This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File:                     TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier:          EXEd2BjzKAhzNuTXO3xFq91xJyQSa+VB583pAn+YAn4=
Subject key identifier:   E6:56:BE:53:BF:01:18:0E:7F:35:32:76:F6:D4:C9:AB:84:D7:1C:3E
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer:       /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial:       019AF12D934114691876361DBB18CB0B8A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number:          0720
Signing time:             Sat 06 Dec 2025 01:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:27 +0000
Files and hashes:         1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
                          2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: B2gRDtfz4XYAbX9FqjJh6wfxjjgmXm4bBYFREgNoaYE=)
                          3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:93:41:14:69:18:76:36:1d:bb:18:cb:0b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
        Validity
            Not Before: Dec  6 01:01:27 2025 GMT
            Not After : Dec  7 01:01:27 2025 GMT
        Subject: CN=e656be53bf01180e7f353276f6d4c9ab84d71c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:a3:6d:3b:a6:a0:b2:e4:3c:91:8f:2a:20:
                    4d:d1:9f:bb:85:e3:56:84:9f:65:f3:40:0c:ab:1b:
                    d7:d6:bf:e8:90:ed:80:c6:77:58:e1:67:4b:82:99:
                    20:4a:9f:e0:45:b2:f0:0b:ef:ca:4f:d6:a0:df:56:
                    53:a2:2b:29:7c:bf:10:e9:eb:ed:25:56:bb:55:10:
                    42:ca:df:54:bd:3a:f9:8a:7c:c7:7c:14:45:b8:e7:
                    61:7c:94:9a:63:af:5a:7d:08:0c:a2:c4:73:55:7f:
                    26:6f:fc:d8:6f:13:5b:57:c2:15:a8:4e:ed:98:d6:
                    72:53:f4:30:b7:ab:a0:71:7d:35:19:83:43:23:8e:
                    93:9a:91:d8:49:a1:df:ae:32:8a:d1:29:4e:61:61:
                    88:d4:19:7a:f8:91:54:f4:91:bc:89:c6:37:a8:a5:
                    af:f5:95:b3:49:8e:b9:db:d0:b5:71:46:14:f9:64:
                    6b:9a:63:9f:ad:de:47:c5:39:5e:25:99:04:d1:b9:
                    bc:9d:d9:bf:80:be:d3:c5:3f:6f:f1:e0:5f:92:d9:
                    2b:03:ab:a3:91:68:9d:ef:bd:e5:72:a4:8e:fe:27:
                    55:51:15:ca:2b:89:6f:3c:5e:de:bf:5b:a3:b1:aa:
                    cd:82:64:47:b3:39:aa:f4:48:19:d1:19:99:aa:79:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:BE:53:BF:01:18:0E:7F:35:32:76:F6:D4:C9:AB:84:D7:1C:3E
            X509v3 Authority Key Identifier:
                keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:fc:ee:ec:3b:bd:24:54:17:12:53:9f:fb:75:45:25:a7:
         c2:9a:d3:d0:52:9e:65:bc:7d:10:5e:f6:5d:14:fd:47:cb:b5:
         9f:a7:fc:88:fb:e0:55:16:af:2e:ed:87:5d:7a:05:31:fd:f3:
         2c:68:64:02:ad:c2:74:38:ca:8e:91:20:49:37:b9:a3:d2:ba:
         70:ea:b7:0c:16:5e:2d:70:34:8e:47:6f:37:21:a1:cc:8b:45:
         b3:fd:df:b1:da:a2:a3:a4:f1:b1:30:af:25:2b:e0:48:44:ce:
         0c:6f:20:3d:4b:9a:2d:f5:11:3e:a7:b2:81:35:bf:b4:46:6c:
         f6:91:21:ec:e9:38:0f:61:1f:7e:a8:6b:e7:da:4e:34:e8:28:
         7a:bc:19:b5:4a:11:13:d0:26:f7:9a:35:60:77:04:ab:05:91:
         99:f0:e1:46:a0:04:e3:60:5f:15:48:74:6f:fc:5e:bf:08:f1:
         7c:98:01:23:34:22:f6:cc:2b:e5:ee:bf:13:2a:5c:41:e4:42:
         ea:b4:b0:95:7a:f4:f4:11:09:4f:6a:ad:3f:ef:8f:93:fb:c1:
         00:d8:4c:3e:58:40:e4:19:5c:93:aa:ad:a7:1b:34:24:b3:81:
         e8:19:9c:dd:83:69:0c:df:0a:b9:de:cd:fc:11:9b:89:b0:e7:
         95:64:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:02:57 2025 by rpki-client