This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File:                     myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier:          JdaclcitWUdPGD+3soeHUeWM16S7vbu3qkscUclS4xQ=
Subject key identifier:   B3:79:5A:0B:47:D7:32:40:D2:D0:B0:8C:B9:EE:F5:EB:0D:3C:C4:91
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       019B27E45FCB4D914B6D2D2A39DBE77EAAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number:          1785
Signing time:             Tue 16 Dec 2025 16:00:36 +0000
Manifest this update:     Tue 16 Dec 2025 16:00:36 +0000
Manifest next update:     Wed 17 Dec 2025 16:00:36 +0000
Files and hashes:         1: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
                          2: kNjtAZnBIdDs69zL_sxo5b2kvsE.roa (hash: ZvUWHB49abkoN+508ycB2Kcm14s8kB/R0ioTMdmzGbc=)
                          3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: KK5hjzoIQ8q+qQB5cancH2j3/saUptUGqKiWzoaSXBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:e4:5f:cb:4d:91:4b:6d:2d:2a:39:db:e7:7e:aa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Dec 16 16:00:36 2025 GMT
            Not After : Dec 17 16:00:36 2025 GMT
        Subject: CN=b3795a0b47d73240d2d0b08cb9eef5eb0d3cc491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:fd:4b:ae:ac:3f:bd:05:18:dc:b5:d6:af:
                    ac:e4:99:9f:df:d3:1e:fe:cc:fe:86:24:89:52:b4:
                    36:9c:4e:3a:b9:fd:63:c7:ae:37:e1:c7:6c:e7:1f:
                    0e:b3:eb:cc:0d:93:05:9f:81:b1:13:d7:d4:20:3f:
                    cc:1b:53:ea:b2:22:0f:46:b9:76:6b:4d:a2:65:9b:
                    ad:cc:08:b9:b8:75:dc:4e:58:0d:b9:b9:14:94:73:
                    b5:3a:d0:27:7e:b8:72:71:00:c3:07:18:75:0b:36:
                    13:9c:3b:71:5b:59:31:6c:54:65:8a:c0:e7:1f:32:
                    a5:cc:5f:27:c1:a1:95:ac:e7:59:37:51:ee:d2:6f:
                    31:4b:ea:ee:9d:b7:8d:fa:e8:84:6e:e8:51:d4:90:
                    f0:73:db:de:05:04:18:db:5b:52:28:a4:ea:2a:95:
                    9e:12:38:b1:3f:b8:f6:d0:d1:22:5d:5c:5e:86:55:
                    bd:99:f0:98:1e:c0:9c:45:ce:47:44:88:fc:df:a2:
                    03:77:37:68:58:1b:c5:db:d7:5b:2d:e0:cf:23:98:
                    8d:47:01:f6:89:56:da:65:d0:73:f6:dd:cf:c7:fd:
                    75:04:d7:2e:cc:e5:c1:2f:04:d1:8d:38:56:8e:c5:
                    d4:9e:d0:23:30:26:09:98:ce:ae:7c:5c:fd:c3:d8:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:5A:0B:47:D7:32:40:D2:D0:B0:8C:B9:EE:F5:EB:0D:3C:C4:91
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:f6:e7:99:86:b0:ce:02:bc:47:d4:10:a3:da:b3:cb:7f:
         38:7f:5e:82:b6:9c:e1:86:c1:cb:0b:47:bf:aa:19:1e:ba:b8:
         0f:fb:32:d3:94:d0:87:3c:b1:63:d9:d2:00:7b:d7:ad:fe:06:
         ee:94:cc:c4:44:a6:6c:88:d7:cd:f5:90:63:9c:b9:17:be:7e:
         20:8b:bc:86:26:c1:d2:95:70:de:21:ce:da:96:6d:b9:c2:20:
         08:01:da:53:5e:1d:76:0d:c7:09:9e:21:b7:4f:45:61:20:24:
         6d:8f:2e:25:27:8a:f4:24:fe:b4:66:28:1c:ae:cd:4f:6d:bf:
         ab:4e:fe:03:cd:18:cd:8c:8f:fa:fc:1b:90:56:91:f9:16:22:
         b5:86:14:eb:aa:64:9c:21:e6:f1:a3:00:4e:54:5d:e0:f9:25:
         cb:c5:84:79:34:2e:a1:1b:fb:eb:52:53:68:5d:e3:57:fb:8e:
         5a:a0:d3:dd:e8:05:6e:b0:f4:9f:fa:ce:70:e7:e4:30:d5:43:
         b9:c3:d1:ab:89:37:bd:f8:14:44:de:64:1d:1e:70:b0:b8:46:
         5a:11:d6:cf:ac:6a:be:31:6c:93:34:5f:d2:87:b0:7e:8f:93:
         d3:5c:53:d2:b7:a8:8a:a7:d9:7d:73:f2:fa:12:53:7c:6b:8f:
         ec:c1:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:13:01 2025 by rpki-client