This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File:                     9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier:          mjvm4S7ShidE5V+S++S+rw4MjpJ1poIzcj3IlDQYioU=
Subject key identifier:   7A:94:32:80:9D:0C:9E:F5:18:C1:A9:B3:A1:9C:F0:D8:AD:8C:9B:32
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer:       /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial:       019AF352BB4651973D218BD4DF85ED33564F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number:          0C7E
Signing time:             Sat 06 Dec 2025 11:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:16 +0000
Files and hashes:         1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: dtIt0ZXLBdhxTMEVIaq7taS/uwUuRE7hqeMbnVjgPMc=)
                          2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
                          3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:bb:46:51:97:3d:21:8b:d4:df:85:ed:33:56:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
        Validity
            Not Before: Dec  6 11:01:16 2025 GMT
            Not After : Dec  7 11:01:16 2025 GMT
        Subject: CN=7a9432809d0c9ef518c1a9b3a19cf0d8ad8c9b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:8c:94:4f:40:9d:2a:9d:c8:6c:69:d6:17:
                    4b:c4:ed:6a:64:63:76:ab:7d:95:a5:b5:3a:5a:af:
                    9c:61:57:1e:11:c3:77:5c:c7:4b:c9:da:81:b6:5b:
                    22:37:95:47:76:0f:42:f0:57:bc:45:5a:fa:88:3c:
                    05:88:a9:18:b6:16:ee:94:1f:f1:70:95:4e:03:a8:
                    81:fb:07:76:1d:bd:33:45:a6:58:a9:a3:25:a1:f8:
                    7c:0c:c1:ac:4b:08:a1:65:41:70:79:53:a3:04:85:
                    c4:d6:25:91:39:cb:6f:6d:5d:13:01:e7:aa:f9:dc:
                    07:85:0e:52:c8:36:26:92:26:ae:87:f4:37:b6:8a:
                    8c:6f:66:fc:3e:fd:b8:30:58:a0:52:74:11:2a:13:
                    cf:92:83:69:68:9c:47:df:69:e2:63:6c:24:aa:df:
                    b9:3e:48:fc:c1:46:0c:8c:d1:f1:32:ec:c7:81:b9:
                    d8:6d:0b:76:68:dc:c7:6b:31:11:0e:71:20:ea:31:
                    d8:79:af:4e:93:f8:d7:3b:14:a3:99:01:28:8b:59:
                    3d:94:7c:d4:b0:3c:80:3f:bd:0b:31:6f:ce:61:a9:
                    12:86:9a:e6:22:69:f6:2f:bc:f4:bb:e1:64:32:7d:
                    4a:5b:c0:27:ba:7c:ee:ba:bc:f3:58:1d:3e:b6:26:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:32:80:9D:0C:9E:F5:18:C1:A9:B3:A1:9C:F0:D8:AD:8C:9B:32
            X509v3 Authority Key Identifier:
                keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:9a:57:eb:29:06:cd:f0:d3:37:99:2c:e0:06:96:9e:0c:
         1b:bd:9a:b8:f0:6b:d1:1e:4f:3a:e3:92:c3:cc:7b:d2:0c:3d:
         6b:31:a5:27:ae:f3:3a:d3:cd:06:5d:7a:fd:41:85:52:ad:fa:
         38:17:2c:dc:4c:60:bd:13:18:13:a4:8e:c7:b0:ee:ed:28:5e:
         24:4b:6c:30:32:d8:62:d6:26:a7:7a:5f:8f:c6:36:3b:9e:ed:
         48:6c:83:55:47:49:7c:61:e4:26:65:01:d7:04:16:a5:6f:ae:
         69:eb:93:0d:4e:23:f6:a9:40:f9:d7:19:41:cc:34:93:e8:fd:
         c8:45:b6:e6:9f:e0:3a:3d:a1:4c:f6:02:7f:dd:72:7a:e3:b0:
         1e:9a:60:c0:f3:46:25:b4:5f:27:a7:5a:bf:9e:17:7d:58:5b:
         a8:2d:7e:de:b9:2d:41:ac:27:a2:1d:cd:9c:8d:e8:3c:c7:d0:
         20:b0:de:59:87:5f:13:6f:ca:e4:34:29:58:b8:a6:87:8f:c8:
         3d:3d:dc:4a:f3:6c:ab:83:8e:8a:43:48:0a:dc:96:20:dd:16:
         f5:90:1c:96:16:f5:ed:c3:39:83:12:92:ab:f5:11:06:52:69:
         22:61:b4:53:2c:3c:6c:a0:2e:63:70:67:01:d7:a1:47:52:e6:
         ae:bb:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:59:48 2025 by rpki-client