This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File:                     V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier:          l/ux/+DhnAwCj55StwPiKRE9b14N24NdxrqC1P7qdC8=
Subject key identifier:   FA:1F:0A:E4:BB:C0:B2:E2:D6:55:44:B5:EE:21:83:5A:1C:51:5E:DA
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer:       /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial:       019AF276DADC4867B6082C8C7DE0C9227D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number:          16F3
Signing time:             Sat 06 Dec 2025 07:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:06 +0000
Files and hashes:         1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: HzZSaVJrm+H54CoLH8umoRssxhXrKAIzsjoZ9XY12b4=)
                          2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:da:dc:48:67:b6:08:2c:8c:7d:e0:c9:22:7d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
        Validity
            Not Before: Dec  6 07:01:06 2025 GMT
            Not After : Dec  7 07:01:06 2025 GMT
        Subject: CN=fa1f0ae4bbc0b2e2d65544b5ee21835a1c515eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:14:aa:13:e9:35:de:5b:b7:31:21:d6:d2:
                    1a:61:77:8e:97:2e:51:7d:2a:98:dc:7e:16:44:50:
                    86:08:c9:2e:03:b5:ac:19:29:4a:8b:ce:43:41:4a:
                    90:2d:a6:7e:3f:6f:38:7e:22:f4:ad:ad:f0:e1:8f:
                    7c:d4:a5:cd:e9:7c:b8:3b:81:26:e5:91:34:35:4f:
                    aa:62:26:e1:35:1c:1d:cc:79:7c:d6:33:2f:2e:ed:
                    85:84:6b:db:fd:da:2d:b0:54:9c:3f:22:09:72:02:
                    35:98:c9:03:f4:e1:0b:f1:6c:51:72:ad:63:b6:d4:
                    60:68:4c:9a:13:ec:09:cd:89:3a:e6:54:a2:36:ba:
                    90:8e:89:2b:80:47:68:c7:96:0f:69:9c:34:93:c3:
                    02:34:b2:6c:2d:cf:a3:f0:4c:5d:0e:5e:6d:3f:9a:
                    3f:f4:5c:be:74:f4:a5:a6:e4:5b:5d:2e:e3:7c:98:
                    a1:51:b1:2f:df:73:ab:ef:da:64:08:e1:b9:3d:2f:
                    89:db:14:b8:6b:1d:24:33:84:5f:a3:73:cc:fe:81:
                    8d:5b:a2:71:c5:63:30:31:38:19:7c:11:e2:57:18:
                    6c:23:64:78:ea:71:2a:d6:91:76:c3:b6:6c:61:95:
                    a4:1c:3b:b6:10:41:b5:a8:7e:2f:e2:ea:31:f6:b6:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1F:0A:E4:BB:C0:B2:E2:D6:55:44:B5:EE:21:83:5A:1C:51:5E:DA
            X509v3 Authority Key Identifier:
                keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:66:8b:74:c0:7c:ba:b4:24:54:3a:4b:98:b3:e4:94:ee:77:
         70:16:fa:ac:e0:be:a7:de:4f:7a:0d:67:fc:72:10:f0:a6:13:
         ef:0e:0f:2e:be:e5:2d:a9:8c:e8:c5:97:26:27:1e:0c:9a:ac:
         9d:27:a8:41:6a:3a:59:8a:a5:2c:ec:46:e4:48:8a:2e:bf:83:
         cd:a5:6f:c3:93:96:4f:0a:86:41:5d:d9:c7:c1:17:a4:03:a2:
         d6:f8:0e:31:f7:9b:f5:49:0a:82:27:39:a7:f9:28:03:9e:c6:
         61:af:2e:6b:cd:82:95:bd:8e:b1:85:a7:49:2a:58:50:0c:54:
         1c:2c:13:dc:3b:67:bb:23:0e:2d:63:11:7a:46:1a:24:c5:4f:
         f3:d7:c8:ae:14:0c:5f:04:3a:a6:ac:98:52:b2:44:84:31:80:
         7d:9d:0c:64:b4:84:ad:67:fe:32:3e:7b:ca:96:54:f8:6f:e0:
         2b:3b:e5:48:f7:d5:35:c5:d3:e7:3a:6f:aa:a3:ac:2a:30:7e:
         ac:c4:e5:0c:1d:4a:59:52:48:97:7a:4a:3a:17:58:c8:d2:be:
         f8:46:ac:53:32:1b:fd:ee:30:b9:55:5c:d7:27:9c:b9:a6:0c:
         ff:1c:ba:fb:f3:5c:ba:33:f3:f5:8d:ce:b6:56:11:d0:e9:2a:
         7e:20:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:39 2025 by rpki-client