This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          duLaReHiIbz6fixPsmd0jj+PHMSx4IlLngM+yDgg3ak=
Subject key identifier:   C5:C6:C2:26:49:32:99:75:7C:DE:D4:1A:C0:6B:AC:77:CC:66:9C:12
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       019AF208CF8852030C3D8749D752A26E9910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          1034
Signing time:             Sat 06 Dec 2025 05:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:54 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: msnaPsu8VfUwfKq2pFXCXONoLSXYfKSofvDq0CsIALY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:cf:88:52:03:0c:3d:87:49:d7:52:a2:6e:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Dec  6 05:00:54 2025 GMT
            Not After : Dec  7 05:00:54 2025 GMT
        Subject: CN=c5c6c226493299757cded41ac06bac77cc669c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:f4:98:2f:67:41:7d:bb:7e:4c:97:66:d9:
                    26:47:23:54:93:ff:3e:c0:68:81:8b:4d:db:0e:da:
                    29:e0:e4:f6:69:32:19:c0:40:a8:a3:45:15:6a:6b:
                    fa:35:c8:11:6a:1c:4b:50:37:4a:c3:a3:02:7e:8c:
                    78:6a:dd:72:5d:4d:9b:21:ce:92:19:c3:a4:aa:19:
                    ef:1e:7f:41:e4:31:a6:e2:74:de:bf:c1:39:77:71:
                    24:e4:37:ee:91:43:c9:b6:a4:f2:14:dd:26:9f:e9:
                    f4:2e:64:4f:18:1c:3a:a5:69:b9:30:c0:df:89:a3:
                    99:d7:43:c5:f2:71:56:05:c0:e3:c1:b8:3d:35:c5:
                    8c:a1:98:ef:9f:7f:5e:32:f2:9b:a4:4c:b9:63:c2:
                    8d:4f:bf:85:b8:35:dd:27:1f:d0:f6:aa:70:fd:64:
                    a4:e9:fa:d4:47:1b:b3:52:bb:fa:a6:69:ea:c8:d9:
                    2e:aa:d0:04:b4:b9:ec:88:ed:64:9f:da:9a:96:9d:
                    8e:a3:7a:04:58:40:aa:d2:3d:15:fd:6e:57:4a:bb:
                    f6:ae:f6:b4:1a:c7:4e:18:bf:e9:8a:e4:6c:58:99:
                    a1:41:80:fb:fd:8b:ea:63:5f:58:f2:55:c4:09:97:
                    75:16:98:2b:cd:08:06:8b:49:3e:ca:12:e4:d6:f9:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C6:C2:26:49:32:99:75:7C:DE:D4:1A:C0:6B:AC:77:CC:66:9C:12
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:31:8c:a7:69:b4:63:9f:18:61:73:5a:e8:9c:b5:6f:4e:3e:
         89:d3:2d:93:3e:62:67:7b:ca:ca:31:3d:a4:ae:54:85:fa:62:
         9e:54:44:40:04:b7:99:ab:88:af:bf:ff:e8:15:1c:07:07:2c:
         21:de:1d:5d:8a:74:93:43:45:34:8f:9a:13:e5:97:df:47:8c:
         7b:ab:1e:23:6b:de:1e:54:db:3e:fb:82:08:ca:de:66:65:01:
         f5:1d:7d:04:1a:b2:e7:bb:d1:11:68:34:64:92:f2:1c:45:97:
         b5:d3:67:af:68:65:8f:e7:df:19:a0:44:2f:1c:51:34:55:22:
         27:a2:b1:af:77:16:66:c1:61:7c:73:46:89:57:c2:0e:eb:39:
         b8:f3:07:63:6e:3d:3c:c7:ea:3b:a8:c2:f3:74:cc:a3:6f:c8:
         d2:95:8c:57:fd:47:31:bd:15:4d:c8:5e:5d:16:86:2d:ef:b7:
         fa:43:d2:00:85:72:6c:a6:71:61:11:4a:4b:6a:5b:da:bb:d2:
         90:32:29:7f:cd:eb:76:9b:f5:d0:8a:2d:2a:c1:5c:e7:4c:c7:
         27:a8:6c:03:d6:dd:6d:57:49:9b:10:4b:d0:4c:1d:53:a2:3e:
         90:c2:4e:fa:4c:7d:ff:61:4f:91:e1:8c:0f:d8:fc:81:0c:7b:
         fa:4a:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:48 2025 by rpki-client