This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          QqTsJi342jVWMpKD8u2I6fzg6JIj0jcJJnFiiB7baTc=
Subject key identifier:   2F:19:21:86:92:15:F1:91:E7:87:EB:F6:05:7E:7A:8D:72:84:C6:2F
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019AF3897A1BEBD59E08656AFECB0899FEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1221
Signing time:             Sat 06 Dec 2025 12:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:04 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 1jloxoHEBQse/qssJMg/l5cvJwL27xAPPTTG8MaGZR0=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:7a:1b:eb:d5:9e:08:65:6a:fe:cb:08:99:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Dec  6 12:01:04 2025 GMT
            Not After : Dec  7 12:01:04 2025 GMT
        Subject: CN=2f1921869215f191e787ebf6057e7a8d7284c62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:36:db:e2:ff:1e:08:cc:38:4d:97:cd:ba:
                    f1:31:f0:00:c5:01:e6:a1:12:24:55:af:b8:37:64:
                    2c:43:1d:ac:e8:4e:57:02:7f:31:e7:22:10:06:07:
                    5d:cc:16:6c:a3:3d:83:61:06:a8:03:2c:e9:91:34:
                    6d:f0:e8:de:be:8e:f4:58:ed:3c:67:43:58:2d:8e:
                    96:19:43:c0:df:72:f9:03:02:df:22:70:bf:e7:70:
                    ef:a4:2b:af:34:4f:58:2b:cb:e3:dd:5b:3d:d4:4b:
                    74:cf:f8:7e:60:b2:b6:83:8e:ae:bb:ce:c1:50:7b:
                    81:97:2a:48:4d:44:df:e0:42:02:83:9e:ca:fe:f3:
                    da:7c:7c:12:00:fa:c9:6e:1a:48:98:34:49:b2:db:
                    ae:a3:50:d6:4c:56:1a:78:95:5d:e3:9e:5d:aa:2a:
                    90:c2:dd:05:eb:3c:ab:f5:c6:54:18:95:35:89:f3:
                    2d:c9:ba:07:18:44:cf:f2:82:8d:4d:54:69:43:f9:
                    19:b6:9b:14:32:0d:cc:de:f4:2a:69:4b:ed:0d:63:
                    d8:1e:7d:d1:5c:6a:b9:a3:7f:dc:f1:a2:e9:95:5d:
                    a0:ed:f4:8e:eb:88:46:36:af:19:b3:91:69:7b:3e:
                    f1:5f:9a:7f:4d:51:77:7b:01:67:03:59:04:58:8b:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:21:86:92:15:F1:91:E7:87:EB:F6:05:7E:7A:8D:72:84:C6:2F
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:fd:40:0f:3e:8f:27:35:37:f4:9a:bf:d7:4c:ef:b2:2c:
         11:08:60:ad:20:34:0e:2e:bd:06:e1:3c:d5:1b:21:be:90:f0:
         1b:19:ed:8a:04:4e:ff:c5:23:2f:ba:e6:9f:6a:09:56:28:d4:
         ef:b8:e2:48:9f:a6:75:09:f4:98:10:95:87:7e:84:63:66:a2:
         7e:66:57:41:10:94:34:3f:76:4f:a1:99:8e:de:bb:9e:54:cc:
         8b:5b:91:99:d9:5d:b4:2a:fa:5e:e8:1f:d6:6e:97:7b:f3:2e:
         65:1b:37:e1:f5:ae:39:c9:4c:a9:e5:51:9d:f1:c7:cf:cb:ca:
         7c:17:6e:80:c7:4c:3d:a8:dd:b5:a4:2e:e1:9c:aa:43:90:9e:
         2c:9e:72:b6:33:b6:9c:81:ef:fc:90:61:8f:70:c2:1a:54:9e:
         89:9f:5f:d2:bb:39:5c:8b:f1:23:6e:a8:d4:6b:df:4e:1e:12:
         f9:f4:ec:eb:3d:28:98:73:4c:e3:60:c4:2c:49:26:d8:12:a6:
         4d:e3:d1:02:0e:9a:d4:90:ff:d6:2f:ef:ba:82:47:5e:0e:28:
         fb:cb:3f:ed:d1:14:3a:0e:55:ab:1c:75:30:dd:eb:27:96:52:
         a4:31:c3:5a:98:ef:ec:ad:11:e2:aa:ec:06:9f:c3:c1:d3:00:
         28:97:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:05 2025 by rpki-client