This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File:                     mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier:          8ROl5NQJCDFf+wWwRoyPXOUPTy70AutZFS1xwnwS/NM=
Subject key identifier:   6E:C1:DF:16:C1:E6:4A:7C:88:63:76:0C:55:F1:40:DC:8D:C1:2F:68
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer:       /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial:       019AF1D200A9B382437B097E7141F160E2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number:          16F4
Signing time:             Sat 06 Dec 2025 04:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:03 +0000
Files and hashes:         1: 0vdRQP6oDKbrt2AMFylSvIwqIyg.roa (hash: pxwOPSpkw+fKuyNlbzf40gyqoMu+x6ekO7hHtNoYIH4=)
                          2: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=)
                          3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 2AnFaVudoUfeVqgJLe1Dh3gCb/S85IEfGZrUrVjUEk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:00:a9:b3:82:43:7b:09:7e:71:41:f1:60:e2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
        Validity
            Not Before: Dec  6 04:01:03 2025 GMT
            Not After : Dec  7 04:01:03 2025 GMT
        Subject: CN=6ec1df16c1e64a7c8863760c55f140dc8dc12f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:67:e5:d1:82:36:ad:22:c8:79:e7:c5:91:c8:
                    bc:a4:fb:15:fb:06:02:1d:b4:b7:81:06:b7:30:0d:
                    9b:f0:4a:51:13:38:9c:08:d2:4e:c0:e8:0e:d3:58:
                    ce:5d:a2:ed:c0:64:24:a1:61:5e:cf:21:d0:c4:e9:
                    a4:75:2f:59:ed:61:97:a8:22:b3:a5:0f:bc:80:ae:
                    96:85:16:e2:6a:cf:e1:28:55:f5:ba:53:73:68:79:
                    5f:f5:48:d9:a4:d6:3a:df:fd:57:56:65:fc:bc:27:
                    81:62:3f:5f:e0:f4:eb:17:af:6c:9a:1b:b7:d8:f6:
                    bf:c7:2b:a0:cb:5e:a2:74:89:0f:ae:60:95:53:dd:
                    7f:3b:9a:72:9c:63:00:84:3f:4c:ed:44:eb:76:68:
                    d3:5e:51:29:80:29:a2:bb:85:13:e6:05:45:ef:7d:
                    df:b1:13:5e:de:b6:03:8a:a3:73:47:9a:3c:40:25:
                    96:d5:22:93:5a:cb:c6:25:30:c1:9b:1f:32:ae:3a:
                    2f:1b:f6:d6:7c:4a:fc:ca:25:29:7a:18:d7:bf:72:
                    b5:84:ee:79:77:82:99:c9:66:cb:55:1f:a2:00:39:
                    b8:79:de:f6:d1:03:9f:31:77:64:78:4b:df:b0:7f:
                    63:54:5b:d0:1a:cf:cc:6f:6d:1d:74:62:a2:1f:51:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C1:DF:16:C1:E6:4A:7C:88:63:76:0C:55:F1:40:DC:8D:C1:2F:68
            X509v3 Authority Key Identifier:
                keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:44:a4:5e:68:f9:67:3e:10:82:7c:d5:15:d5:20:35:b6:07:
         b2:f9:57:03:de:b2:6d:1c:e7:9c:8c:06:9e:15:7c:44:5b:8c:
         4a:b5:2c:24:96:cf:0c:83:df:35:cb:e3:1f:4b:f3:97:2f:40:
         37:0c:c7:9f:10:29:2f:f8:59:22:62:f0:eb:5f:c8:4e:1b:9c:
         9b:f7:eb:33:5f:00:2c:a7:cc:ff:64:64:59:4f:62:97:0d:26:
         2a:55:51:b3:93:fe:ec:f0:16:21:c7:61:c0:d7:74:ef:ab:2f:
         81:e2:a4:c5:31:9b:88:83:55:1d:94:89:67:87:45:11:12:9d:
         11:83:e9:d5:19:81:79:d1:66:14:41:a1:a6:ee:40:7d:f2:48:
         5e:df:34:0a:62:4f:4f:3f:ba:f6:53:17:fc:2c:fa:33:7c:15:
         a8:fb:71:cd:fd:a5:bc:81:f3:8d:a4:bc:91:a9:d1:a6:fd:29:
         25:e6:05:42:c1:25:d8:ef:cc:fa:5b:07:0b:bb:7e:7b:93:f8:
         86:98:6f:47:3b:7d:76:ec:ad:18:5f:d7:0b:0e:a7:ed:83:b7:
         59:e2:67:74:65:1e:db:ea:69:96:7d:95:8b:a9:bd:f9:11:db:
         b2:23:90:c7:f6:78:df:ca:60:2f:8f:7a:0c:64:c2:cf:25:1d:
         48:ac:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:26 2025 by rpki-client