This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
File:                     B16ZPnb51_pATWmmy2DUv5jyuh4.mft (raw, json)
Hash identifier:          jYOj2vmD4V7K6Fd4+Tbc7+Iex8zPhZRO+zar9Vq1Z2w=
Subject key identifier:   D1:28:E9:06:E3:98:09:2B:AD:47:40:49:1D:FE:B0:0B:0E:34:AB:5C
Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
Certificate issuer:       /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Certificate serial:       019AF31B797B316F641D799A8B5D9117F671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
Manifest number:          0E44
Signing time:             Sat 06 Dec 2025 10:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:55 +0000
Files and hashes:         1: B16ZPnb51_pATWmmy2DUv5jyuh4.crl (hash: eB+3VPCOO+gU/ZXdpblAj6I8AX2bA62jwEyQfk/t+b0=)
                          2: eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa (hash: JTu+VCZve4g7YJ7lEl3E5gK1lzKHcSO10n13jSXvJvE=)
                          3: s_4M0Xn3RWdVl5Ee5amLr_m-SKI.roa (hash: PZMtSOH/plvjDd02CCjFt0ICQDy0I1QjX54XMQBvGFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:79:7b:31:6f:64:1d:79:9a:8b:5d:91:17:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
        Validity
            Not Before: Dec  6 10:00:55 2025 GMT
            Not After : Dec  7 10:00:55 2025 GMT
        Subject: CN=d128e906e398092bad4740491dfeb00b0e34ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:a9:bf:e0:ad:3e:23:35:dc:0b:69:e7:f5:
                    13:91:d6:bc:3b:d0:fe:08:a9:51:2c:74:e7:78:b9:
                    a9:97:4b:44:c2:cc:f5:2d:73:a5:e1:ef:13:d2:0f:
                    12:df:d5:b8:9a:6b:f7:94:f3:fd:36:b4:77:f7:0d:
                    62:83:d4:24:26:2d:a0:e6:8c:05:e1:74:ae:68:f1:
                    85:9d:34:fe:67:4b:35:be:bd:c1:4a:c0:0e:67:68:
                    b7:aa:dd:29:03:3d:06:de:5d:78:52:e1:03:15:f7:
                    fa:a5:cd:3e:3e:f3:ac:bb:ba:18:f2:df:60:75:32:
                    7b:dc:b8:0a:a8:8b:9f:2a:3e:f0:5a:36:b8:8b:dc:
                    4f:68:12:5a:6f:07:82:d9:1a:89:6b:ca:da:3f:cf:
                    6e:cf:d0:4a:e8:87:8d:56:f8:f0:45:50:36:54:4c:
                    cd:58:53:09:f4:55:1c:9d:a8:7f:64:10:65:b8:61:
                    52:f0:f9:9b:04:a2:71:cc:a6:20:1a:3d:a5:54:db:
                    8c:77:45:d9:e4:b6:59:85:bb:4f:4a:6b:23:22:c6:
                    77:95:56:d1:fe:6b:6f:bc:6d:5e:2b:b2:36:13:59:
                    52:df:00:e6:eb:05:24:f7:a9:62:7d:31:6f:8d:d0:
                    0a:d9:71:81:c1:26:e0:0f:0d:32:bd:c2:34:8d:35:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:E9:06:E3:98:09:2B:AD:47:40:49:1D:FE:B0:0B:0E:34:AB:5C
            X509v3 Authority Key Identifier:
                keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:a0:65:18:f5:6c:a5:52:56:57:46:bd:83:0f:f9:47:d8:
         f0:34:8d:fa:14:e6:68:32:af:5a:a2:64:fa:70:e5:af:1a:5b:
         6b:26:3e:ab:cc:e7:dc:6f:4f:d4:a4:85:7e:46:88:fc:c5:8a:
         f3:d5:54:9d:af:d5:a1:29:c6:89:44:9f:39:f0:7e:5a:97:47:
         18:fe:50:3b:bd:1a:ef:06:f7:40:ad:02:9b:2b:37:38:2d:b4:
         2f:f6:e6:e4:c8:c4:d9:09:22:93:b4:99:d6:0f:98:1f:3b:b8:
         94:46:95:ef:df:cf:c7:58:08:53:95:27:39:79:e4:b1:24:1f:
         f2:35:1f:32:05:ac:d6:11:7f:18:ee:a7:61:5a:8a:19:47:94:
         b7:e5:5b:f2:79:2d:7c:fe:bb:76:a1:26:05:e6:7b:e7:c7:f2:
         19:ab:c5:85:8d:4b:bf:ed:1b:f8:00:56:f9:28:b4:29:e4:ab:
         20:60:3b:e5:af:95:d1:d1:b9:6b:c0:5a:32:9d:66:41:b9:72:
         73:b4:9c:a9:0a:3d:6e:0d:c1:3b:4f:cf:e4:2f:98:18:db:71:
         d0:0c:0f:d2:21:35:fd:a1:73:79:48:2c:1f:a0:6e:0b:0c:6f:
         11:f8:13:7d:91:09:02:7a:79:9b:d3:81:4f:c3:54:60:35:98:
         b6:6b:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:01:10 2025 by rpki-client