This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          vv0l/nZAy48wz/JsY9SlDHsX9JSmy6K+DZsWhIiuTIg=
Subject key identifier:   8C:96:E7:28:9D:93:D8:AB:4D:74:72:7C:2A:CF:B8:23:A1:75:3E:5C
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       019AF12EA54210109A2B8D35755D1CEC8A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          0A31
Signing time:             Sat 06 Dec 2025 01:02:37 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:37 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:37 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: 1Ix6xX179UW6VCUkrf0goGMg7cxya0K9jHJI8B7XGD8=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:a5:42:10:10:9a:2b:8d:35:75:5d:1c:ec:8a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Dec  6 01:02:37 2025 GMT
            Not After : Dec  7 01:02:37 2025 GMT
        Subject: CN=8c96e7289d93d8ab4d74727c2acfb823a1753e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:a7:d4:a3:da:87:ca:f7:57:c0:83:47:19:
                    e6:b9:3c:9c:42:7d:5d:35:71:71:93:dd:6a:f0:71:
                    8b:1a:a5:11:db:52:79:8d:9b:30:37:00:70:01:05:
                    2f:4e:24:55:f0:c6:c1:a7:df:6c:36:ec:8b:95:75:
                    d1:b2:a8:82:ae:f2:d5:42:db:49:6a:d4:90:d2:9b:
                    ac:ff:94:e5:82:af:2a:7c:1c:f2:b7:6d:be:f6:eb:
                    57:99:9b:5d:3b:b5:93:b3:ed:c7:ce:6f:8e:24:c6:
                    5e:05:d5:0f:5e:f7:c6:88:5d:e4:49:10:f1:06:f9:
                    7f:e6:c2:e1:26:52:bd:5d:39:d0:5a:ff:6b:76:b4:
                    3d:4a:91:5f:87:d3:0e:ae:d0:09:c9:39:d1:9a:77:
                    80:e0:79:08:71:01:6c:d5:1a:1a:6d:8e:b2:ad:77:
                    22:18:ad:5e:4f:70:72:f9:7d:52:3d:e0:8e:9c:b1:
                    24:18:fc:bd:4e:63:7d:16:af:3f:2b:06:fd:6e:8f:
                    15:f0:88:cc:e0:81:f4:2c:d0:0a:7b:77:73:ad:3f:
                    f5:32:1f:3b:21:e2:c7:b8:c8:05:2a:78:a2:cc:45:
                    31:95:a1:89:3e:4f:70:39:cc:cd:5b:d5:18:5a:0f:
                    ca:62:b8:86:df:e4:55:38:c7:f5:3a:f6:89:2b:f9:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:96:E7:28:9D:93:D8:AB:4D:74:72:7C:2A:CF:B8:23:A1:75:3E:5C
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:42:aa:be:45:c9:f9:66:db:2d:9d:73:70:87:9e:0f:99:
         db:11:a4:f8:df:e5:fb:77:0f:10:07:8a:7f:19:a2:cf:3d:a6:
         26:f5:ce:30:fc:1a:95:ee:d3:77:92:9a:cc:a4:b5:86:46:1c:
         79:d8:a7:38:c7:32:f6:e2:ef:63:99:82:2f:e4:c1:9f:84:7a:
         8a:80:1a:a8:83:13:d9:b8:4e:e3:00:16:1f:dc:50:4b:b0:98:
         04:f1:36:1d:da:97:97:a1:50:45:80:17:c7:da:dc:e1:e1:b1:
         60:78:b6:fa:13:01:0c:8f:7d:a4:df:c7:1a:78:81:90:55:ef:
         f9:89:ac:bb:18:a4:1b:e4:c4:8a:88:4c:ee:de:6f:3b:77:5a:
         7f:df:a5:6e:36:15:2e:f8:1f:2c:52:08:09:49:81:9a:26:d9:
         92:a2:ab:24:c3:b8:cb:13:d2:93:a1:56:cd:f6:3b:bc:ba:be:
         6d:d5:0f:78:1f:12:de:5b:5d:c3:d7:b9:71:0a:55:98:b9:59:
         1d:02:80:b3:90:36:a8:90:2e:f7:63:15:d4:eb:ab:59:30:9a:
         e7:9e:b6:d7:27:3b:96:ed:f4:b0:34:39:0a:43:e0:30:2c:41:
         b8:ad:6c:a7:8a:e8:e2:c0:da:b3:60:d8:a5:93:ed:62:ea:e1:
         f2:e9:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:10 2025 by rpki-client