This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          JRHfuqqll0Bl3G05zkGiQPYUQwakUPTwZGFeyBAnabY=
Subject key identifier:   3D:19:AC:F2:72:99:A5:1B:17:5B:FE:18:FE:2D:A5:E9:AC:B6:D0:EC
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       019AF540812DA10CFED67F17EE300F348BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          10F9
Signing time:             Sat 06 Dec 2025 20:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:36 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: L6LivwfPGqORwRFF3atvrZetONNN41ZY5EvdJPJLwi4=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:81:2d:a1:0c:fe:d6:7f:17:ee:30:0f:34:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Dec  6 20:00:36 2025 GMT
            Not After : Dec  7 20:00:36 2025 GMT
        Subject: CN=3d19acf27299a51b175bfe18fe2da5e9acb6d0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:a4:91:52:f8:d5:14:43:dd:0f:3b:a7:e1:
                    c7:b9:26:be:7c:72:2b:9e:df:43:06:6e:dc:16:d6:
                    7e:56:24:d4:b7:d1:7a:8f:88:7a:b9:a0:3d:92:ad:
                    75:bb:bb:29:04:c5:5a:13:3a:6c:84:50:fa:d0:6c:
                    71:e8:69:db:0b:1c:8c:d1:74:54:2d:10:9f:ab:f9:
                    d5:78:20:f0:e7:02:1d:97:b1:3c:5f:89:4b:f4:33:
                    0d:83:a4:88:52:bf:47:ee:d9:84:ea:21:6d:ac:15:
                    11:d9:ec:89:9f:be:2f:cf:7d:34:3d:23:77:80:41:
                    0e:26:24:ba:9b:ef:cb:b8:6c:21:90:62:11:dd:aa:
                    93:5e:5b:0b:b6:74:07:af:38:1c:39:e9:31:d7:d0:
                    d2:9d:98:2a:2e:d8:a1:bb:c1:fd:bf:45:23:61:07:
                    f9:7d:99:b7:43:ad:c0:38:b6:1b:52:01:92:66:e6:
                    f0:a6:d9:e4:18:c3:52:d7:bf:ad:ba:00:81:b5:48:
                    29:03:e3:de:5d:30:cf:6e:66:b7:4e:2e:a4:27:3b:
                    6d:47:e8:0b:f8:e8:9b:7d:0c:0b:41:39:da:b9:b3:
                    c7:75:39:4e:47:45:44:b4:36:bc:9e:6a:4c:f8:b9:
                    73:4c:31:78:b1:fe:04:5c:b3:dc:eb:4f:e4:65:f0:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:AC:F2:72:99:A5:1B:17:5B:FE:18:FE:2D:A5:E9:AC:B6:D0:EC
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:db:67:67:31:bb:24:07:5b:f0:e4:c9:5b:9c:03:81:c9:de:
         c8:c4:6d:c3:39:bc:41:59:cc:78:c0:4d:56:32:61:23:58:28:
         0a:a1:03:9b:52:d0:17:9c:7f:01:9a:ac:cc:72:77:05:28:e0:
         ba:cc:13:09:0d:73:7a:11:69:8b:f2:0c:02:86:08:e1:47:46:
         61:77:4f:13:cf:13:a4:a1:54:ca:57:8e:5b:55:72:50:99:3f:
         37:fe:c9:4e:3c:bb:d0:e8:46:82:77:64:1d:78:76:75:e5:d5:
         ee:20:25:6e:ea:5e:48:57:0a:be:3a:f1:de:4d:d3:71:0b:c4:
         1f:1f:33:bc:df:a0:1f:dd:25:89:94:10:6d:4e:c0:8a:14:9a:
         77:55:1a:ba:ba:46:8f:83:d2:f4:ac:93:ba:60:d0:1f:49:95:
         f0:1c:db:78:d3:da:bc:7a:ca:c8:2c:e0:f3:00:75:08:e7:76:
         a0:de:2f:89:85:70:68:10:52:a2:5a:a8:c2:45:a2:9d:0a:d7:
         47:10:14:3a:4c:84:47:01:7a:1c:4c:e1:1a:a3:fa:e6:c9:23:
         79:26:bb:a0:c7:76:38:a3:34:bc:1d:3d:da:cc:f4:4e:02:11:
         65:c7:fa:7a:39:fb:fb:18:d7:a0:8b:0a:2a:fa:76:67:2c:68:
         cf:53:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:05 2025 by rpki-client