This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File:                     fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier:          RYlruq0fSLJ8D/43bM5/Fxjg71+tAJko5eAmu8YQ/CU=
Subject key identifier:   70:B5:A3:D2:A9:0A:3D:7E:88:24:0F:E3:F3:B3:BA:2B:61:FA:CE:B3
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer:       /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial:       019AF49BDD6D03362CA81C2B36DDAF05D8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number:          09C2
Signing time:             Sat 06 Dec 2025 17:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:46 +0000
Files and hashes:         1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
                          2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
                          3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: AuLiVjjDnzZxCe7eYKK3ThMSE8+rnEvL9pUtaypVmqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:dd:6d:03:36:2c:a8:1c:2b:36:dd:af:05:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
        Validity
            Not Before: Dec  6 17:00:46 2025 GMT
            Not After : Dec  7 17:00:46 2025 GMT
        Subject: CN=70b5a3d2a90a3d7e88240fe3f3b3ba2b61faceb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:79:6a:9f:da:79:b0:fd:2d:5a:15:97:d3:
                    3a:2d:11:85:0d:c8:f4:c2:cb:d1:41:01:f8:29:a9:
                    c0:15:98:cd:a4:b4:0e:16:86:d0:5a:a1:61:13:38:
                    41:53:fb:4f:71:a7:e8:f1:f7:0e:42:42:fa:cd:89:
                    08:7a:fd:af:a9:5b:8c:9a:1c:05:85:9c:55:6b:a3:
                    90:be:c1:a5:e0:7c:10:6d:d7:87:94:c8:17:c2:d6:
                    ee:d4:e1:34:58:c2:ba:d8:54:7b:d9:55:e7:95:6e:
                    19:b4:83:0b:65:cc:5f:d1:06:fd:3a:b6:32:3a:0b:
                    65:80:8e:40:10:07:ff:73:e3:bb:cd:81:2f:a6:9f:
                    f9:20:75:9c:00:34:d9:44:ab:cb:bd:c5:6b:24:3e:
                    3e:d7:11:86:64:b0:2c:06:8e:9d:e4:26:4d:60:e9:
                    6e:ad:d8:28:0f:1f:22:03:bf:8a:cf:62:d7:84:85:
                    ae:68:bf:c2:a5:40:18:d9:df:d8:b4:d8:c5:61:ea:
                    ee:a1:0b:86:7f:0b:eb:bb:96:cf:59:0d:87:2f:40:
                    7e:a3:49:47:71:6f:9e:8f:d6:39:7d:27:a3:66:2d:
                    c6:b4:a0:35:63:e0:3e:b0:ad:70:36:16:a1:63:c4:
                    14:af:f4:19:17:f9:05:dc:42:91:47:c6:e2:43:c9:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B5:A3:D2:A9:0A:3D:7E:88:24:0F:E3:F3:B3:BA:2B:61:FA:CE:B3
            X509v3 Authority Key Identifier:
                keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:de:46:2d:f8:d8:65:46:bd:30:b9:01:41:58:57:13:63:28:
         2f:a0:05:d0:d7:52:c9:8c:ae:9b:70:27:1b:c0:89:ee:57:c3:
         1f:89:b3:ed:99:b3:73:d9:93:4d:6f:dc:ec:56:a4:45:4e:29:
         df:df:d0:29:be:4c:c7:43:95:7c:cd:59:e8:b4:86:ca:37:38:
         b4:26:d4:fe:e8:14:80:8a:9b:ab:35:e4:9b:68:75:9d:35:7f:
         44:81:53:96:38:2a:9c:4d:c5:25:1f:b5:ae:a2:e0:f8:26:fb:
         01:7c:e2:67:1f:56:3c:0a:66:79:9f:47:0e:ce:67:7a:53:4f:
         23:a8:91:8d:b8:6d:ba:80:02:82:cd:59:48:b9:47:75:43:19:
         1a:f8:0e:5c:5c:8a:29:80:19:92:87:e3:a7:ae:ef:a8:7a:10:
         26:23:7c:0c:00:c7:59:6f:b5:c4:74:c9:38:ed:cb:b0:06:46:
         be:6c:39:7d:a2:61:12:9f:e9:62:cf:56:1e:c5:c1:e7:4e:fa:
         19:57:37:35:2d:e9:65:a3:a9:d9:df:06:f1:cd:a0:7c:70:08:
         06:0a:64:0c:6d:e8:4a:21:2c:09:07:d5:bd:61:78:02:f8:5d:
         3f:66:00:b9:06:a9:cf:dc:10:31:2e:4e:52:c0:2d:ba:74:ed:
         a4:32:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:31:36 2025 by rpki-client