This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          QAXGOafrj5mYVVO7iPc0g+YNEbC64Y6OdcX2h9RlnXI=
Subject key identifier:   C5:70:0B:39:C1:C6:3A:65:0B:DA:EB:C8:35:6B:45:0B:64:54:15:29
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       019AF19B74EF159E4D446CDF0BB464520592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          07B1
Signing time:             Sat 06 Dec 2025 03:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:28 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: DUDUOMoA9EAyWhbc4QC2FYCQkg1iDSF6gfTo40ZFUbQ=)
                          2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
                          3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:74:ef:15:9e:4d:44:6c:df:0b:b4:64:52:05:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Dec  6 03:01:28 2025 GMT
            Not After : Dec  7 03:01:28 2025 GMT
        Subject: CN=c5700b39c1c63a650bdaebc8356b450b64541529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:54:93:f4:92:df:0e:87:16:cd:f5:c8:c9:
                    fe:d8:0d:94:47:c6:ff:a2:d0:38:8b:b7:a5:62:ac:
                    f9:c7:05:fe:fd:29:1b:86:88:c9:87:ec:54:8c:ea:
                    39:5d:76:63:98:c0:3e:fc:e2:fc:0a:57:5c:17:e0:
                    ad:5d:f5:c5:2e:34:a7:40:e8:a8:b3:12:6a:c3:42:
                    da:79:8a:c3:ec:ca:19:5c:57:04:f6:b1:33:d0:c4:
                    e4:46:3b:3b:df:bb:f6:ee:21:e2:59:29:4a:bb:c2:
                    b9:94:fb:2f:34:cf:25:02:f3:79:cc:2e:34:39:0e:
                    d5:fa:ff:d9:74:e9:8d:7b:27:80:c8:1f:8a:fe:5d:
                    75:70:0a:b1:22:ca:a1:99:6a:7c:ce:a8:76:af:27:
                    1e:37:7f:3d:f7:7a:00:d9:87:1d:66:f0:96:1d:e2:
                    f5:68:2c:2b:5c:5c:ee:ac:a7:90:f3:8d:ce:e1:f4:
                    71:9c:2c:ed:70:e6:20:64:23:27:cd:2d:0b:39:13:
                    be:86:2a:ca:54:c1:a7:15:1c:ca:f3:ad:0a:0a:12:
                    15:1c:8f:23:8c:d1:d2:b5:98:6b:f3:4f:0d:df:3f:
                    e6:83:54:c4:f5:ba:4e:e3:8b:25:c1:db:dd:74:c3:
                    c8:d6:b3:66:83:3a:3f:07:34:24:33:b2:5d:51:fa:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:0B:39:C1:C6:3A:65:0B:DA:EB:C8:35:6B:45:0B:64:54:15:29
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:fb:ce:61:e8:a2:b2:9f:8a:1a:9b:a3:e7:e9:5f:85:79:
         f4:62:d6:de:83:5b:6d:27:04:b5:c4:a9:7c:ec:5e:1e:dc:8c:
         33:e2:a5:8d:a9:a4:0f:d3:1a:0b:00:78:7d:65:81:94:04:d8:
         0d:d3:e8:64:3f:a9:2f:f9:71:b2:e0:86:9d:e7:89:f7:c8:fa:
         e1:2a:bb:58:68:56:3e:6d:72:10:de:d1:1c:8e:e7:ba:83:27:
         9f:86:f0:81:9d:6c:f5:c3:63:cc:62:6b:e4:12:a4:a3:2b:de:
         c8:da:c2:af:5b:6c:b3:fe:15:1b:df:1f:36:f0:69:77:bd:86:
         e7:62:f2:93:19:ca:e9:69:39:3a:9c:8f:88:8a:64:f8:77:c7:
         62:4d:11:af:8a:42:cc:5e:fd:7b:a5:4b:c1:93:d6:35:52:b3:
         8b:81:cf:96:33:96:1a:8b:34:1c:f4:0b:d6:76:31:83:35:e3:
         4c:ff:66:30:c1:3a:66:d4:31:88:fe:30:c8:b3:c3:62:67:b2:
         02:9e:f0:95:33:14:17:ed:18:ec:36:24:6e:d3:24:2b:ba:99:
         e7:6b:28:68:66:67:f4:23:a1:b2:ed:0f:21:b9:84:c6:28:c1:
         2b:ab:fb:24:b9:a7:20:a9:12:43:5e:46:7a:54:4f:34:09:9e:
         d1:46:af:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm3TvFZ5NRGzfC7RkUgWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTEzYWYzZjM2YmI5MmEwZjJmYmRhZmUzYjY3MWY2Yjlm
Y2VmYTgwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD
EyhjNTcwMGIzOWMxYzYzYTY1MGJkYWViYzgzNTZiNDUwYjY0NTQxNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfFUk/SS3w6HFs31yMn+2A2UR8b/
otA4i7elYqz5xwX+/SkbhojJh+xUjOo5XXZjmMA+/OL8CldcF+CtXfXFLjSnQOio
sxJqw0LaeYrD7MoZXFcE9rEz0MTkRjs737v27iHiWSlKu8K5lPsvNM8lAvN5zC40
OQ7V+v/ZdOmNeyeAyB+K/l11cAqxIsqhmWp8zqh2ryceN38993oA2YcdZvCWHeL1
aCwrXFzurKeQ843O4fRxnCztcOYgZCMnzS0LORO+hirKVMGnFRzK860KChIVHI8j
jNHStZhr808N3z/mg1TE9bpO44slwdvddMPI1rNmgzo/BzQkM7JdUfrsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVwCznBxjplC9rryDVrRQtkVBUpMB8GA1UdIwQY
MBaAFNEROvPza7kqDy+9r+O2cfa5/O+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmIt
MDBjZTlmMDhhZDgzLzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmItMDBjZTlmMDhhZDgz
LzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdb7zmHo
orKfihqbo+fpX4V59GLW3oNbbScEtcSpfOxeHtyMM+KljamkD9MaCwB4fWWBlATY
DdPoZD+pL/lxsuCGneeJ98j64Sq7WGhWPm1yEN7RHI7nuoMnn4bwgZ1s9cNjzGJr
5BKkoyveyNrCr1tss/4VG98fNvBpd72G52LykxnK6Wk5OpyPiIpk+HfHYk0Rr4pC
zF79e6VLwZPWNVKzi4HPljOWGos0HPQL1nYxgzXjTP9mMME6ZtQxiP4wyLPDYmey
Ap7wlTMUF+0Y7DYkbtMkK7qZ52soaGZn9COhsu0PIbmExijBK6v7JLmnIKkSQ15G
elRPNAme0UavBQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:51 2025 by rpki-client