This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          tkXdwuZkbMtO1VVXs94j+a4RtbX4I7I98GsqOXqrzZw=
Subject key identifier:   2B:AA:CB:2F:26:BD:DF:CA:29:09:D1:82:7F:7A:36:F4:69:BC:E2:03
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019AF42E865B440D09C68F2A3E674EA99A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          044B
Signing time:             Sat 06 Dec 2025 15:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:20 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: aPsgU4F1vylW13x6wYe72hSXbmX241S+lbXjCykBEp0=)
                          2: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=)
                          3: hT7unl9ZuxZPAjHhi1yxgaF0b84.roa (hash: v8cgVoUrK7g8xYPzYyvvJU+HdpGiFjC2QbRLHwLNvNg=)
                          4: uWpNCPTv1fX6SmxhkKVSdngegu4.roa (hash: kLvGX1zZO1OaTg+o6DjuOwMKQv+Bs3Dx3ldycWfaKag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:86:5b:44:0d:09:c6:8f:2a:3e:67:4e:a9:9a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Dec  6 15:01:20 2025 GMT
            Not After : Dec  7 15:01:20 2025 GMT
        Subject: CN=2baacb2f26bddfca2909d1827f7a36f469bce203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:4f:21:1b:15:1a:45:da:3e:ae:d5:a8:22:
                    05:df:41:c0:7c:8e:7f:a2:2d:70:82:a5:ec:b1:d9:
                    65:6f:9c:21:a4:5d:35:5a:45:79:01:d4:2a:7c:2c:
                    cf:16:ee:17:b3:05:27:64:b9:ff:4a:58:61:42:e3:
                    8f:c6:39:57:af:75:f5:93:d1:71:86:8b:2b:33:82:
                    cf:d5:39:b0:38:d5:18:87:88:50:8f:f7:d7:0a:51:
                    8f:71:30:9f:67:25:93:9d:93:01:4e:22:40:f1:d4:
                    51:76:64:bb:95:f6:3c:b3:c7:1a:eb:30:fb:88:44:
                    8d:27:78:b8:26:0b:72:f7:70:0a:6f:4b:fb:c4:0e:
                    9e:74:62:a1:c9:2b:05:df:d1:91:e6:69:d7:0e:86:
                    18:84:04:14:7c:66:d9:ca:72:5a:97:6b:fe:58:ae:
                    6f:30:b7:db:2e:b2:88:20:17:fe:d3:c0:40:0e:ac:
                    01:a6:61:df:46:77:48:6e:c3:d6:14:75:2c:70:91:
                    50:c5:45:39:3c:cb:6f:ab:c2:45:c8:e8:1d:4f:26:
                    ce:40:99:94:bb:1d:95:9c:04:e2:0c:c1:ac:da:ce:
                    28:16:c1:36:be:43:ba:26:34:8f:c2:d8:87:ff:fd:
                    e5:02:93:dc:36:57:48:c6:94:18:db:18:d7:67:36:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AA:CB:2F:26:BD:DF:CA:29:09:D1:82:7F:7A:36:F4:69:BC:E2:03
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:31:d2:10:e8:2a:92:3f:d3:f7:e0:b1:5d:8b:60:f8:e2:
         64:79:0e:80:e7:58:e1:9e:48:aa:1b:dc:76:a2:72:c4:b9:6e:
         ef:1a:3c:6a:7c:2c:c0:c2:df:62:b5:00:53:86:8a:23:0c:f8:
         bd:69:b2:12:f7:18:28:ca:16:43:66:8c:ee:06:02:8f:7b:4f:
         fb:f2:53:e2:8f:d4:da:ae:77:54:55:fb:a2:a5:7d:c9:9d:9c:
         a6:4a:7d:d1:1b:a6:7f:f4:66:fc:8d:3f:b5:a0:54:2c:e7:c9:
         ea:7e:e3:3b:27:fa:9c:1d:20:e6:cc:92:20:9b:ef:9b:b3:67:
         79:83:ac:3d:3b:a2:dd:0e:17:4c:67:8d:48:0e:a3:b3:47:0d:
         6b:38:18:4b:e3:d1:97:77:b8:49:11:de:77:13:60:b7:62:0c:
         b3:62:78:c2:d5:84:af:fc:a2:bd:9b:34:2d:d1:23:a9:b7:b6:
         cc:5d:9e:f5:30:08:37:19:11:be:d2:53:64:41:9b:6c:18:23:
         b0:05:31:a9:52:5c:18:ec:c7:a4:13:ce:df:ab:03:e5:1a:e3:
         24:cd:98:9e:2f:f1:4b:ac:05:0f:1b:31:6b:f5:eb:1f:ee:9e:
         13:b6:37:2f:dd:54:05:3b:a2:f6:ef:f2:c0:87:6e:c3:b8:be:
         87:b4:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:12:59 2025 by rpki-client