This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          D0JSYidGzSYqBCsbxrkI6yyiKgQlzqGCcQeYeCQeeBQ=
Subject key identifier:   F7:07:64:9F:3C:CB:38:DC:CB:54:19:FE:0C:43:84:26:AD:41:9F:E4
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019AF3C049AEFEB58D029D8CBD48E201F694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0C1F
Signing time:             Sat 06 Dec 2025 13:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:56 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: oLW4tE0X7NHhYRlHp+zn/ymAToaeF9XfrbDYW1+j9VQ=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:49:ae:fe:b5:8d:02:9d:8c:bd:48:e2:01:f6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Dec  6 13:00:56 2025 GMT
            Not After : Dec  7 13:00:56 2025 GMT
        Subject: CN=f707649f3ccb38dccb5419fe0c438426ad419fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:e3:df:11:9a:1c:33:0d:58:52:2e:e8:c4:
                    32:32:ac:2c:ae:d0:67:e1:e1:aa:b7:49:c0:be:1b:
                    37:96:2a:96:c0:6a:bf:a5:51:3a:98:cf:5c:89:28:
                    f7:9b:e2:df:10:0c:78:3e:08:43:0f:ef:01:2d:78:
                    d1:8b:f8:a3:36:01:9b:78:e9:ba:4d:7b:e5:b9:4b:
                    ef:57:72:18:49:00:56:57:2f:30:8b:ee:bc:d1:83:
                    4f:c2:af:c1:78:48:d4:4b:4e:5f:03:55:eb:be:a0:
                    b8:4e:b7:d1:c6:63:2c:50:7e:7b:48:26:13:03:53:
                    29:8e:76:6d:f2:e2:ba:ae:53:f9:2c:58:32:c5:5d:
                    b0:37:11:7b:86:3c:0a:61:6a:e3:0a:ee:7b:77:62:
                    9b:b2:2c:04:22:22:e3:a8:26:ad:da:9b:e8:45:13:
                    5c:46:06:66:83:1d:5b:a9:0a:40:35:5b:45:73:09:
                    70:b4:65:1b:9b:9e:82:d9:74:38:01:47:3e:41:70:
                    62:1a:b3:82:42:c9:c7:8e:c4:b6:f2:be:a2:95:b8:
                    9c:33:69:66:d6:c7:1e:bb:ac:d1:6f:63:96:0a:96:
                    ad:00:b9:ea:13:f6:50:04:0e:45:08:f4:fb:89:71:
                    59:af:44:2e:7a:65:99:51:f8:80:6c:8f:57:30:cc:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:64:9F:3C:CB:38:DC:CB:54:19:FE:0C:43:84:26:AD:41:9F:E4
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:1f:a0:96:a3:b7:9a:c0:55:f1:2d:41:ba:74:e9:bb:71:
         d9:15:41:6c:56:1b:1b:47:79:71:19:8a:d2:62:48:42:04:8c:
         e4:85:00:48:7b:68:ee:a7:94:b1:c5:3a:d3:50:c5:67:99:2a:
         cf:2a:7e:c7:37:a4:bc:4b:52:48:47:c5:85:86:ab:02:70:7e:
         92:ce:43:b1:d7:27:38:00:68:d0:15:cd:61:54:ab:52:83:9b:
         7e:f3:bb:c8:6a:5f:0f:b9:ac:b5:8b:39:84:12:80:56:35:ed:
         6b:a1:d3:c6:ea:b5:38:41:71:e4:aa:bf:5c:62:53:72:1f:e4:
         09:91:ee:a0:c1:8b:66:dd:f3:4e:e2:10:ed:7a:16:ac:17:51:
         22:99:36:3b:0e:f0:56:5c:b8:9e:34:2d:21:5f:da:98:75:2c:
         c4:e3:7b:31:65:9f:db:a1:16:03:1f:e1:9a:a4:8a:1c:f9:a4:
         47:d7:e5:48:eb:a9:50:d6:df:d0:9b:48:47:75:c9:81:17:42:
         7f:40:6a:3b:f4:2b:e5:82:09:c7:f2:2d:00:12:57:fc:92:a3:
         40:78:46:63:19:b7:a1:79:f2:ac:46:d7:11:be:26:0e:cc:98:
         57:ed:60:20:08:5f:58:ff:67:7c:6d:f0:16:55:e6:e3:53:5f:
         ea:11:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:48 2025 by rpki-client