This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          o2OoVLgjxEgN0KzxteWDjdj9hNFRi4Zg7aLNJW/cd9s=
Subject key identifier:   CA:67:01:69:14:5D:FF:1D:40:50:71:A1:62:A0:47:C0:70:EC:8B:DD
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019AF31D1418059198E3B81D0A1F46F32D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          02CD
Signing time:             Sat 06 Dec 2025 10:02:40 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:40 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:40 +0000
Files and hashes:         1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: zU8dNWDUzgch3ZKucXNs55z1SLDM1Tka/kTs5MZthhA=)
                          2: Dyuv8Z__vkGHwwVg87zPgkG7J-4.roa (hash: ilCGUeVqOl6irP7EZ7ynRXvcKUKAauHP7YFg6+r0+3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:14:18:05:91:98:e3:b8:1d:0a:1f:46:f3:2d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Dec  6 10:02:40 2025 GMT
            Not After : Dec  7 10:02:40 2025 GMT
        Subject: CN=ca670169145dff1d405071a162a047c070ec8bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:3f:8f:b3:16:01:db:73:c7:09:f3:bf:46:
                    ed:e9:35:4d:96:8b:53:aa:fe:76:cb:42:9f:11:99:
                    60:b1:b0:2f:81:f8:1e:24:45:de:97:fe:77:73:a2:
                    98:aa:6c:91:8c:68:80:f4:1b:d9:de:18:3b:35:78:
                    d4:d8:83:1f:0e:a5:9e:e5:e3:81:32:4e:21:41:d4:
                    58:22:4c:f0:2d:cc:ed:f2:ff:0e:18:0d:ef:57:fe:
                    07:96:3b:d7:7c:c5:0a:d6:09:8b:b9:8e:68:43:0c:
                    6b:2a:40:d7:c4:db:62:a3:0c:f1:b8:9e:6a:50:42:
                    6a:a4:7c:c3:50:a7:42:a9:11:7d:a1:53:f4:6d:cd:
                    ca:51:f8:c9:8a:04:23:1e:9b:73:26:cb:a9:ec:76:
                    e2:3a:e9:c4:35:b0:a0:ba:10:b4:af:67:2e:72:52:
                    4f:57:37:88:32:eb:cb:dd:b1:7b:1c:c0:b2:20:bc:
                    90:de:8e:f5:19:96:ff:e2:9c:d9:36:78:92:dd:6f:
                    86:31:f9:77:a1:38:8d:7a:af:fe:23:e4:d4:b3:6b:
                    5d:c9:e9:48:1d:95:c1:6d:41:59:19:18:3c:f4:9d:
                    8e:83:04:a9:b1:d9:e5:ab:27:cf:02:dc:76:a1:d4:
                    5e:86:81:85:29:dc:b8:27:e5:fd:4c:fa:73:0b:54:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:01:69:14:5D:FF:1D:40:50:71:A1:62:A0:47:C0:70:EC:8B:DD
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:23:98:b9:91:04:1e:84:60:42:9a:61:97:82:d1:19:2a:
         ab:da:3f:4a:5d:7d:9b:a7:5e:47:e2:af:d6:0f:7a:fd:79:29:
         04:e0:63:f1:14:82:c6:0c:54:75:6e:c9:69:67:ab:e0:8e:bf:
         40:0c:5e:87:6b:71:20:47:2d:4a:32:45:95:14:02:b5:03:db:
         95:6d:df:f5:88:49:4b:e9:2e:3b:23:bb:b7:83:23:88:6f:90:
         fd:cf:02:d7:4e:1b:32:3b:3e:6b:93:d8:07:24:cf:7d:42:43:
         fa:8d:ab:55:d4:17:34:b1:42:12:f7:bb:a2:28:93:fa:9a:18:
         77:03:74:16:c2:ef:5d:7d:3e:31:55:51:6f:d3:7a:63:58:19:
         6b:a3:35:e3:d5:ae:dd:2f:8f:67:f2:c3:b3:7c:11:6e:de:df:
         4e:32:f3:93:ab:f1:3f:31:f5:bd:f2:36:d3:96:b2:0d:ad:69:
         b4:8d:3f:16:00:cd:bf:ff:83:75:28:c3:91:c9:3a:b3:c3:9d:
         4a:14:9b:b8:1a:c3:c2:0f:e0:bd:f9:74:f8:fd:d7:31:17:fe:
         dc:8e:59:3f:d5:d7:65:2c:81:d6:f1:9f:3a:dd:11:5e:0b:95:
         ac:ca:5c:ba:f8:64:1c:bf:7c:ae:3a:1e:81:3c:ed:d8:10:f3:
         6d:46:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:13 2025 by rpki-client