This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          bF8H8d6ITnJ6JkKZb5IXY7mMBJ6iEGDtQQVl00sT8q8=
Subject key identifier:   21:44:68:55:F4:04:F1:D0:12:82:82:71:1C:F2:42:57:A4:08:F6:7A
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       019AF19B75A522BF4EC1280E1883E3119EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          1782
Signing time:             Sat 06 Dec 2025 03:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:28 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
                          3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: mtE+JYf5mCUXi4mrmZCPgQv5E8IjX3mtXkQTakCKuGE=)
                          5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:75:a5:22:bf:4e:c1:28:0e:18:83:e3:11:9e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Dec  6 03:01:28 2025 GMT
            Not After : Dec  7 03:01:28 2025 GMT
        Subject: CN=21446855f404f1d0128282711cf24257a408f67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:53:6e:aa:b3:42:37:5f:3b:9c:72:37:6d:
                    4c:fb:a0:92:a6:b6:3c:74:b9:5c:f7:16:97:b2:fa:
                    f3:2b:86:98:da:ad:c4:da:a7:2f:ab:39:ad:90:48:
                    98:68:f8:04:a8:2a:ca:a1:8d:38:af:0a:83:3e:f0:
                    f7:cd:79:4d:4c:ff:7a:59:fb:52:8b:32:2b:9c:c1:
                    06:cb:11:b8:44:fe:05:de:f0:9a:97:80:ef:17:8e:
                    7a:83:4c:e8:c1:24:87:00:4e:aa:11:87:83:b4:ec:
                    1e:e4:7e:ed:41:b7:5d:20:89:97:d8:8b:b1:c5:57:
                    5a:7e:53:a2:7c:6d:58:e2:29:5e:ae:1c:8f:0a:f5:
                    97:3d:eb:3b:43:26:9c:4b:b1:d1:52:b9:15:de:50:
                    55:c6:a7:7f:18:f2:f9:fe:93:da:e7:a2:1f:b7:94:
                    7b:8e:45:6f:a6:f5:0b:d7:fb:69:34:f0:13:95:47:
                    05:8a:ff:26:a1:1b:5f:01:e8:2c:76:d9:e6:3f:ce:
                    65:10:e0:8b:93:6f:dd:ab:69:cf:ce:16:b0:27:ac:
                    4e:4e:96:23:26:0b:dd:36:b0:cc:86:d4:61:c1:50:
                    14:6a:18:a3:ad:ea:74:8b:95:14:59:04:d0:d0:a2:
                    14:fc:d1:44:e0:98:41:21:32:df:21:71:35:ca:15:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:44:68:55:F4:04:F1:D0:12:82:82:71:1C:F2:42:57:A4:08:F6:7A
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:1f:3b:7a:66:65:5e:7c:dc:4a:80:c4:bd:e8:37:a4:0d:
         ee:c6:ba:5d:b2:c1:f1:2a:55:48:16:24:de:49:ae:25:3e:8f:
         8f:b8:3d:8d:a1:9d:4b:8d:65:ea:9d:1a:df:f0:b8:a5:98:33:
         99:fd:98:d2:17:3f:7c:15:5d:d0:f1:2a:83:4c:73:d8:a8:09:
         a4:55:bf:f6:ff:e8:69:53:ed:91:bb:cf:ec:a0:74:bc:ca:01:
         68:09:57:b9:39:ed:f0:46:1a:cc:0a:c7:58:66:30:f1:67:23:
         50:a9:45:30:1b:c4:0a:dd:f6:96:4c:de:c0:e9:64:12:05:4a:
         3c:2b:ef:14:2a:1e:c2:c9:61:d5:3c:13:50:2c:55:c9:f2:dd:
         0c:ee:87:93:bb:ec:43:5b:5f:29:13:9b:c4:d1:85:50:c4:b2:
         4c:76:72:1f:60:5e:03:5d:3f:15:de:35:98:c4:89:8d:a5:8d:
         b5:94:88:5f:62:78:94:ef:93:15:ac:0c:bd:dc:3b:cf:d9:31:
         87:76:36:6f:5c:34:7f:05:63:b6:e4:f9:f0:c1:c2:ad:1b:cb:
         8c:a8:58:49:f5:cd:a5:7d:03:d3:2f:6e:8b:46:de:6f:85:1f:
         92:0c:a0:82:69:c1:a6:0f:54:d1:2d:31:72:fe:ed:6c:eb:c3:
         84:21:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:46 2025 by rpki-client