This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File:                     TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier:          xePpcLoE4JhgM2AVbg5QP2Cxfgj6+RD39A5w4Recqt8=
Subject key identifier:   E7:84:01:92:DA:A3:49:DF:23:D0:37:48:98:02:EE:C4:01:DB:08:38
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019AF389D112E2D2767DF0D4BABFD9E9ADDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number:          07F9
Signing time:             Sat 06 Dec 2025 12:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:26 +0000
Files and hashes:         1: CEobCVyOq89vMXgU83DpMwfT0Wo.roa (hash: DcQa6f54mwH80zIkbXchOx9QQQsb0gD6KDYchnHbpMk=)
                          2: HmvWFjOJ5QNe_0VBD7eTmwN-1XQ.roa (hash: StcAstNQR/UIdmTZ6Q1iuGPLcyfmxWT20PZ/h6s9A5g=)
                          3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: /qSt8EiPM+BAs4L8Mn9AvDAooxJejxPX/zp9Hdl9qSw=)
                          4: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:d1:12:e2:d2:76:7d:f0:d4:ba:bf:d9:e9:ad:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: Dec  6 12:01:26 2025 GMT
            Not After : Dec  7 12:01:26 2025 GMT
        Subject: CN=e7840192daa349df23d037489802eec401db0838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:a3:57:36:bb:80:4b:02:a1:80:39:94:bf:
                    61:fb:60:40:20:ed:a7:27:be:dc:7a:01:99:d0:ce:
                    c7:8d:4e:74:c7:71:08:b8:65:30:cb:c4:f2:23:17:
                    9d:99:0c:cd:a9:af:7a:0b:b9:c2:42:85:b5:e7:31:
                    f4:19:30:17:7c:92:08:8e:3d:86:d1:cc:53:72:56:
                    23:e2:41:fc:3f:51:ee:3f:8a:5c:49:43:46:f9:92:
                    e7:e5:03:9d:cb:a6:07:3a:b3:6a:e3:60:73:c9:10:
                    62:5c:76:25:dc:8d:1a:d1:4b:76:80:ce:17:ce:d6:
                    3f:fe:bb:74:a4:f7:2c:e3:7b:e8:bf:49:ba:61:e3:
                    c0:b5:a0:0c:d9:63:a8:d6:d2:97:26:8b:2d:fb:c2:
                    d2:e5:03:f0:3c:65:54:53:0d:2c:22:b3:83:8b:2f:
                    c7:a0:1f:8e:5e:a1:c1:12:a7:ca:08:c6:eb:4e:28:
                    bb:94:fe:9d:ae:b0:d2:b8:33:05:f3:02:73:b6:91:
                    d7:f1:7b:79:82:bc:2e:ae:c2:c8:9a:ad:e5:e3:10:
                    f3:78:55:d4:9a:d3:b2:08:7d:5e:2c:62:0c:18:4d:
                    73:36:7b:c6:c1:3f:87:4d:88:65:fc:06:26:9a:67:
                    4a:5f:b1:ff:e0:a8:1f:6b:8c:f9:6b:2b:17:a7:92:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:01:92:DA:A3:49:DF:23:D0:37:48:98:02:EE:C4:01:DB:08:38
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:17:3e:bf:26:0f:58:06:a0:4e:13:e0:5f:60:6d:81:a0:48:
         27:47:19:1d:f0:4e:ae:80:fc:67:33:f8:a9:76:a4:b4:3e:75:
         9d:01:ba:ba:bf:63:96:43:0c:55:52:6b:35:6c:b8:82:8e:ab:
         f8:4d:63:0c:ee:31:52:4a:2a:b8:21:82:f8:2c:a5:3e:41:d8:
         42:48:40:e2:ee:2f:57:4f:67:ce:a2:de:b0:40:5e:71:b9:37:
         b4:26:d7:f0:2c:62:99:9f:01:1e:a7:2e:cc:8c:0e:cd:4c:96:
         2f:0e:d6:c7:65:1e:bf:57:30:79:f4:e5:d2:c3:26:f0:3d:8c:
         60:7d:b0:b4:23:c0:c7:95:29:c8:70:b8:33:7f:31:67:bc:1f:
         0b:a0:5a:7f:ac:cb:7d:51:d7:7b:35:ed:24:b0:6b:da:19:e8:
         1c:27:d1:a2:04:21:9c:7d:e9:ec:e0:36:57:22:72:90:ba:b5:
         18:eb:6a:83:19:23:b8:96:d8:56:1c:4c:16:f0:21:33:bd:90:
         da:76:17:8f:7b:7c:13:e4:b8:66:79:1f:5d:af:d1:45:06:41:
         98:53:fc:39:c8:8a:49:39:3e:08:83:6a:0c:18:2b:45:87:51:
         6f:d4:9f:2a:9e:13:c9:d4:73:bf:9f:f1:d3:a6:53:41:ff:f4:
         9d:27:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:23:40 2025 by rpki-client