This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          jvHHH7Nq997jGHocBnLygGWojtf613BgVARVWFOVhhY=
Subject key identifier:   54:29:48:D1:CD:55:E5:93:8D:9B:99:8A:CF:AE:96:9A:62:21:7F:B1
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019B281B7505255CB1C2CB40E233FE228E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0F9A
Signing time:             Tue 16 Dec 2025 17:00:46 +0000
Manifest this update:     Tue 16 Dec 2025 17:00:46 +0000
Manifest next update:     Wed 17 Dec 2025 17:00:46 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: rQv3gzUheJMfIz/ZWSPiBCih/O5V2DVifQi78RQlxGM=)
                          2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
                          3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:1b:75:05:25:5c:b1:c2:cb:40:e2:33:fe:22:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Dec 16 17:00:46 2025 GMT
            Not After : Dec 17 17:00:46 2025 GMT
        Subject: CN=542948d1cd55e5938d9b998acfae969a62217fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:b1:c4:e9:d1:13:6a:a2:82:00:1a:f3:42:
                    b1:a0:7b:15:c9:2e:a5:e7:0b:6b:04:e8:27:7a:e4:
                    e3:db:57:25:9d:cf:7a:41:09:33:7a:bd:04:66:09:
                    21:09:cf:cb:fa:e5:29:f9:a5:61:61:a9:9b:5a:37:
                    a9:0e:ac:23:e3:4c:3f:62:56:a1:dd:71:f1:25:f5:
                    93:a2:d1:2c:9d:e9:41:94:72:8c:59:03:6a:c8:01:
                    5c:d1:fa:ff:03:2c:15:94:ae:c8:38:dd:dd:19:87:
                    bd:86:da:10:3c:6b:64:56:d3:80:4b:bc:32:79:71:
                    64:54:44:03:de:15:2a:46:07:2d:43:d2:fa:eb:cd:
                    ae:c5:e7:01:83:28:a8:02:08:f4:14:80:ab:68:90:
                    22:d7:2e:c5:67:e4:5e:df:ea:51:d8:17:f0:10:4a:
                    65:76:62:be:5f:fe:16:7c:ce:44:e6:72:ad:cc:94:
                    b2:de:74:1a:10:0b:bb:6b:94:84:0b:5b:14:b3:50:
                    09:4e:18:9f:b4:a7:8f:7e:a3:6c:16:77:19:26:e0:
                    64:ca:ed:40:7a:12:f6:45:23:13:19:2e:29:0e:3b:
                    c9:20:ac:5e:ff:3e:35:89:51:ee:0a:13:25:f0:ba:
                    cb:3a:26:11:9a:5e:a4:ba:4c:75:f2:16:f8:b0:d6:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:48:D1:CD:55:E5:93:8D:9B:99:8A:CF:AE:96:9A:62:21:7F:B1
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:82:99:d1:e8:74:3b:e5:01:85:07:d6:fe:58:42:30:db:
         3d:d1:0f:6b:df:10:84:27:6c:57:75:ec:b4:01:91:ae:6c:42:
         ab:57:7b:cd:fb:11:42:63:45:76:ba:30:8c:d2:b3:d8:ca:6a:
         ae:76:31:fe:87:6b:e7:44:9f:5e:e6:57:da:e8:14:71:08:24:
         6b:ff:a3:4e:f4:e1:ab:2f:80:19:ab:6d:5f:41:2a:6f:c8:83:
         d0:3a:be:b9:6a:2a:24:5c:f5:09:53:25:06:e7:cd:4c:16:b0:
         0e:65:f1:2b:bb:41:12:73:ec:c0:1b:09:da:11:fa:a8:56:c5:
         be:cf:67:e9:42:b3:6d:ef:dc:44:d6:4c:ad:49:f5:41:58:cb:
         b0:8f:6a:ea:7b:e0:0c:29:bd:b5:b0:2f:f1:4c:03:e5:6a:31:
         e9:18:6c:e3:e7:38:06:b9:e3:2b:67:83:57:af:d0:4f:cf:53:
         66:99:ed:48:1e:10:a7:7e:6b:e5:0c:d6:0b:8c:5c:91:dd:a6:
         1b:a3:f5:a8:9d:58:13:9c:98:6a:a2:d7:8d:8e:65:05:16:bc:
         1e:14:74:fb:38:39:a7:39:69:c5:f9:6d:b4:17:01:e1:c6:03:
         33:29:a1:56:55:c6:e1:ea:73:1d:27:b0:d2:06:9d:ae:4d:4f:
         11:0c:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:31:37 2025 by rpki-client