This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          dcbQBbNCv53xHxWN+l8H289BrbvrfhLfo0EAZgM085I=
Subject key identifier:   CA:16:9A:2B:5D:D7:44:B4:BA:CF:C5:CF:5B:7B:B3:E4:5A:6D:33:64
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019AF42E19F3AB0218B3EBCE5270A6480DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 15:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:53 +0000
Files and hashes:         1: 8s9AQh9G6fVBfnNbnVmZTqXsuwg.roa (hash: 7Lq9v+syjN0uylqG5ZKh6ZFMzZAMtKjXsvWJlQW3WqE=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: a3p0wFFnJ1qLu7p6asjuPnks7XsAIsI3F4gWiA/GCfM=)
                          3: Co6zif6CgWxRVPx-_ozSij8EWsM.roa (hash: tL4rizo5edxFSlgftU4orevud41ccjdavnz1fdBIeh8=)
                          4: FACURSdoz5OXAwHWNlnhNICg9F0.roa (hash: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=)
                          5: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (hash: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=)
                          6: LbBUCL65r2B63EtnXKf7awdkLYs.roa (hash: 2aoR9do7AfxOMNUBvut0kk7xNv4cPQ2DW93XsHzKCbI=)
                          7: sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (hash: Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:19:f3:ab:02:18:b3:eb:ce:52:70:a6:48:0d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Dec  6 15:00:53 2025 GMT
            Not After : Dec  7 15:00:53 2025 GMT
        Subject: CN=ca169a2b5dd744b4bacfc5cf5b7bb3e45a6d3364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:8d:fe:df:39:f5:9c:15:42:d0:04:0a:67:
                    bd:62:20:3b:b0:2c:d4:8b:2e:21:47:4c:c4:91:c0:
                    e4:9e:c3:95:07:dd:72:c3:f5:79:89:9e:0d:a9:3e:
                    5a:3c:bc:5c:8a:ab:1b:71:63:a6:e7:7f:98:d7:2b:
                    3d:51:31:a0:fa:bb:39:3c:02:a6:d3:cc:bd:27:52:
                    ae:93:cd:04:c2:f9:0e:17:55:04:21:db:35:d1:91:
                    f8:13:36:14:42:cc:f0:13:f2:b2:66:0a:12:8b:1e:
                    ad:55:b0:af:97:81:23:c1:73:08:b3:0e:0b:08:7f:
                    f7:4f:06:18:b3:df:7b:f2:64:c9:38:dc:81:5c:ed:
                    ac:28:be:56:f7:63:5b:0a:60:15:f9:0c:c0:15:d7:
                    76:d7:3e:77:9a:66:62:8f:1d:2e:15:c5:1b:2a:6e:
                    a7:97:b6:74:43:ce:1a:3f:1c:d3:e2:a7:30:7f:2a:
                    74:d4:89:14:6c:6d:60:97:b9:28:28:d3:ca:e4:36:
                    5c:57:51:32:17:63:44:0b:d6:7f:21:02:09:23:87:
                    1a:da:43:3a:c4:f2:52:e3:4a:c9:c1:69:71:7e:92:
                    d5:a5:25:f4:07:1f:97:72:39:76:4c:17:7b:13:82:
                    c5:fa:08:31:13:f9:db:73:9b:c1:ae:74:8b:fb:d5:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:16:9A:2B:5D:D7:44:B4:BA:CF:C5:CF:5B:7B:B3:E4:5A:6D:33:64
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:a3:ba:19:84:ae:c2:b5:58:4e:3e:26:d0:4e:0a:bf:79:
         c1:db:10:09:37:39:77:02:74:02:b4:f3:b9:35:85:aa:b2:68:
         f2:ca:66:5c:b8:8f:21:b2:1b:ad:03:89:bc:db:a4:c0:a3:45:
         33:4c:35:7c:f4:f6:cd:2e:23:12:f9:b4:b2:e7:7e:4f:75:67:
         df:65:2c:de:35:83:50:78:ca:91:59:b9:e8:49:30:dc:4b:c4:
         35:51:fa:67:f8:6b:dd:f6:1f:44:5f:f5:6f:da:dc:05:dc:28:
         9c:bb:64:92:c7:67:6a:c3:59:73:f5:8d:88:a4:52:3f:b8:19:
         45:b7:30:fd:d9:61:84:02:20:6c:c3:06:45:fb:96:70:2a:2d:
         38:be:4f:b8:6d:8a:18:ba:c6:ba:6b:84:15:46:36:5b:39:6e:
         56:e5:22:cc:aa:17:cc:a8:3d:ae:af:40:91:90:17:f7:27:2d:
         f1:fb:56:56:39:00:0a:0b:e9:db:95:e0:e3:2f:6a:fc:e5:7c:
         29:01:44:d4:1a:d8:62:d4:f7:c0:97:f8:45:81:c6:ee:06:4b:
         16:e3:c3:b7:68:d4:4e:0f:77:4b:ca:eb:a5:1d:2d:69:8c:cc:
         04:77:02:65:db:73:b3:a1:c3:8d:4a:55:1e:21:bd:41:35:5a:
         10:75:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:48:29 2025 by rpki-client