This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File:                     V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier:          Kydit/02RqIgS1uscErSs1afl9ylcOQ0WHUIMrIxvLM=
Subject key identifier:   89:D2:F2:98:30:81:A0:55:0E:04:47:0C:37:69:C3:3B:0A:50:72:5B
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer:       /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial:       019AF16479BB5F654319F415063188422AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number:          16F3
Signing time:             Sat 06 Dec 2025 02:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:24 +0000
Files and hashes:         1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: 0TRT5BMaDeuODtBWet7wHvswAlmaR14ikFG3/QLjOfQ=)
                          2: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (hash: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=)
                          3: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (hash: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:79:bb:5f:65:43:19:f4:15:06:31:88:42:2a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
        Validity
            Not Before: Dec  6 02:01:24 2025 GMT
            Not After : Dec  7 02:01:24 2025 GMT
        Subject: CN=89d2f2983081a0550e04470c3769c33b0a50725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:11:c4:6e:70:f1:02:0f:63:97:f5:c7:eb:
                    df:47:c3:53:eb:d5:33:a6:51:89:b3:72:88:a2:53:
                    d1:ce:08:57:9e:af:bc:91:69:8a:e9:e7:d2:b8:5c:
                    72:ec:37:41:13:39:51:b4:23:d0:b6:90:a6:18:c3:
                    88:5f:26:3a:e8:9e:e1:61:60:bf:89:77:55:81:09:
                    8b:66:b5:a7:40:4f:3d:d6:17:9b:ac:51:63:cf:cb:
                    8d:20:6c:22:9b:3f:7f:36:ca:89:ef:c6:e9:24:22:
                    67:56:52:54:e2:19:ca:1c:10:c6:f8:85:10:a9:a9:
                    6f:0b:a4:db:c7:8e:f1:87:a1:5b:5e:f7:7b:75:db:
                    a5:59:19:31:3c:b2:66:e5:05:70:a8:b9:e4:89:d0:
                    ca:49:ba:57:98:c9:cd:c4:b6:1e:b8:4a:44:63:78:
                    dc:71:d4:e9:5b:64:68:c9:19:02:f7:57:a8:0d:df:
                    70:52:a2:03:63:c0:17:fa:61:c0:08:74:6d:c9:f2:
                    9e:2f:fb:7e:3f:32:ea:f0:4c:8b:9f:b3:39:6d:22:
                    e5:96:41:10:7b:54:52:b6:65:86:b4:10:aa:a8:ce:
                    5d:7a:66:9e:a2:bd:35:9c:ba:2e:77:2b:de:c3:13:
                    e8:6f:af:ff:c6:df:77:6c:8a:76:29:20:0c:e0:fa:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:F2:98:30:81:A0:55:0E:04:47:0C:37:69:C3:3B:0A:50:72:5B
            X509v3 Authority Key Identifier:
                keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:fe:b2:eb:7f:58:42:d0:6b:3e:83:9b:c4:c4:c0:9e:97:
         ce:d9:49:5b:2a:c9:3e:92:68:48:76:ec:cd:2a:27:d1:8c:14:
         8d:46:33:4b:3b:74:4d:aa:c8:30:09:2e:44:03:37:fd:b9:ed:
         5d:ea:30:f8:70:b4:07:80:17:26:e1:4f:83:c1:72:89:a2:9b:
         a3:c4:a8:c6:d7:f0:c8:40:1f:d0:07:e8:cd:ab:e4:34:0e:42:
         0e:0e:e6:57:6c:45:20:ff:c7:46:97:d1:0a:bc:47:13:3a:98:
         10:1f:db:18:dc:a3:fe:3d:c3:fd:ee:93:b4:5e:03:d1:46:cc:
         fa:9c:33:69:78:32:95:76:76:bd:36:f6:61:db:a6:4c:25:02:
         11:23:eb:6d:37:e9:45:cc:90:d1:60:c1:bc:7e:84:9f:0a:df:
         59:52:8f:58:51:2f:41:c3:b0:d0:30:dc:af:63:b4:d9:5e:36:
         47:59:c1:e2:19:86:af:0c:0c:6d:ce:28:9d:0e:c7:0f:d2:91:
         40:44:e8:c5:9e:d8:ce:85:f0:e4:fe:da:60:a2:d3:89:50:60:
         7d:47:e5:f2:b2:3c:83:a7:5d:30:66:53:81:2d:fc:81:99:a1:
         c7:00:c7:25:3d:35:9c:1d:23:76:43:ad:5e:55:7b:6d:aa:3c:
         5e:65:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:10 2025 by rpki-client