This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File:                     O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier:          IhnfAiy9BvyNYr+/swByoOFFRBPQKZuLZGM71TdwcIk=
Subject key identifier:   06:6E:6F:EB:C6:8B:96:C5:01:19:5C:ED:72:FB:46:48:1D:87:95:3E
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer:       /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial:       019AF49BD0CDE60E4FBD24F6E5B7DF490F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number:          09A4
Signing time:             Sat 06 Dec 2025 17:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:43 +0000
Files and hashes:         1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
                          2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
                          3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: VoJZK5T1h4XDBwCOUUJ/0jjWa9gI3KJUj90hZGGlOsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:d0:cd:e6:0e:4f:bd:24:f6:e5:b7:df:49:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
        Validity
            Not Before: Dec  6 17:00:43 2025 GMT
            Not After : Dec  7 17:00:43 2025 GMT
        Subject: CN=066e6febc68b96c501195ced72fb46481d87953e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:9b:d5:74:80:19:3e:17:70:ea:fb:fd:ec:
                    50:0f:78:cb:b6:81:5c:45:ce:b3:dc:23:8a:f7:33:
                    1a:0b:cd:db:bf:2f:b3:58:b8:ac:f2:41:7a:cb:bb:
                    af:5f:f5:27:76:de:10:9c:1f:b0:50:f8:64:e6:b8:
                    4a:46:c7:43:61:bd:ff:65:ac:43:0c:8b:b9:f4:3c:
                    a6:a7:84:15:e8:78:31:ee:a3:97:66:45:8a:18:3d:
                    6f:df:c5:a7:f9:2e:47:0a:84:f6:53:8e:d9:d9:f2:
                    94:df:14:d3:b7:5f:e1:1d:45:28:ad:e7:7a:ee:89:
                    6a:94:da:32:32:16:bc:8e:6e:3e:80:84:e9:79:93:
                    20:df:d4:24:89:a9:a1:a7:aa:07:02:f3:a6:49:ce:
                    55:d9:02:1f:38:94:b4:64:3d:4d:6f:f0:a8:53:3f:
                    1f:d1:c0:8c:e2:5d:b0:e0:ea:ab:3f:f7:80:52:e9:
                    3d:ce:55:ae:38:fb:b0:19:ba:22:41:73:10:72:4c:
                    31:2a:5b:64:f9:d9:8c:b5:db:a5:e6:9d:1e:c2:11:
                    1a:05:49:91:d1:ba:78:e8:1f:d5:51:19:5b:1f:7a:
                    d6:4e:fa:20:d4:f2:cb:10:b0:8d:9f:6b:1d:a6:f1:
                    0c:84:e2:fa:cd:79:5c:4b:e4:6c:e1:5b:8b:a1:96:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:6F:EB:C6:8B:96:C5:01:19:5C:ED:72:FB:46:48:1D:87:95:3E
            X509v3 Authority Key Identifier:
                keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:79:b3:0d:29:73:e6:d5:f5:59:3b:c5:5c:3c:87:5d:7e:
         3c:22:f4:0c:27:15:86:61:0f:af:d2:5c:bc:95:5a:85:7f:d5:
         06:ab:5a:76:51:ca:76:f2:ba:d0:1c:93:1c:e1:26:16:6e:a0:
         78:74:2a:42:82:ce:07:1e:04:d3:08:44:5b:79:d7:48:ec:85:
         ee:10:42:bc:a0:31:ec:36:22:27:9b:91:de:a4:1d:b5:e0:c3:
         14:a3:c8:d9:51:5f:24:8f:26:f8:e5:89:62:27:98:b0:a7:35:
         ee:ca:b7:dc:7b:2a:a0:fb:4b:08:3a:c1:34:26:34:a7:5d:f0:
         cc:ab:60:b4:67:7c:9e:77:a1:e1:9d:75:0d:62:70:ae:3f:77:
         89:4e:7d:10:54:ac:34:68:6f:d8:81:9e:fe:9f:c6:e7:ae:79:
         2d:90:f7:b5:fb:cb:81:6a:01:fd:a1:0a:cd:08:bf:cd:7b:f9:
         39:38:c7:c3:6e:2b:7b:4a:60:c1:25:eb:da:4b:f7:1f:e7:27:
         da:bc:74:7f:ac:88:f3:3b:f1:a5:c7:cc:64:61:52:be:47:dd:
         ae:8c:29:00:68:cb:7e:64:33:05:9e:d7:d2:59:75:88:ed:64:
         a1:0e:b7:1a:87:38:9b:34:42:90:a4:6b:2b:79:1f:ab:46:42:
         81:30:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:04:34 2025 by rpki-client