This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          5uZvfNxgtytGLLjKi/AV92ZhxivhpwVzz9GUgK+vI0E=
Subject key identifier:   7D:C5:8E:CF:A0:75:11:90:DD:F7:76:70:EC:B8:32:2A:C0:4A:45:7F
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       019AF2ADC7B86E0C141B4E1CCED360763D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          0474
Signing time:             Sat 06 Dec 2025 08:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:06 +0000
Files and hashes:         1: 0otNsOY2-Ux6_O9dO88zFay15wk.roa (hash: YBm2IMI2yhKvDThcZhxhu25xiNbRsmJYrGhGHOCFs7k=)
                          2: Em30JMreKh1DLV4bs3mOhdLf3qk.roa (hash: OikHlekzlibFoH4+uH6zYFGaEBbtczlB1ckRsntKVZk=)
                          3: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: Ik95usjfywNC7ERUjCGXGxe9oqRa5Nvf4WSDHOHBm6Q=)
                          4: lHWw85Q8Cuu7tX7YMNLW-E9Fc0Y.roa (hash: wW8GdjY9FtGYP5Szwbqv9xBcxFWdF7Bdg3LrkDc1uL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:c7:b8:6e:0c:14:1b:4e:1c:ce:d3:60:76:3d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Dec  6 08:01:06 2025 GMT
            Not After : Dec  7 08:01:06 2025 GMT
        Subject: CN=7dc58ecfa0751190ddf77670ecb8322ac04a457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:67:79:51:47:eb:57:d1:df:59:40:9f:5b:
                    c9:90:ff:29:54:3c:a8:8a:a6:78:34:5a:80:e9:f4:
                    eb:4f:5b:cb:ee:5c:13:79:57:f4:d4:a8:d5:85:f8:
                    4d:f2:a8:78:56:2f:58:a4:86:cd:8f:cd:4a:08:6b:
                    ea:ab:73:43:65:51:1d:e8:73:98:e4:45:90:b1:61:
                    4d:72:34:4c:f2:d6:9e:2f:a6:a0:3a:b5:b9:a8:b4:
                    fd:43:b5:24:f5:10:58:d8:78:68:8e:74:fb:59:1b:
                    5c:8d:3a:b8:27:9d:82:45:e1:0d:6c:1b:5b:8f:4d:
                    af:59:ce:3f:27:50:9b:ae:36:a3:31:e3:1c:ba:d2:
                    f1:1f:0e:1f:9c:39:83:2c:2d:f1:53:ac:28:07:fc:
                    5a:18:2c:c5:5f:38:2f:0d:a8:41:3c:9d:2c:01:a8:
                    c3:2a:e2:b5:2a:2b:ee:44:ba:79:9c:1e:9e:0d:d2:
                    c7:22:65:b1:f1:3d:35:89:63:36:1c:14:12:1a:95:
                    86:49:40:84:73:f9:a8:93:88:c8:e4:27:87:5b:47:
                    6d:6e:63:dd:f3:f7:de:11:18:e8:0a:d6:ac:9d:47:
                    16:78:ad:4c:d0:0a:41:c8:03:5c:70:9b:a0:a0:36:
                    d8:55:cd:d0:d9:2e:02:2f:6e:ab:a5:b7:93:56:50:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:8E:CF:A0:75:11:90:DD:F7:76:70:EC:B8:32:2A:C0:4A:45:7F
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:43:d9:e1:41:ed:a6:6b:fb:9d:2c:81:81:8d:3b:06:7a:38:
         80:e6:7a:e9:27:33:d8:03:c3:50:f6:5e:8f:ff:43:8f:58:77:
         ba:13:a4:6f:9e:92:9a:6f:28:9d:03:86:21:67:07:aa:34:53:
         09:ec:a9:c5:8c:a5:c3:86:d9:50:24:63:66:37:70:70:9c:20:
         61:1a:c2:51:34:9a:ac:15:69:30:5d:27:3f:3c:dd:09:b6:ad:
         72:e1:9f:cd:d2:39:34:2f:ce:92:a5:ea:9e:8e:1a:04:8f:fe:
         96:e3:94:89:2a:f7:da:d3:34:44:17:52:68:c9:d1:88:01:80:
         61:4e:c8:b7:9c:23:b6:fb:d6:bd:1d:c6:80:21:27:db:c5:55:
         f4:2b:20:1b:4c:d5:b3:8c:6a:02:06:56:f8:33:81:ee:17:ea:
         ae:3e:f9:db:dd:02:af:51:0e:26:d8:43:33:28:f9:5b:58:31:
         f4:b6:49:0d:fc:bb:ef:14:2a:00:28:22:52:bd:fc:63:85:eb:
         13:54:6e:cf:76:16:f8:f6:1a:e3:6e:34:43:f8:fa:20:23:8c:
         ab:af:a8:16:73:62:5c:3a:16:e5:93:a9:54:27:0e:ea:95:ba:
         66:7a:d7:f8:c6:2f:a2:d7:db:2f:85:18:06:2a:1d:73:55:e8:
         f1:6d:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:07:41 2025 by rpki-client