This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          lMfSKS3qdtMjEWEJL137t3beUdLr0LsRp/nPF/lL96E=
Subject key identifier:   C2:FF:0C:93:CF:FA:A6:E1:81:1B:CC:C7:42:37:CF:4D:0D:D6:42:C8
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019AF42DF084267B277672B615A921E9F729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 15:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:42 +0000
Files and hashes:         1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
                          2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=)
                          3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: QLfXThyqyCsx5aeO3NsmSFLlEIof7APZIoBd4qaLjLY=)
                          4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:f0:84:26:7b:27:76:72:b6:15:a9:21:e9:f7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Dec  6 15:00:42 2025 GMT
            Not After : Dec  7 15:00:42 2025 GMT
        Subject: CN=c2ff0c93cffaa6e1811bccc74237cf4d0dd642c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:fe:80:01:cc:89:80:a2:84:cc:30:83:60:
                    4f:8c:a5:56:93:a2:bc:4b:f3:76:f4:c8:fe:cb:31:
                    d1:93:66:f4:45:da:c7:54:0d:2c:3f:a8:22:f1:01:
                    1d:a3:60:fd:cb:cb:38:0f:38:31:0b:d5:c0:45:4d:
                    12:e3:f9:5b:95:89:8b:98:f7:53:81:fd:49:da:f4:
                    2c:b4:be:c9:70:d1:2d:cf:59:c9:a8:30:e9:54:7f:
                    25:91:eb:20:89:d4:66:7c:22:c3:37:e6:f8:92:f1:
                    c9:82:07:0b:25:96:90:7f:d9:93:d6:da:4a:45:7d:
                    a0:c3:4f:cc:f7:21:14:18:97:14:46:6f:dd:7b:ff:
                    8f:15:c5:a9:3c:e8:c2:bf:42:c6:bd:22:cd:66:46:
                    04:c0:40:f0:a0:6b:ee:4f:7e:8e:d7:01:ee:33:18:
                    cc:5a:d7:3e:5c:54:9b:42:29:c0:a7:8b:36:3f:93:
                    bd:ff:e2:26:6c:f2:ac:9b:4c:23:62:b5:a8:1c:00:
                    be:eb:d4:c1:ab:0a:26:0e:82:f5:b3:be:e7:58:be:
                    35:b3:a6:0b:50:02:6b:2d:fd:5e:28:85:b5:70:ee:
                    90:d3:84:c1:a2:cb:3b:7b:e3:4a:de:d5:04:5f:7a:
                    18:83:ce:3f:a3:fe:3c:77:6c:a5:71:f1:0c:43:82:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FF:0C:93:CF:FA:A6:E1:81:1B:CC:C7:42:37:CF:4D:0D:D6:42:C8
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:89:21:dd:93:a0:8d:20:a7:36:61:f0:fc:34:ef:0c:19:86:
         b8:93:86:24:84:9f:2c:43:a9:7a:22:7d:f1:f6:d8:c6:23:0e:
         ca:57:dc:be:7d:7a:e8:2d:70:48:86:2d:51:d6:62:13:6b:5a:
         65:b7:27:ab:cd:81:0e:27:1c:d7:26:18:48:71:6d:3b:1a:27:
         d4:fb:ad:de:5a:8d:74:73:8a:7a:e1:97:23:47:0e:eb:b9:cb:
         61:5a:52:05:8e:58:0e:67:40:67:47:62:48:52:70:ac:d1:6c:
         44:e0:ef:92:f8:e7:a4:3c:3b:eb:b2:01:93:fd:7f:0e:1d:5a:
         90:98:96:7b:af:94:a9:5b:02:f3:31:a6:9e:58:80:7b:70:3f:
         8a:06:03:c1:04:4d:e5:f2:92:bd:29:93:f4:8e:dd:80:b8:cf:
         17:01:1a:2f:6e:be:72:bd:87:72:19:d1:a4:a3:9c:1d:15:90:
         1a:63:29:8a:1f:9e:62:05:84:f6:1a:69:e3:0c:e7:8d:f1:5a:
         fb:7a:0a:6f:f6:9b:64:4e:8b:27:99:3e:8e:22:ac:75:7a:9c:
         78:d2:ab:b6:a8:db:01:f5:32:89:10:a8:55:9d:a0:4d:e6:23:
         a4:95:8d:f3:e4:4c:b6:5d:ca:e5:23:45:ad:98:fe:53:e1:9b:
         15:ef:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:11:14 2025 by rpki-client