This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          7/JJHRTjIM7jUdZN7rIL+ycgI07EnKEAGNVaLgNnfeg=
Subject key identifier:   EB:A4:9E:F0:89:6D:28:5D:FC:93:EC:8F:97:A2:7E:16:D2:CF:FB:D7
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019AF19BB4DC51416A96FB1AC1E25F171495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0E47
Signing time:             Sat 06 Dec 2025 03:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:44 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: ZGIzjWm+JRG/hr+dWUFx+aGsLEdOeqpqDJeuPdh7mWc=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:b4:dc:51:41:6a:96:fb:1a:c1:e2:5f:17:14:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Dec  6 03:01:44 2025 GMT
            Not After : Dec  7 03:01:44 2025 GMT
        Subject: CN=eba49ef0896d285dfc93ec8f97a27e16d2cffbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:39:3c:d3:de:f7:63:53:27:75:b5:d5:2e:
                    ef:02:d6:bb:a7:11:48:da:6e:c1:eb:d1:b6:fd:4e:
                    8a:38:4a:22:e1:fe:a3:d0:94:71:1a:31:61:77:2d:
                    0a:6b:06:b5:e6:29:34:76:e1:5f:5b:a9:c0:17:d9:
                    ec:6b:cc:c2:8f:9e:67:13:72:ae:e7:07:3d:b8:30:
                    b5:7a:57:d4:8b:e4:39:39:31:b4:b6:3c:ca:59:9c:
                    08:68:fc:24:59:3c:60:8c:bb:e1:39:15:80:70:f6:
                    09:b1:43:b1:ca:ef:59:2d:69:35:cb:bf:b7:bc:46:
                    07:f5:fb:e8:30:12:ad:b0:2e:66:17:e7:9f:28:9d:
                    9b:49:12:5e:d5:c8:6a:4d:97:47:7d:86:8e:42:7e:
                    f6:0d:eb:4d:98:6b:fe:49:93:7d:d1:30:3d:99:ce:
                    18:90:48:35:70:32:1b:28:72:2e:94:ec:f7:19:45:
                    a7:0f:02:57:1b:3c:3a:20:9e:06:65:7c:05:9d:6d:
                    7a:21:05:a1:7b:45:4e:7c:78:18:2a:8b:00:a7:19:
                    1b:e1:e2:f2:6e:8b:34:b0:f8:b3:96:66:50:16:16:
                    44:1f:1b:66:11:c0:29:ca:dc:93:bd:ff:05:22:a6:
                    1f:e0:d0:64:05:45:b4:4b:b5:72:c8:90:be:f6:c2:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A4:9E:F0:89:6D:28:5D:FC:93:EC:8F:97:A2:7E:16:D2:CF:FB:D7
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:4b:3c:c2:8d:15:f0:0a:ad:10:b8:50:b8:2a:70:8e:0a:
         9e:ec:e0:fc:d9:fd:43:93:1c:a4:e6:f6:10:a5:b0:42:ec:ff:
         7b:3a:d0:c3:cc:b6:b0:c9:13:41:4d:0a:2e:c6:2b:f8:6c:3a:
         fa:cd:c9:bd:9d:5c:ba:bf:a0:de:a8:1f:2a:88:c3:e5:82:30:
         19:cf:a4:99:d8:78:85:19:00:c7:c4:3b:f7:d9:98:21:52:6d:
         a0:f1:7d:52:34:8e:e9:69:84:b1:16:a9:17:28:65:fe:ca:42:
         f2:98:27:b6:08:65:39:c9:ea:32:e9:35:6b:ab:3e:6d:2e:66:
         d9:b3:50:80:77:e7:48:d0:1d:63:7b:13:fe:42:8c:45:d8:e7:
         3d:f2:7c:3d:c0:74:85:68:05:08:a4:f3:c5:33:01:03:24:a2:
         94:55:79:a7:fb:db:9e:03:92:eb:7a:ef:43:6d:08:fe:90:42:
         22:5d:56:3f:43:21:91:55:82:38:ee:b6:8f:dc:3d:d4:46:a2:
         69:78:27:84:6c:9b:18:42:6a:6e:4e:52:af:81:25:7a:2a:5d:
         d0:6d:7d:1c:dd:4e:c9:50:8a:78:d6:33:df:50:68:ba:59:ca:
         f0:e0:c8:c2:8d:d4:73:f1:63:d7:68:7c:f4:e0:be:e1:60:ca:
         67:93:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:57 2025 by rpki-client