This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File:                     f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier:          TV+ytKV9f9GvftmNk2Wjy2JDaEOV0w9od2P8l9MFFVQ=
Subject key identifier:   E4:63:A4:58:D1:3C:BA:9F:75:4E:6D:E4:81:2C:F8:D9:89:58:55:7E
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer:       /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial:       019AF23F8ADDA9264967A59E7F7F979B08B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number:          0DCD
Signing time:             Sat 06 Dec 2025 06:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:41 +0000
Files and hashes:         1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
                          2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
                          3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: PFwLsOpPZQSWaq4qeDNvGFrMx47QLgQfCfhfgD17ObQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:8a:dd:a9:26:49:67:a5:9e:7f:7f:97:9b:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
        Validity
            Not Before: Dec  6 06:00:41 2025 GMT
            Not After : Dec  7 06:00:41 2025 GMT
        Subject: CN=e463a458d13cba9f754e6de4812cf8d98958557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:6c:2d:34:4c:49:d3:21:ea:54:1d:27:38:
                    0c:7f:e5:26:fc:af:f3:07:be:21:63:1f:38:94:b7:
                    6b:bb:49:50:46:27:62:db:18:a1:c8:c0:af:38:22:
                    c7:fd:59:21:4e:75:d4:10:40:4e:7f:a7:29:4f:c9:
                    3c:95:8c:c8:a6:0e:53:d1:b5:cb:74:d0:f6:30:c2:
                    d8:2b:58:67:f4:5a:36:50:4e:02:68:bc:3a:dd:a2:
                    57:d8:14:2a:3e:37:a1:51:7e:58:e3:b6:58:ba:bc:
                    1d:52:6b:3d:8d:50:47:62:44:6c:b4:eb:3e:4a:ca:
                    71:d4:fe:ce:31:db:0a:2d:bb:98:29:28:12:ea:dc:
                    86:9b:78:00:2b:3f:32:e1:71:90:77:a1:bd:e9:ef:
                    b4:a3:04:90:eb:02:f3:eb:82:ea:c7:02:5c:ce:03:
                    1a:7a:48:31:28:2c:f3:ef:c9:f5:c3:e2:a4:77:6c:
                    88:13:d6:4d:4d:eb:3b:c7:3b:f1:8b:b5:5d:16:bd:
                    e8:7b:85:0f:94:35:76:29:a3:d2:88:50:36:6a:cc:
                    54:71:f6:f0:11:ab:10:cd:6a:fc:e1:1a:7f:8d:06:
                    ab:1a:fe:e9:81:2e:06:a8:c0:75:fc:d0:20:25:8a:
                    de:d0:ea:71:6e:c2:b1:36:fc:8d:cb:55:8f:15:02:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:A4:58:D1:3C:BA:9F:75:4E:6D:E4:81:2C:F8:D9:89:58:55:7E
            X509v3 Authority Key Identifier:
                keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:a6:90:a5:20:c1:a0:16:aa:fe:c2:22:2a:a4:ec:3c:0d:
         2b:bd:84:ab:f5:e2:08:b6:94:9b:a9:d9:24:4b:90:9c:2a:57:
         f5:b2:3d:1d:bf:29:6d:58:03:05:98:f8:45:fb:d7:a1:04:e1:
         5b:5a:27:34:e7:f3:f4:fa:7a:9d:04:ea:c0:ac:6f:bc:6d:cc:
         b6:e0:29:98:64:bf:5b:60:be:ae:1c:ac:7d:c8:7f:62:d3:cf:
         ed:35:88:c9:82:98:02:0a:bc:4e:67:22:d8:0b:4d:53:96:e0:
         33:54:26:51:d0:20:96:3d:6a:64:db:be:0f:a3:38:c4:91:55:
         2d:7f:b4:0a:70:98:34:ee:0c:ae:6e:e2:3b:0a:47:09:45:db:
         e4:ea:f0:14:23:da:1a:86:7c:d9:fc:54:7e:88:01:d2:ae:4c:
         4b:86:56:df:90:3b:f6:48:cb:fd:61:41:91:62:5a:65:55:cd:
         49:97:fc:c4:c0:0d:db:a1:34:1e:1e:49:64:c4:bd:78:25:52:
         9e:6b:09:29:48:b0:02:52:0a:f4:79:37:27:b9:82:2d:24:0d:
         81:f0:3a:3e:b0:94:d4:90:25:c0:40:f4:ea:0c:ba:9b:ed:84:
         40:71:d7:00:43:c8:dd:7f:a6:87:d0:dc:ef:70:d6:34:90:db:
         e7:16:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:44 2025 by rpki-client