This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File:                     N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier:          8vPFLzxfRBPBLF/KKXMKdfYsLhiuafBCb3lO8im86UY=
Subject key identifier:   3F:5F:F8:84:D2:AC:84:D6:A0:6F:11:F7:EC:87:24:D6:BD:5E:1A:E2
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer:       /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial:       019AF19B5535762608FCAAA5C33CC81D771D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number:          14AD
Signing time:             Sat 06 Dec 2025 03:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:20 +0000
Files and hashes:         1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
                          2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: TjMG3S35hPlnJZXaEVwiYlBbV3+vWnhitH+n/vWyToI=)
                          3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:55:35:76:26:08:fc:aa:a5:c3:3c:c8:1d:77:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
        Validity
            Not Before: Dec  6 03:01:20 2025 GMT
            Not After : Dec  7 03:01:20 2025 GMT
        Subject: CN=3f5ff884d2ac84d6a06f11f7ec8724d6bd5e1ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:f3:c8:18:de:03:11:50:59:7f:4a:05:d2:
                    11:93:9e:c0:1b:6d:04:78:7e:52:b2:dc:75:da:69:
                    3f:02:4e:d4:c9:e8:f3:89:26:81:29:5c:35:93:a8:
                    83:3a:8a:a7:54:a7:55:7e:90:bd:b5:6a:a7:09:44:
                    3a:68:34:f7:0b:c8:ad:ce:44:b1:ed:01:7a:2e:a4:
                    ad:46:3e:ba:0f:20:35:19:e2:ac:f7:17:f8:40:6b:
                    6d:29:36:be:1b:0b:53:ae:67:a0:1a:85:58:99:52:
                    cf:b2:a3:2e:02:d9:56:50:b1:07:54:78:d8:0e:93:
                    ed:f5:4a:51:d8:b5:38:61:69:c9:5a:7d:91:94:61:
                    63:b0:d3:0f:9f:70:eb:e0:c3:8f:87:ca:b4:b1:77:
                    2d:52:23:d3:e3:38:5c:9f:7a:41:5d:a6:7f:4f:7b:
                    c8:bc:d6:7c:d9:10:9b:1c:1f:2e:df:8d:d8:8e:ea:
                    49:96:87:b9:41:4f:de:0e:6a:d1:b7:b6:4a:61:15:
                    94:20:48:ae:01:4f:72:6e:8b:e7:c4:75:c7:78:aa:
                    43:b4:ce:b0:73:9e:59:1c:37:f2:47:85:87:2b:c3:
                    56:c7:77:57:78:08:90:36:ac:ab:8d:f8:cb:31:08:
                    3c:b3:b6:b9:f6:b6:5b:a5:ef:ae:36:37:8e:d1:3a:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:F8:84:D2:AC:84:D6:A0:6F:11:F7:EC:87:24:D6:BD:5E:1A:E2
            X509v3 Authority Key Identifier:
                keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:85:42:9e:ce:65:e8:03:63:15:02:ff:a9:08:06:32:f9:
         8e:2d:f6:05:89:f9:90:ee:ee:83:7d:bc:ef:cd:07:11:be:4e:
         4c:51:34:1c:ab:d7:2a:78:be:78:96:76:a8:aa:3f:c8:eb:48:
         96:7d:7b:d4:d9:55:8a:d9:58:00:2b:a9:92:c3:07:81:af:ae:
         dc:c5:33:62:14:c6:86:4d:af:1b:7e:32:c5:fe:8b:4c:ff:24:
         13:e0:6c:5d:fc:12:0b:2d:5d:12:da:75:e4:33:ba:7f:3b:bf:
         db:9f:7f:ee:11:3b:7d:ab:58:7c:37:75:95:bf:a0:38:f8:47:
         43:b4:e5:04:a2:07:2c:81:b6:1a:ce:c4:a0:48:7e:6e:87:2e:
         5c:68:d5:12:82:2f:25:99:31:df:14:69:a8:94:43:cc:94:c8:
         87:46:0a:07:75:40:dd:06:f3:76:f0:9e:4b:af:ac:06:92:5e:
         15:28:41:51:a6:ba:c4:7d:ec:c7:be:34:f9:30:3a:91:59:36:
         89:0d:e8:1d:25:ac:cd:d1:a5:6d:48:7e:fc:69:1b:ec:43:47:
         e1:71:fc:3e:0a:8e:0e:48:4c:43:0e:ee:38:f6:4f:c5:1a:a0:
         12:4d:18:b7:05:8d:65:38:74:02:a8:41:01:cf:94:cc:55:3e:
         e1:96:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:28:50 2025 by rpki-client