This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File:                     coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier:          EB4DMLxrZGQrNouz+O09C+XBfFIX0nWYH4nuvoVzYOw=
Subject key identifier:   D4:43:18:20:DE:A7:BD:FD:63:A5:C5:C9:C9:99:C3:43:36:C7:90:9A
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019AF12E74DA4E4E82A272F9D91858B26286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number:          0B6F
Signing time:             Sat 06 Dec 2025 01:02:24 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:24 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:24 +0000
Files and hashes:         1: KtyjoHVh-jWQ52KLDWiih3wa8dM.roa (hash: nNl4uWGbOXfH9a0zpwdYcXAwLZ/cX6WnZQrYg+krLsg=)
                          2: MlaxuC-MvqxdJWc5pKLiaE76NMk.roa (hash: tH+D4l6q8LLHR1Hf7c2XhR7vBl5T4KLwCh8ScplJjz8=)
                          3: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: yYkl9RnU7gwEoUEpm544xeq6loKcYGBn3wPCOgRkS1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:74:da:4e:4e:82:a2:72:f9:d9:18:58:b2:62:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Dec  6 01:02:24 2025 GMT
            Not After : Dec  7 01:02:24 2025 GMT
        Subject: CN=d4431820dea7bdfd63a5c5c9c999c34336c7909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3a:82:e7:be:04:b0:9b:66:2a:c2:28:36:a8:
                    c6:bf:ca:1f:e5:a4:88:b2:c1:c5:29:c6:33:32:8b:
                    ca:a2:85:4c:f7:13:fb:bd:9b:16:41:15:10:5c:61:
                    98:4b:2b:3e:9e:3b:d6:cf:60:45:bc:5b:1e:1f:f1:
                    33:b1:3f:fa:24:f2:48:ad:41:a8:f9:d1:a9:4d:28:
                    54:0e:ab:58:5f:50:01:dc:ef:72:5e:31:ae:aa:b7:
                    9b:3b:c6:27:a3:99:21:4f:58:9c:05:d6:25:1f:f5:
                    fb:73:bc:18:32:b2:c2:33:88:47:41:01:c0:c2:c9:
                    9c:b9:5a:ff:36:55:95:01:c8:32:b0:1c:29:c6:b7:
                    c5:aa:c8:42:93:0e:dc:5b:89:27:48:36:70:8b:f4:
                    53:02:ba:b0:c8:9d:9f:4a:f3:46:4c:a6:df:d3:dd:
                    64:c8:2d:6f:39:ea:91:62:79:16:87:9d:a4:69:7c:
                    fd:fb:8c:58:3f:21:0e:2f:7e:07:76:8e:af:0c:8a:
                    7d:5f:11:49:a3:2e:1e:e6:b7:56:bc:97:28:15:37:
                    ae:9d:6b:b0:25:32:c3:92:fe:18:ec:df:85:47:ef:
                    6d:9a:4a:fa:53:9b:e2:58:a9:ca:f0:ed:71:64:4f:
                    0f:27:7f:fd:e2:30:ba:f1:e1:28:c6:63:d6:fc:9c:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:43:18:20:DE:A7:BD:FD:63:A5:C5:C9:C9:99:C3:43:36:C7:90:9A
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:40:e8:3c:a1:ba:53:d1:cb:b9:cf:61:c7:c5:e6:d7:eb:
         3a:9c:d0:17:f8:f4:a3:00:21:84:df:ad:be:5c:70:02:14:fc:
         f7:d6:49:c3:87:4e:5a:91:10:3c:de:70:67:78:10:19:a9:15:
         19:be:37:e1:e7:a7:5e:69:2d:63:a0:be:78:95:a0:2a:93:ba:
         6f:3b:6a:4c:91:1b:d4:d1:25:e1:0a:f6:e0:80:68:b7:f9:7b:
         8e:c8:52:4e:ec:ab:bc:ad:9b:d5:f4:5a:28:55:2c:cb:70:af:
         70:c0:88:46:6c:81:61:9d:81:1a:88:ec:68:15:a6:6f:3c:b2:
         ae:9f:fe:95:45:99:71:65:d3:69:7e:5b:49:87:62:e0:2d:cd:
         50:f9:b3:ee:30:17:75:fd:03:83:03:bd:83:26:e4:bf:07:6c:
         dc:96:2a:7e:e5:f9:cd:df:d4:3c:91:4b:84:27:ec:d5:c6:0b:
         f0:33:c1:72:51:64:cc:38:60:a0:86:71:75:70:dc:d5:3b:7f:
         02:f3:a5:3e:41:cf:c2:1a:a2:5d:a3:ef:f7:36:89:e0:c5:91:
         b4:25:f1:25:9d:ba:60:89:be:5b:c0:2b:ae:ec:95:0e:f6:19:
         4e:58:74:54:ab:4c:a9:b5:6b:b9:4b:39:0c:bd:6b:a1:49:77:
         f4:4c:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:40 2025 by rpki-client