This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File:                     v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier:          3YrDV7FrCvQcjO4xKt30lCQVhglcOwz8i322uuekd2U=
Subject key identifier:   22:E2:7D:F8:70:D8:9F:C8:0A:17:CA:B0:08:27:6E:69:F6:7D:81:AE
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer:       /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial:       019AF465B0185D2A7B3046EC659A77350340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number:          0455
Signing time:             Sat 06 Dec 2025 16:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:36 +0000
Files and hashes:         1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=)
                          2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: xsENEx9l2JPe8Ki69ZpqKeG9tS42wtakLz0OiFDOWGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:b0:18:5d:2a:7b:30:46:ec:65:9a:77:35:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
        Validity
            Not Before: Dec  6 16:01:36 2025 GMT
            Not After : Dec  7 16:01:36 2025 GMT
        Subject: CN=22e27df870d89fc80a17cab008276e69f67d81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:e3:c2:69:46:8d:65:7e:a8:76:de:17:a0:
                    2e:dc:da:5a:61:ed:c4:1e:e4:06:97:52:0a:12:8d:
                    c3:bf:2a:e8:9d:87:b8:86:02:38:71:a1:fb:de:d4:
                    30:d7:61:8d:12:3f:42:07:28:90:05:28:68:02:48:
                    dc:df:c5:fd:4d:be:4d:43:df:7d:a6:e0:ce:0b:4e:
                    91:e3:30:07:95:a4:09:67:e1:04:1d:fb:5b:1b:43:
                    f4:98:2f:c2:b6:1c:27:60:28:81:79:fc:0f:e0:c6:
                    55:fc:df:cb:53:bb:16:b7:f7:eb:57:77:08:17:74:
                    4d:be:b7:68:0d:80:02:d2:80:b4:e6:43:f0:a2:8d:
                    32:b0:e7:aa:63:a5:59:e6:e2:0c:8b:f2:63:b3:8f:
                    25:6c:7e:da:02:90:fd:19:77:d1:95:d4:29:5b:5b:
                    dc:c4:cf:03:66:2c:98:d4:23:62:31:c4:5b:27:23:
                    ff:3d:e9:0e:05:07:dc:8c:ae:9f:2c:22:f9:df:23:
                    d2:e1:46:86:23:43:90:a7:17:ee:fa:a5:52:8d:9d:
                    9c:87:3d:0d:39:8f:b1:e3:85:08:d9:62:0d:bb:5d:
                    b9:b1:c7:5a:03:96:56:6d:24:18:4d:86:67:69:a8:
                    c4:3c:cc:31:ed:cf:ef:93:a0:1e:f7:b2:ad:ed:21:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:7D:F8:70:D8:9F:C8:0A:17:CA:B0:08:27:6E:69:F6:7D:81:AE
            X509v3 Authority Key Identifier:
                keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:df:63:f0:f6:71:45:b9:d5:52:e5:19:41:6c:68:2a:73:
         ea:1d:c1:21:bb:51:94:96:b3:9d:77:dc:12:65:e1:82:eb:04:
         17:60:c8:b2:d0:db:ba:5f:25:da:3b:d6:47:1c:cf:30:ad:ba:
         72:7d:0d:c9:70:b8:5d:1c:cc:01:5c:69:1d:02:1f:0e:79:ed:
         58:24:c9:8e:ea:3c:c8:15:bd:bd:3b:09:05:04:20:ec:67:b7:
         21:5d:e0:4a:47:7f:8c:04:c8:67:c3:98:64:a1:8e:fa:69:ec:
         cb:cb:5b:ed:05:06:be:0d:d4:75:a1:86:9c:ca:78:e2:44:25:
         6d:0a:7e:48:bc:32:7b:5a:d9:3d:9d:a3:b0:56:00:be:5e:94:
         dd:72:bf:56:10:19:68:f4:64:ce:c5:cd:9d:3f:97:03:8e:31:
         14:ad:48:f4:d1:60:c0:ac:53:f7:72:ed:6d:9c:61:a5:12:35:
         53:72:c8:fe:a0:d3:61:7b:19:bb:b8:e2:4b:d4:a2:c5:2d:1f:
         1e:63:99:a5:ca:cc:4e:2f:bb:df:d9:eb:65:e0:fb:13:27:c3:
         cc:1a:31:60:39:8f:fc:bd:46:00:2f:93:25:ea:ec:a4:87:04:
         84:bf:65:bd:2e:74:5d:49:7b:ae:d9:73:bb:6e:2a:9a:89:7a:
         83:09:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:11:56 2025 by rpki-client