This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File:                     39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier:          jI/9fhFfunCfptwa1du6TLNP++XIOP3X5+OwKycaJa0=
Subject key identifier:   7F:DC:8A:4D:9D:B7:54:FB:9D:A6:7E:D3:9F:F5:EF:62:6E:FF:9D:13
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer:       /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial:       019AF19B85062CF251181DFE6F6C2D9910CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number:          65
Signing time:             Sat 06 Dec 2025 03:01:32 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:32 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:32 +0000
Files and hashes:         1: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: e3+rYattuyITtEs2yL3wIxokCYjw61o3IQEFNJegrG0=)
                          2: FC0bdyuplJI1KGX4AfHE0Zx0LqE.roa (hash: ErGqRSFSyWBG0JZf35Cme2HC95smdmZ0LBiGyRvWJfo=)
                          3: Vs52J8_I6-6Ar4H7IoxIsedczaU.roa (hash: YX47Rdu8iskILAUdKTjD7fvWJ5LUe8zcxY/3psdpsYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:85:06:2c:f2:51:18:1d:fe:6f:6c:2d:99:10:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
        Validity
            Not Before: Dec  6 03:01:32 2025 GMT
            Not After : Dec  7 03:01:32 2025 GMT
        Subject: CN=7fdc8a4d9db754fb9da67ed39ff5ef626eff9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:99:b6:b9:68:0d:1c:84:cb:71:b0:da:dc:
                    a4:57:7c:da:0d:42:97:df:d9:45:c4:54:c1:07:fd:
                    61:45:89:09:73:d6:2d:f1:89:e4:dd:a9:26:20:b1:
                    53:ea:0f:da:5f:54:85:dd:e8:52:d0:b2:32:2c:94:
                    fa:ad:c5:6e:67:c2:bd:47:9f:86:71:f7:0d:c8:56:
                    c2:aa:f6:5a:f9:2a:92:37:24:9b:2c:47:2d:23:ff:
                    67:64:ff:8e:ec:91:79:72:07:c3:37:f0:9e:11:0a:
                    9b:09:0e:36:c8:ab:2a:ce:48:13:9e:7d:b1:7b:76:
                    40:f3:20:dc:19:79:25:0b:fb:22:03:a1:77:89:a3:
                    4a:09:33:77:5e:b9:d2:29:3f:fe:43:91:e5:37:c4:
                    17:67:41:6c:37:cd:d4:c4:c7:48:ac:0b:20:8c:47:
                    6b:7a:89:a2:0a:cc:d6:dc:a4:8e:22:aa:50:14:be:
                    00:ed:f1:f1:f0:b4:3a:91:eb:32:e8:98:b0:65:62:
                    28:c9:2d:10:98:55:4e:ba:f5:20:f1:4d:4a:1e:e3:
                    3f:b4:3a:a8:4c:0d:40:ec:3f:e5:0a:b4:a8:92:7e:
                    b7:06:5c:bc:da:a4:95:8b:cf:ec:37:5a:69:ae:e4:
                    92:ee:43:13:6a:c3:14:d4:85:b5:0c:10:85:0a:63:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:8A:4D:9D:B7:54:FB:9D:A6:7E:D3:9F:F5:EF:62:6E:FF:9D:13
            X509v3 Authority Key Identifier:
                keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:40:0c:70:e8:8c:3e:94:29:9d:b3:90:82:2e:dc:e9:c9:
         8e:59:b4:13:5a:a4:ef:f7:e8:b6:44:9a:1a:80:93:4b:e4:94:
         11:32:75:5a:80:8d:b6:56:c8:16:38:f2:85:9d:11:8b:16:5b:
         54:c6:de:d0:7c:83:49:e5:f7:73:b7:c9:86:80:cb:7a:16:84:
         9f:49:1b:03:07:bb:ab:26:28:ae:f8:be:c6:86:35:71:d6:c4:
         e4:ec:19:d1:b9:e3:bc:42:6b:da:61:6c:cb:9b:d3:4d:85:6d:
         db:d6:c6:70:b5:52:bf:21:99:21:9a:34:10:fd:b2:dc:77:73:
         42:f2:c5:27:41:af:cc:4d:19:43:58:a8:38:c9:48:28:96:8c:
         3a:3f:ce:5b:c1:6e:78:69:b7:9b:ab:83:64:3c:a4:2b:b0:2c:
         cc:52:35:f6:27:b5:81:5e:ac:f9:bb:c4:29:df:50:6d:fe:d9:
         1d:2a:92:56:2a:e7:16:fa:38:1f:40:0c:50:f0:0e:92:31:f7:
         8d:1b:73:ad:41:c0:b6:bf:68:06:25:69:40:b5:30:fa:fb:ab:
         82:9f:0d:a2:62:7b:16:52:0c:58:35:ff:fc:90:ab:bb:57:80:
         00:64:2f:04:a5:0f:4c:28:bf:f2:3f:92:46:10:63:a3:dd:79:
         59:63:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:41:42 2025 by rpki-client