This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File:                     tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier:          Gvlxevvqndch0R2wrnYLfTB3F3hek3wKTgskq//fmpc=
Subject key identifier:   BC:16:8F:7A:19:76:00:C0:91:66:10:00:46:CE:44:5B:66:50:8B:C3
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer:       /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial:       019AF208FF4A1213E18215695F2C1EC3BBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number:          0A02
Signing time:             Sat 06 Dec 2025 05:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:06 +0000
Files and hashes:         1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
                          2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
                          3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: MHQ6zvjQSRu20i6fgomo6lsSSXwxFviwRLSwqZQYaqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:ff:4a:12:13:e1:82:15:69:5f:2c:1e:c3:bb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
        Validity
            Not Before: Dec  6 05:01:06 2025 GMT
            Not After : Dec  7 05:01:06 2025 GMT
        Subject: CN=bc168f7a197600c09166100046ce445b66508bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:db:bd:33:40:ea:80:83:f3:c2:8e:cf:0c:
                    17:4a:d3:94:3c:dc:f6:a8:ae:cb:62:62:df:e0:52:
                    7a:63:30:97:c1:1f:7b:2d:cf:44:7e:73:11:fa:80:
                    c7:16:61:5d:3e:7a:48:97:85:29:ad:1b:ae:2a:3d:
                    dd:18:a5:0b:16:7f:54:62:25:5f:bd:95:cb:67:02:
                    85:1e:01:08:27:49:c2:6b:8a:ad:a8:99:34:33:7b:
                    ac:2a:a0:a0:ae:80:59:27:ae:47:19:e2:db:1a:88:
                    78:27:24:7f:fa:cb:6e:e8:24:62:cf:44:c6:38:6a:
                    e8:9e:5e:d6:a7:ba:24:6e:9e:64:bd:f8:f1:9c:aa:
                    54:73:fb:e3:37:43:d7:b9:d0:ce:11:14:94:d3:3c:
                    7c:63:74:2a:a2:90:27:94:1a:dd:60:ab:ce:00:fe:
                    36:9d:6f:0e:a2:2e:4e:18:57:d7:fd:8f:5b:8b:07:
                    f1:ad:0d:8a:04:79:35:57:88:1f:a5:f2:8c:42:f6:
                    b6:a8:0d:36:be:4f:13:d6:94:7b:e3:b5:4a:05:84:
                    bf:d8:c1:19:3a:19:23:12:88:c4:b3:0d:b3:01:65:
                    f2:b8:6c:d0:d5:62:8c:f8:b1:54:d2:98:e0:2d:71:
                    09:ba:8a:e7:37:52:40:d7:76:75:bd:2a:e4:52:c6:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:8F:7A:19:76:00:C0:91:66:10:00:46:CE:44:5B:66:50:8B:C3
            X509v3 Authority Key Identifier:
                keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e6:c3:f6:a3:fb:26:38:42:17:96:c6:2a:38:7e:57:e3:a5:
         55:0e:1f:66:6b:dc:39:ae:90:3d:1a:9d:cf:5c:1e:57:18:04:
         59:f4:11:9c:de:bc:46:29:ab:c2:3e:13:24:34:ba:1d:8b:d6:
         3a:e7:6e:bd:5e:c2:69:ea:d4:41:a1:ad:22:10:c3:c1:be:4e:
         fe:ee:c6:55:4f:67:3f:41:c5:5f:c6:39:aa:a8:b7:f5:6d:50:
         94:a7:9d:df:85:57:6f:d2:92:4e:34:d4:08:8d:93:22:93:b3:
         f1:37:4a:33:03:7f:bc:37:28:64:8e:28:65:42:2c:57:2f:97:
         cb:7e:bb:f3:0b:1e:0b:9d:19:de:d1:7c:12:e2:23:5e:b5:6d:
         d3:e9:db:27:e3:e4:71:1d:62:6f:fd:c7:65:2a:54:e4:1b:fa:
         d6:2c:48:60:7e:bc:0e:9e:d4:82:db:c0:ca:c3:66:d2:69:dd:
         a8:75:e2:23:d4:d3:65:e4:e8:c9:63:bf:9a:8c:30:6a:b8:b9:
         b8:25:35:86:46:c0:1b:0e:3c:74:b7:5c:31:12:e7:f2:39:54:
         7c:c2:3e:53:60:8b:e8:cc:49:1f:7d:60:c2:31:19:ce:0c:cb:
         9c:2e:36:6b:1f:c4:71:ae:54:45:0a:bc:cc:e9:f8:e3:4e:f0:
         6b:5f:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:07:14 2025 by rpki-client