This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File:                     hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier:          hjx32XvC3FLjfwalNhjaMtMGl3H7ftEKuD0RKZ9tde4=
Subject key identifier:   89:3A:0E:8A:74:ED:D9:54:E8:DD:B5:40:51:9C:C4:40:74:9A:E3:02
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer:       /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial:       019AF19B6FBF0977FE3D55BFCA1D4B4AD2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number:          15F8
Signing time:             Sat 06 Dec 2025 03:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:26 +0000
Files and hashes:         1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
                          2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
                          3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: XXeadpV3XbpF/VxfzcAtvtzUvIYqFO4GIXg4YvXrJYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:6f:bf:09:77:fe:3d:55:bf:ca:1d:4b:4a:d2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
        Validity
            Not Before: Dec  6 03:01:26 2025 GMT
            Not After : Dec  7 03:01:26 2025 GMT
        Subject: CN=893a0e8a74edd954e8ddb540519cc440749ae302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:9a:39:14:bf:7b:ce:33:de:b0:0c:1b:71:
                    d9:6d:c0:b0:e0:09:61:9b:9a:82:2b:bd:2b:80:67:
                    0c:12:c7:fe:de:54:73:8a:2e:3b:23:55:0b:fd:1f:
                    c5:fb:7c:c2:d5:6b:58:e0:0a:b4:72:8e:86:22:1e:
                    01:7d:4a:5b:23:61:65:e4:1e:f2:4f:0b:12:cd:fe:
                    40:2e:c2:34:e9:87:e8:5d:db:94:c2:8a:36:d5:ce:
                    3c:51:4f:12:d5:61:ec:31:77:8e:6e:a1:fc:84:2e:
                    b6:ac:49:10:58:71:9e:e4:c2:0e:5e:7e:fa:41:12:
                    90:c3:45:8c:95:da:ea:fb:c7:c2:ec:ae:b8:5d:3e:
                    08:7e:fc:38:ba:c2:ea:17:13:a5:89:d4:90:ce:23:
                    45:80:84:cc:67:0e:1a:43:5b:79:11:68:01:d8:a6:
                    4d:7d:fa:45:0f:af:f1:d5:00:f9:08:d9:a9:d9:1b:
                    a0:12:3d:4d:17:f1:8e:9f:a1:31:eb:d6:f0:d5:eb:
                    2c:fa:05:c5:d8:7a:43:b8:02:11:f1:cf:81:92:f1:
                    d0:05:19:06:e4:7c:a4:5f:71:5f:7a:ef:20:87:34:
                    44:aa:ea:fa:13:2e:5d:04:3e:16:b4:69:52:2d:3a:
                    b0:a3:da:68:3b:04:2b:a0:a8:d4:c5:8c:37:e2:29:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:0E:8A:74:ED:D9:54:E8:DD:B5:40:51:9C:C4:40:74:9A:E3:02
            X509v3 Authority Key Identifier:
                keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:70:6d:e8:83:9d:1a:ca:52:90:c6:ed:ee:b4:f5:41:79:
         2d:63:38:19:bf:eb:88:c7:d7:d0:98:51:49:02:00:32:c0:ac:
         43:5c:03:9a:b0:24:e0:58:39:ae:de:ae:ee:91:4c:8c:f6:51:
         b0:b4:20:ec:87:31:36:0a:fd:18:93:76:04:b5:60:f9:e4:2a:
         fb:7f:74:28:49:23:e2:7c:42:19:62:58:95:4f:f7:2e:3b:41:
         21:66:a2:0f:1d:0c:8a:6c:68:b6:ae:60:78:94:12:5a:49:8b:
         4a:43:32:7b:1b:17:b5:36:d3:3e:9b:29:13:41:a4:65:e4:cc:
         7e:13:73:a1:99:e4:6c:80:53:b4:cb:ac:09:a2:9a:cb:48:d7:
         ac:87:bc:cf:75:c4:48:c3:be:23:89:b9:c4:ce:9b:ad:1a:26:
         2d:d7:c5:34:55:75:2e:99:91:96:81:50:a3:84:b0:70:0e:99:
         c1:fe:27:1c:9c:e2:79:43:97:0f:83:35:2d:89:2d:9b:2a:98:
         30:40:19:7b:ab:6f:28:37:18:c4:e2:74:24:2c:88:28:62:9e:
         e3:a9:49:da:a1:8d:76:67:0c:2b:e7:f1:17:0d:2d:83:c2:fe:
         6b:33:f9:fd:e6:c6:d5:96:a4:82:4d:5a:c3:72:d9:cb:bf:e7:
         2c:24:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:58 2025 by rpki-client