This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File:                     b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier:          CX5M1kXll2V2YReYxauVGivI1Rrn79WISGwC8iqPD64=
Subject key identifier:   AF:D8:82:5C:9A:1F:9C:C8:B1:8B:F4:0F:CB:66:89:47:52:19:22:31
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer:       /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial:       019AF1D1817F50887B1FE9F2D0FEEBF7AFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number:          0E1C
Signing time:             Sat 06 Dec 2025 04:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:30 +0000
Files and hashes:         1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
                          2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
                          3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: AGlKxcONXPpIheYWSQD2vDTzvO8LBnFFqZUolZbjmz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:81:7f:50:88:7b:1f:e9:f2:d0:fe:eb:f7:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
        Validity
            Not Before: Dec  6 04:00:30 2025 GMT
            Not After : Dec  7 04:00:30 2025 GMT
        Subject: CN=afd8825c9a1f9cc8b18bf40fcb66894752192231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:60:68:94:c8:51:03:79:e3:37:4f:15:24:
                    6c:03:56:6d:08:d8:a7:1b:c5:a2:68:7a:7a:a7:52:
                    ca:30:eb:99:3e:ee:4a:60:7b:bf:d9:1c:b6:55:ea:
                    0c:4d:d2:22:7e:89:d2:13:d6:82:2f:64:70:14:52:
                    43:07:f2:85:13:36:5b:32:03:da:6f:ca:a5:87:5d:
                    7b:b9:08:04:2e:5b:da:6f:60:c0:35:c9:17:bf:c3:
                    51:e1:0e:1a:ed:48:b9:79:15:b2:94:c3:6d:4a:9c:
                    d9:23:27:ed:7c:bb:1e:a4:90:b4:93:b6:93:ff:b3:
                    bd:56:a8:5c:7e:38:03:7d:0e:42:7a:fc:98:06:27:
                    3e:97:65:95:36:aa:98:ac:52:3d:f5:d3:9b:23:0e:
                    d7:e1:7a:3a:d4:78:c7:f0:bd:a4:b2:c1:9d:db:6b:
                    a8:db:75:48:92:11:ba:3e:25:50:19:6c:f7:fa:c8:
                    08:01:a8:e5:8a:7c:dc:6f:ff:ba:4f:b1:0a:4a:e6:
                    60:f8:fc:86:bb:21:6f:ed:96:ea:57:c1:ea:1a:c7:
                    f6:91:c1:63:54:df:67:51:54:20:a6:9e:d7:1a:48:
                    5c:36:49:7a:83:f8:94:39:91:1b:f5:b6:65:0a:95:
                    e6:fb:66:11:9b:22:cd:1e:bb:5c:54:c7:49:35:4d:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:82:5C:9A:1F:9C:C8:B1:8B:F4:0F:CB:66:89:47:52:19:22:31
            X509v3 Authority Key Identifier:
                keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:9e:c3:45:bf:78:17:04:54:c7:12:27:32:2d:99:33:8e:
         49:87:7a:fe:30:4b:67:22:cd:bb:51:6c:52:90:a9:15:55:00:
         50:17:37:76:f0:42:89:97:34:2f:9f:a3:dd:bc:a4:30:d2:c7:
         8e:74:7e:ce:2c:95:a9:8b:e0:d3:bf:c7:51:84:8a:98:81:07:
         cf:4d:99:4d:36:85:69:71:b5:2f:4f:54:7b:e0:8b:b8:ee:85:
         2b:48:48:6e:ed:e3:22:d0:ee:06:0b:21:ed:9f:c9:14:6a:a9:
         1d:21:7f:6b:04:32:8c:06:25:f6:88:e7:1f:e8:92:55:4f:64:
         81:18:22:02:90:cc:75:4e:dd:db:40:51:83:ee:82:59:9b:47:
         4a:d1:e1:f5:32:61:78:ff:5d:b8:8f:02:e1:c6:42:89:9e:80:
         fb:35:35:8e:6a:43:65:07:7e:ab:7b:25:d2:38:7b:69:78:ed:
         11:57:20:3d:52:c8:22:9c:c9:67:c2:f6:ac:1c:54:8c:cb:9a:
         e3:cd:30:da:b4:cd:ef:a5:97:65:a3:e9:0d:f5:80:bf:94:6d:
         bd:c8:77:67:06:96:9b:6f:ff:23:5b:2b:4c:0d:dc:7c:85:67:
         cb:09:b8:36:0f:58:e3:32:ad:db:90:2c:7c:ed:2a:19:78:b8:
         96:df:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:00:56 2025 by rpki-client