This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          SEvx2Jmo6dSvAF6V4Z16F92vDiacfK0H7vZgQaYdWlQ=
Subject key identifier:   03:C5:56:DF:AE:31:DF:DA:42:B2:41:24:33:39:86:1F:60:42:54:8E
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       019AF464FFA20FE1BCACEAA80CC461BE4AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          0B11
Signing time:             Sat 06 Dec 2025 16:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:50 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: s5gk3hF41jJ08kUNXYhOcHDNISfbsxe82GxemS6O5p0=)
                          2: 0t8O5fg1Ycbbc11AptBXKz8zo30.roa (hash: I6wB2R0RuuJIFFD2Q/4TtNXW1MxeFWyONoHibXaEdaA=)
                          3: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
                          4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
                          5: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
                          6: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
                          7: JfF0v8eby0BQNtVREEaJFT1Zxcs.roa (hash: OQTTsSrZcqdOC8lDs04JBaSkoqVL61gLZ8I1J00GtDk=)
                          8: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
                          9: bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa (hash: 1N2udKCYu0d+0ddwjQonUl6aLmfYMfYwRiupNuK5mRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:64:ff:a2:0f:e1:bc:ac:ea:a8:0c:c4:61:be:4a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Dec  6 16:00:50 2025 GMT
            Not After : Dec  7 16:00:50 2025 GMT
        Subject: CN=03c556dfae31dfda42b241243339861f6042548e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:11:61:b4:33:ca:3d:ec:b1:d2:72:ba:39:
                    f3:39:9a:3d:b8:49:1e:f4:28:e4:46:fd:21:02:61:
                    96:18:e2:89:25:cb:cc:21:ed:0f:38:75:9c:49:a3:
                    fc:ca:41:16:b9:37:72:94:34:fa:b9:1c:6d:61:72:
                    d4:dd:7a:7a:74:4d:3f:97:bb:24:3b:e1:88:a4:b8:
                    31:78:e3:27:32:96:00:10:64:67:6f:be:dc:b3:f0:
                    72:66:a8:1d:7e:47:3d:f8:9e:a8:bf:17:cd:56:08:
                    51:ac:76:14:fe:c3:fe:9f:f9:bc:46:3d:31:82:ca:
                    ca:c3:d6:05:0a:bc:cd:fe:b3:32:c5:e2:a7:87:4e:
                    2c:dd:ff:97:83:1b:5c:6f:18:4c:cb:9d:46:69:98:
                    ce:f7:73:39:e5:f0:dc:bd:e3:2c:01:3c:e3:3e:f5:
                    9e:80:92:71:0f:e1:1c:b1:92:62:a1:08:be:d6:04:
                    fe:35:fa:11:d2:8d:60:15:68:5e:1e:f0:55:31:49:
                    fd:7a:cd:99:c0:51:b9:a8:87:2d:76:9d:2c:bc:48:
                    1a:00:31:30:bf:9d:15:12:7f:02:ec:d5:06:0c:c2:
                    95:c5:6a:90:56:54:bb:7e:91:9f:7b:73:c8:82:9c:
                    97:94:06:73:65:0d:cb:39:2b:5d:0b:31:bf:c8:fa:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:56:DF:AE:31:DF:DA:42:B2:41:24:33:39:86:1F:60:42:54:8E
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:9b:40:5c:4c:c7:0b:e1:fb:9a:85:8a:e0:1d:18:99:68:
         37:39:9c:d5:b3:e3:4e:f2:ab:4b:0b:a7:80:65:ab:eb:a5:8d:
         de:a3:e1:b5:c6:74:8a:0c:36:d8:cf:06:20:a8:f1:10:8f:ac:
         a4:ae:70:44:dd:fe:5e:c4:3a:6d:a7:dd:c7:e9:4a:e7:14:da:
         57:12:13:58:04:74:cf:20:6e:9a:44:5c:b6:4b:bd:c1:c7:71:
         ac:46:7a:8b:51:d9:af:e2:2f:f4:ff:6a:01:1c:da:1c:bf:03:
         ac:c8:92:9d:da:da:c1:d3:54:54:79:48:51:93:a7:dc:5f:92:
         7f:f1:c2:c5:a6:68:9a:d7:9a:bd:a6:57:9f:8b:d8:b3:2b:f2:
         8f:69:3c:39:9f:06:6a:ae:e2:91:a7:a9:25:88:ee:0e:de:c2:
         93:8a:95:7c:b6:f7:ff:d4:43:27:a8:71:fd:01:88:fe:7d:2f:
         89:cd:1a:15:3b:5f:3d:60:09:c6:66:26:56:c3:ef:ba:da:53:
         6a:da:88:78:9a:25:ad:51:c1:c2:d1:f7:6e:08:54:c9:fd:34:
         ea:ea:7a:f1:d9:b4:06:6a:6a:e7:57:b0:6b:98:e5:3d:8a:cc:
         b7:b1:c5:54:91:b6:6d:bf:9d:42:cd:32:e6:67:a9:d7:1e:a9:
         59:b6:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:01:10 2025 by rpki-client