This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          M6gJz5VbdT9FmLNq9iWSmGe40xvpVdBCgh1fxDWW9Mc=
Subject key identifier:   24:2F:56:12:45:54:03:44:F9:28:0A:87:70:45:F4:0D:12:DE:CB:2A
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019AF3F74AD96AA1336554055BD99D57B7B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0F7F
Signing time:             Sat 06 Dec 2025 14:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:01 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: VpinAYtZhiIQok+yTxaB77MfJYo6AyMLEmEKM+/pWpA=)
                          2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
                          3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:4a:d9:6a:a1:33:65:54:05:5b:d9:9d:57:b7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Dec  6 14:01:01 2025 GMT
            Not After : Dec  7 14:01:01 2025 GMT
        Subject: CN=242f561245540344f9280a877045f40d12decb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:07:8c:ac:32:33:fc:c5:69:70:42:20:df:
                    7e:60:5a:b7:91:81:46:48:2c:2b:3b:8f:20:92:63:
                    f1:37:69:13:7b:28:64:24:57:4d:47:66:42:04:89:
                    07:19:48:41:35:78:cc:7a:65:ce:4c:f6:35:72:07:
                    b6:46:b7:52:67:39:42:90:bb:e8:07:f0:bc:b5:1c:
                    d6:45:99:9c:27:06:a3:23:87:bc:03:62:73:06:ee:
                    16:72:8e:e8:4a:ca:2f:13:11:d8:30:a9:af:41:ca:
                    10:b1:cc:6c:af:87:d3:80:2b:98:50:6c:c5:dc:76:
                    88:1a:55:38:9f:76:ea:21:1d:be:05:43:42:cd:d0:
                    d2:85:1e:47:9c:34:44:a8:d0:02:73:8c:0c:3a:ec:
                    32:5c:95:1a:c2:f7:b1:e3:eb:bf:72:e0:c0:b4:14:
                    a0:b8:5d:c8:ec:10:78:3f:f2:01:40:28:27:a9:0c:
                    b0:0c:e1:53:29:87:7b:dd:4b:d9:6e:f7:05:ca:48:
                    aa:10:c5:e5:4b:d0:8b:71:40:f5:80:c1:fd:87:af:
                    66:72:23:2f:fa:20:e6:30:3b:13:53:19:00:c9:34:
                    2f:78:69:ac:62:4e:ef:f3:f1:b8:0b:55:e3:8b:c7:
                    c5:33:ca:f5:8d:2a:4b:d6:df:f9:11:9e:d4:66:f9:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2F:56:12:45:54:03:44:F9:28:0A:87:70:45:F4:0D:12:DE:CB:2A
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:79:6c:b3:07:ef:f2:f7:4f:79:ac:ad:0e:86:6d:21:e5:
         99:46:6d:7a:6c:6b:2d:30:e9:fb:3c:0f:cb:6b:15:af:54:67:
         38:ff:07:85:82:d7:ee:df:73:73:68:9d:62:d1:f7:3f:69:f5:
         69:e2:27:e3:79:27:40:58:9d:0f:ed:c0:95:38:87:63:91:4f:
         88:98:20:c1:03:f3:37:2e:7c:02:c4:a2:ce:9e:6a:87:f7:42:
         a5:bd:63:80:ae:2f:54:ed:32:5f:8c:f2:f0:e5:6b:56:a1:6a:
         7e:c4:cb:59:2e:0c:d5:d7:1e:03:ca:f9:98:d7:5b:0b:e4:af:
         bd:99:1c:2f:da:97:3e:6c:18:13:08:7c:8b:2a:5b:be:ea:30:
         3d:6d:a8:c5:0b:71:37:2a:0e:4b:a9:db:bd:20:d3:f7:46:6d:
         80:56:be:b4:cc:21:58:21:88:0e:24:0b:de:ba:da:7e:80:40:
         91:d0:f3:97:f8:c2:cc:9c:cb:b4:1c:92:8f:6d:cd:fc:7e:3e:
         f2:2b:c0:83:99:1f:75:5d:03:68:b2:5c:98:e3:eb:3c:f1:1c:
         e5:ee:f6:aa:91:21:0b:f7:92:3d:51:12:71:18:13:c9:15:f1:
         b5:46:92:3a:e3:c8:47:ee:2f:78:8b:5e:3b:dd:22:7c:00:0f:
         18:e4:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:43:06 2025 by rpki-client