This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File:                     POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier:          +Z5fhp9mwPRpR8Ogbtl8LVEa/plWqFIGqUdPVS12GPo=
Subject key identifier:   03:83:E1:9E:8B:EE:0E:12:2B:A3:4B:D8:96:1B:D7:1E:AF:D9:7D:2E
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer:       /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial:       019AF12CD302DD3BE50CD1A4FAC03B85F3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number:          0C0A
Signing time:             Sat 06 Dec 2025 01:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:37 +0000
Files and hashes:         1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
                          2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: pnKyzl+JhRdsGlMggroLZkkhxrLyOzB7laBilF+IIOc=)
                          3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:d3:02:dd:3b:e5:0c:d1:a4:fa:c0:3b:85:f3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
        Validity
            Not Before: Dec  6 01:00:37 2025 GMT
            Not After : Dec  7 01:00:37 2025 GMT
        Subject: CN=0383e19e8bee0e122ba34bd8961bd71eafd97d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:c2:98:35:60:25:d7:5e:4c:81:de:86:0b:
                    af:d2:d2:11:bf:01:b2:a9:1b:03:47:19:7e:ce:af:
                    c9:f8:23:c7:da:55:c6:f2:06:53:98:ec:75:c6:08:
                    94:78:15:1a:5f:66:0e:d4:72:b3:ab:79:b8:11:d4:
                    bb:65:5f:d5:c8:5f:8f:e0:15:68:7b:ce:9c:bf:26:
                    d4:63:05:54:35:ec:11:5b:d1:f6:d8:3a:bf:1d:3a:
                    c0:c7:38:fb:83:6d:dc:86:4a:a5:d9:5b:2a:93:fa:
                    98:b2:f2:18:26:93:e8:4c:c1:e6:b9:28:94:f5:6e:
                    0b:ba:93:a1:3c:a3:bb:17:10:47:d6:90:07:8b:f5:
                    1d:6e:46:ab:2e:59:fb:99:8f:ec:0e:b6:d2:41:46:
                    51:28:c3:a5:46:d9:de:5b:13:33:04:c0:62:9e:b8:
                    92:78:8d:4c:52:73:5c:45:11:cf:51:bf:7b:dc:b0:
                    42:ad:27:d0:38:99:64:9a:ff:83:6f:e6:00:10:37:
                    b4:e5:8b:7e:0a:e1:ce:fa:c4:ad:b7:a8:9e:ae:4a:
                    de:36:81:c0:64:2b:84:b3:93:d3:be:4d:28:0e:e2:
                    ff:80:18:cb:42:50:ca:85:50:55:2f:0f:cd:e8:a7:
                    16:f7:ca:93:fe:f4:99:2f:47:ff:3a:af:22:2e:14:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:83:E1:9E:8B:EE:0E:12:2B:A3:4B:D8:96:1B:D7:1E:AF:D9:7D:2E
            X509v3 Authority Key Identifier:
                keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:91:95:3a:af:ad:57:e5:9f:64:ef:1d:81:c4:af:2a:5e:
         93:42:64:fe:dc:c8:b8:98:7b:d7:e2:ae:68:dc:b8:fb:9e:82:
         c6:82:b4:b3:38:77:3e:1c:32:da:b1:c8:e7:4f:64:e6:3b:6a:
         7d:df:be:03:48:58:36:77:0f:b2:1d:c7:e5:62:19:91:b1:f2:
         64:80:73:fd:3b:f5:7e:9a:ff:00:ff:51:de:af:e9:1d:06:f8:
         c8:6e:1e:97:b7:71:2a:05:b2:d8:aa:2f:af:e2:56:bf:ba:6d:
         05:ee:74:83:43:72:f9:10:3e:ee:0f:54:30:46:a9:3b:25:d5:
         33:71:48:cb:4f:60:12:87:8b:6d:73:15:e0:84:b6:ec:52:9a:
         fd:e6:f1:79:bb:d4:42:39:a1:8e:47:cc:c4:a1:b4:26:9a:e9:
         24:86:fa:15:55:a6:5e:7f:9c:cc:62:07:5f:9b:4b:82:f4:c0:
         02:84:e0:6e:c3:82:b2:1f:94:21:da:b5:b5:bb:7c:ea:c3:a4:
         1c:1d:fd:93:72:54:98:7f:19:c1:52:7c:c4:af:a1:b8:eb:f7:
         9f:42:40:90:3c:ae:42:63:44:c3:0b:8c:30:15:5a:1e:08:7c:
         c8:07:1d:79:3d:fd:00:c9:0f:3d:f5:10:f0:16:3d:a3:20:9f:
         e7:50:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:46 2025 by rpki-client