSZfkKGvGkdiyJA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:25:22 2025 by rpki-client