This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File:                     TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier:          KZK0kO7yyUoby98tjeL/QXSe0eThtaETGEKrYhVla8c=
Subject key identifier:   C4:BB:19:25:59:76:37:A7:69:AD:C1:98:87:7A:40:22:36:6B:54:5B
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer:       /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial:       019AF3C0ADD0E2E850E6DA4FC33D59B2E2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number:          048E
Signing time:             Sat 06 Dec 2025 13:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:22 +0000
Files and hashes:         1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: OLnHhsB3fi4uLV/0/t3vrMcBDGe2KycDqJBwjiamqCw=)
                          2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
                          3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
                          4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:ad:d0:e2:e8:50:e6:da:4f:c3:3d:59:b2:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
        Validity
            Not Before: Dec  6 13:01:22 2025 GMT
            Not After : Dec  7 13:01:22 2025 GMT
        Subject: CN=c4bb1925597637a769adc198877a4022366b545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:6f:b9:cb:86:67:c9:7c:7c:5b:e3:57:97:
                    5d:61:38:84:7a:d0:c1:ea:c8:a2:09:d6:c8:c1:f2:
                    69:ab:f6:37:07:19:e6:c3:b3:f3:6b:bb:d3:c7:3a:
                    7b:d3:31:84:1b:4c:3d:30:03:e8:ba:a7:22:58:df:
                    8a:df:9b:c5:91:df:b6:34:54:05:7a:f6:a5:69:99:
                    ab:86:5c:44:91:42:72:35:16:73:3a:df:9a:fc:86:
                    0f:91:36:03:ac:03:c7:ae:8f:73:08:ea:7c:77:70:
                    0c:ed:9e:1e:d6:42:ef:7c:26:fd:78:81:46:0b:50:
                    cd:3a:e7:1f:2b:98:bf:6a:2a:cd:17:fd:d0:2c:bd:
                    96:48:59:d2:28:98:13:8a:dc:c2:24:f7:7e:1c:29:
                    30:a6:29:0e:68:47:fe:72:31:81:99:36:9f:e2:bd:
                    c3:8c:ef:e2:9c:1e:00:b6:4c:64:a9:25:77:35:21:
                    b4:eb:d4:fb:af:99:a1:82:1b:d3:af:e6:76:be:79:
                    43:01:f7:e6:d0:1a:09:22:ab:20:c6:ec:91:f6:31:
                    2b:6c:e5:3c:32:7f:e0:dd:c1:30:1a:8a:df:9f:72:
                    95:e5:15:61:f2:26:c0:e1:82:77:1e:06:94:b7:1e:
                    eb:3f:a1:33:59:d2:cb:4a:ae:0f:eb:a6:1a:5a:17:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:19:25:59:76:37:A7:69:AD:C1:98:87:7A:40:22:36:6B:54:5B
            X509v3 Authority Key Identifier:
                keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:50:09:44:f5:aa:37:7c:22:35:fd:76:6f:1d:b0:87:22:
         a5:1f:d5:83:2c:b1:0b:9e:0f:6a:b2:48:f1:5c:b4:9f:08:1c:
         75:5f:88:20:3c:81:63:34:18:a9:35:8a:9b:d6:3e:90:4e:a4:
         52:1e:48:6d:c1:06:d0:ae:f1:e8:5d:10:48:09:99:89:99:46:
         b4:78:27:d2:de:24:14:b9:54:ba:fa:81:64:9c:d7:10:51:f8:
         76:96:e3:69:ae:13:3e:e6:2e:34:c4:e2:f3:22:69:88:d1:da:
         80:8a:19:42:34:90:c7:10:8a:89:de:d1:24:ae:54:4d:86:8a:
         98:a8:fc:04:55:ed:1c:c0:66:1c:8f:37:78:84:9e:9f:47:fa:
         35:ca:ee:ac:5b:ec:a0:82:44:ee:e8:65:27:09:13:0e:7e:07:
         e6:f1:26:c0:db:85:70:c8:67:93:30:b0:eb:fd:44:00:3c:e9:
         c7:44:b2:a5:53:82:87:0e:5a:2d:dd:42:04:51:c2:39:a4:4e:
         10:15:c8:3a:0a:17:22:f2:47:c4:7b:38:a6:1e:d8:a5:a8:3d:
         b3:5b:bb:2e:dc:b8:30:99:e4:44:a0:d4:32:fc:b0:2b:e3:05:
         86:26:e1:00:27:29:9d:93:ab:5f:e2:f8:e9:81:7a:b4:1f:23:
         ee:56:d6:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwK3Q4uhQ5tpPwz1ZsuKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh
ODAyNTMwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD
EyhjNGJiMTkyNTU5NzYzN2E3NjlhZGMxOTg4NzdhNDAyMjM2NmI1NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B1vucuGZ8l8fFvjV5ddYTiEetDB
6siiCdbIwfJpq/Y3Bxnmw7Pza7vTxzp70zGEG0w9MAPouqciWN+K35vFkd+2NFQF
evalaZmrhlxEkUJyNRZzOt+a/IYPkTYDrAPHro9zCOp8d3AM7Z4e1kLvfCb9eIFG
C1DNOucfK5i/airNF/3QLL2WSFnSKJgTitzCJPd+HCkwpikOaEf+cjGBmTaf4r3D
jO/inB4AtkxkqSV3NSG069T7r5mhghvTr+Z2vnlDAffm0BoJIqsgxuyR9jErbOU8
Mn/g3cEwGorfn3KV5RVh8ibA4YJ3HgaUtx7rP6EzWdLLSq4P66YaWhcdbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS7GSVZdjenaa3BmId6QCI2a1RbMB8GA1UdIwQY
MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt
MTkzOTdmYzc2ZmVjLzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj
LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB5QCUT1
qjd8IjX9dm8dsIcipR/VgyyxC54ParJI8Vy0nwgcdV+IIDyBYzQYqTWKm9Y+kE6k
Uh5IbcEG0K7x6F0QSAmZiZlGtHgn0t4kFLlUuvqBZJzXEFH4dpbjaa4TPuYuNMTi
8yJpiNHagIoZQjSQxxCKid7RJK5UTYaKmKj8BFXtHMBmHI83eISen0f6NcrurFvs
oIJE7uhlJwkTDn4H5vEmwNuFcMhnkzCw6/1EADzpx0SypVOChw5aLd1CBFHCOaRO
EBXIOgoXIvJHxHs4ph7Ypag9s1u7Lty4MJnkRKDUMvywK+MFhibhACcpnZOrX+L4
6YF6tB8j7lbWiA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:14:31 2025 by rpki-client