This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File:                     0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier:          4m9E+57NTwRHLgHuw504sG2VFQ5l0JX43tthiOAlQ7c=
Subject key identifier:   4C:35:A1:D8:79:24:7D:69:DC:67:94:2C:CC:FD:40:B5:3E:EA:C6:8C
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer:       /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial:       019AF0513EE21AAA6177F3DCCF00656E2A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number:          0B65
Signing time:             Fri 05 Dec 2025 21:00:47 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:47 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:47 +0000
Files and hashes:         1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: 7BPIoGx9wOm4jO4a2Z6GzhGUJPH3asaEXawv9KnMQHU=)
                          2: V1kohq7P4ydapDB7EU11fRLeRUg.roa (hash: TxOniEW/xxFZY5KmO7UC+sdZGH0WDC/W/Livh3vHUfw=)
                          3: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:3e:e2:1a:aa:61:77:f3:dc:cf:00:65:6e:2a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
        Validity
            Not Before: Dec  5 21:00:47 2025 GMT
            Not After : Dec  6 21:00:47 2025 GMT
        Subject: CN=4c35a1d879247d69dc67942cccfd40b53eeac68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:84:5c:f3:08:e4:63:74:10:a9:8d:a0:6e:
                    2f:7f:a6:00:b5:a2:24:28:30:93:83:4e:d9:d7:75:
                    75:04:b8:e6:60:dd:ab:18:79:8d:68:eb:a3:1d:24:
                    e6:46:f1:f5:96:aa:d8:d0:71:3c:a5:c1:5b:4c:a4:
                    4a:b7:89:a6:77:ec:ab:cd:f9:6c:72:9f:61:49:87:
                    3e:e9:8a:3d:be:f4:07:34:3e:4b:e6:a2:ff:b0:36:
                    0e:52:29:57:39:66:73:54:20:9f:db:4a:e0:3d:73:
                    11:e0:4b:33:e7:a5:4a:97:f7:9d:0b:42:96:a4:12:
                    88:c0:a6:2c:ca:a4:2a:f7:c7:62:69:66:5e:b5:7e:
                    e5:51:3c:61:c2:02:49:71:bd:88:ba:eb:7d:f7:98:
                    d6:0d:f3:39:49:20:5f:69:1d:9f:6c:ca:3d:77:59:
                    c0:9c:53:a3:d4:33:06:52:a5:ba:cf:bc:c8:b9:4c:
                    d8:de:1c:77:b3:0c:ce:d1:c6:f2:62:bc:90:73:3b:
                    09:b4:ba:d7:e0:b7:ff:76:4a:b4:f6:e9:dd:36:97:
                    1a:cc:47:1a:42:75:98:3b:55:4c:98:2d:13:4e:1b:
                    4f:b2:42:00:8b:b1:1c:3a:b9:bc:69:72:6e:e6:8d:
                    8b:f1:56:ac:66:4c:57:d7:55:79:ae:d4:2b:ee:cb:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:35:A1:D8:79:24:7D:69:DC:67:94:2C:CC:FD:40:B5:3E:EA:C6:8C
            X509v3 Authority Key Identifier:
                keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:16:d4:0c:a1:af:5f:98:4f:56:65:b3:53:d6:4e:2d:0f:7d:
         4a:59:93:2c:b7:67:0f:3f:0f:27:54:57:0f:a9:19:97:c8:a7:
         1c:e6:b3:0f:8c:96:34:0a:cd:38:1d:a3:ec:b6:2b:e6:56:91:
         3f:ef:83:f8:92:9e:79:a2:87:4e:9f:aa:8d:f5:e7:c6:0e:18:
         ae:af:b4:9c:e7:d0:6c:44:dc:53:24:6b:d5:e0:a3:1b:ff:31:
         a8:6b:7c:26:25:27:3a:04:7d:d9:c6:1d:d1:3e:c6:3b:d1:b5:
         06:33:ad:46:ba:2f:ad:ad:d2:33:65:c3:38:dd:4f:10:0a:25:
         f0:8b:02:c9:5e:ae:db:0a:07:fc:5c:7a:31:ed:fc:09:0c:01:
         e1:21:a3:f8:92:63:d8:e8:2f:1f:13:6c:e7:e7:32:df:62:85:
         d2:bd:af:04:75:94:0d:39:a6:38:5c:60:2b:71:28:a2:c6:fe:
         65:b5:57:9d:a1:ab:31:ea:ab:4f:41:bb:d5:ba:25:cd:b4:f3:
         e7:9a:d4:43:b7:e4:1c:7a:43:40:ea:f6:01:ff:b7:9a:20:67:
         cf:3b:8c:0e:27:d8:88:6e:ae:1a:4e:da:3f:df:b6:10:25:9b:
         5e:2c:e6:fd:8b:4b:26:ff:16:f9:e3:ba:ff:62:ba:66:bb:a7:
         28:e4:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:38 2025 by rpki-client