This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File:                     TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier:          csIjN4vJCHRtNoBothoXpaC8dbTz06DZBAS7PdFCA4Q=
Subject key identifier:   C8:EC:CC:61:0B:80:29:0E:00:41:79:E1:94:CC:5A:1E:2C:FE:B4:A6
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer:       /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial:       019AF12CC893A806D8E9F3CDF611B310575D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:35 +0000
Files and hashes:         1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
                          2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
                          3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: 5ogwcqbE1Kt6sZNzYjCnd5oCgjtbX6czj2OaKY2wt+A=)
                          4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:c8:93:a8:06:d8:e9:f3:cd:f6:11:b3:10:57:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
        Validity
            Not Before: Dec  6 01:00:35 2025 GMT
            Not After : Dec  7 01:00:35 2025 GMT
        Subject: CN=c8eccc610b80290e004179e194cc5a1e2cfeb4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:5a:2a:c0:e9:64:30:35:aa:58:f5:63:d4:
                    6e:54:a1:40:c0:b1:e9:d7:d2:78:66:85:b6:2b:06:
                    35:62:a4:d4:e1:c9:7a:32:62:62:16:03:b5:0f:37:
                    16:07:e9:2b:72:34:a4:25:ae:15:32:29:a4:ce:f4:
                    e5:c6:41:5a:c3:11:d5:c6:0b:a4:d1:a7:c6:b1:c2:
                    72:85:14:0d:7a:5c:0d:c1:05:4d:6a:35:b0:38:e5:
                    76:f5:5a:a3:d4:59:c9:d6:39:ba:e2:f6:cf:cf:27:
                    83:fd:e1:c7:c4:32:4c:28:77:2b:46:d3:98:61:2e:
                    41:27:8c:9a:30:75:34:7e:32:2f:e0:74:d7:5b:ed:
                    3b:17:a1:e4:6d:36:15:90:a4:40:8e:b3:76:12:7c:
                    40:5c:3a:50:ee:b4:30:70:da:0d:09:80:8f:11:7e:
                    40:a0:26:2f:81:18:b1:0c:e6:69:16:11:c2:42:18:
                    fc:12:cd:f3:d6:05:7b:22:47:e6:e5:5e:e1:ca:44:
                    c6:bb:00:82:20:dc:66:36:5b:41:01:78:35:d3:7a:
                    64:0c:5e:75:47:a1:68:75:e3:99:a8:ad:54:26:ce:
                    2c:a0:29:ef:77:be:fd:42:d3:9a:24:74:3c:de:ef:
                    5e:a8:66:ec:23:b8:1b:ab:80:7d:6f:9c:45:a4:db:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:CC:61:0B:80:29:0E:00:41:79:E1:94:CC:5A:1E:2C:FE:B4:A6
            X509v3 Authority Key Identifier:
                keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:08:be:b9:79:1f:7f:48:a2:a5:06:67:a3:d6:a7:36:42:
         99:8c:bf:be:c1:c5:7b:f4:37:92:34:62:35:b1:eb:bf:f1:c8:
         af:60:3e:99:03:fe:2c:4b:3e:83:62:55:7a:75:eb:9a:37:4a:
         c3:83:01:03:9b:34:88:82:1c:c7:5f:d3:29:ec:d3:66:c7:55:
         0d:17:df:8e:1a:bf:29:46:10:a1:ad:80:46:53:6d:21:e2:94:
         61:ed:a2:d9:0f:7b:a8:85:f9:13:9c:95:06:19:0d:40:47:cf:
         ea:80:3b:ed:45:05:53:cd:be:3d:79:3b:9b:cf:b4:97:6d:61:
         00:a0:07:12:de:4b:9a:cc:09:90:7e:e7:f9:e2:51:f9:bc:58:
         f5:30:70:c1:e1:b9:fe:ae:b3:fb:fb:c6:97:cb:f6:b9:17:b3:
         b9:f9:c2:94:3d:4f:55:93:c9:c0:a2:55:b2:c4:5d:44:ae:a8:
         f4:b5:fe:b9:70:ad:93:3a:d0:de:64:71:a9:a2:b8:7e:1d:fa:
         ff:b7:81:d7:1a:59:3c:e2:51:78:a0:b6:9a:23:64:de:7d:30:
         da:45:6b:5a:93:70:a3:2b:e5:76:37:1e:d4:52:ec:04:ed:90:
         49:c4:9d:0a:40:cf:0f:00:60:72:08:0a:d9:2c:cc:00:1c:ea:
         4f:1f:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:57 2025 by rpki-client