This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File:                     Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier:          HJ+M3Iem8uBG0tdftwtcn8qW/cw2rYkCtp2hHT3rR1M=
Subject key identifier:   7E:38:93:0F:74:FD:62:71:4F:FB:2B:01:0A:62:59:FC:1F:E8:2D:BB
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       019AF0BF2C57CD37B66E3F57431EC9B4D721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number:          0C78
Signing time:             Fri 05 Dec 2025 23:00:51 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:51 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:51 +0000
Files and hashes:         1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: Cqr4BjgazwgTRdyX4zCpGbcCTAJ3kWj2eLZFtTtaGJo=)
                          2: piQLCnB2P_Ziu_cu-vigeTnpkCU.asa (hash: cn2oaHr5CFE2Bng3VhPMgV26fdtMuwLaMTiwxHB9DSg=)
                          3: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:2c:57:cd:37:b6:6e:3f:57:43:1e:c9:b4:d7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Dec  5 23:00:51 2025 GMT
            Not After : Dec  6 23:00:51 2025 GMT
        Subject: CN=7e38930f74fd62714ffb2b010a6259fc1fe82dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:6d:dd:53:1c:0f:21:b6:5e:17:c1:b6:7f:
                    1a:35:4b:f7:d8:ff:fa:8e:ff:79:52:36:11:1c:dd:
                    55:b3:e2:f6:56:d3:2f:3e:f1:22:33:dc:b9:b0:64:
                    e4:89:06:0a:e2:aa:e1:41:11:c3:3f:64:41:84:9b:
                    96:1b:20:8a:87:65:da:68:13:39:05:62:79:b4:0c:
                    72:9b:60:b2:bb:d0:7a:83:b9:22:4a:90:6d:cd:7e:
                    75:27:15:07:74:a0:3a:07:69:4f:6a:26:9e:68:ab:
                    14:82:75:57:fc:f2:9b:b1:6d:c1:bd:87:70:32:0f:
                    0c:6d:cd:f0:09:a9:31:64:9c:c2:68:eb:7f:c6:2c:
                    4e:db:05:00:a9:8f:c5:e1:e8:87:e6:b5:0d:d0:37:
                    2c:46:5d:9d:8a:37:5b:71:da:37:4f:06:33:81:30:
                    8b:9c:8b:ea:5a:b7:dc:e7:4e:ff:46:26:5f:93:51:
                    fd:25:ad:4b:f2:bb:c1:2c:0d:b9:b8:df:63:28:2f:
                    e5:89:51:1f:5e:77:1e:5a:59:38:fd:55:c2:09:78:
                    4b:cf:8e:4c:00:d0:bd:a4:1b:bd:8f:eb:b9:29:18:
                    8b:09:fc:a8:84:61:42:f3:49:73:f1:02:5d:de:0f:
                    75:e8:4d:d8:94:6c:ab:5d:3e:36:28:72:f0:ab:f9:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:38:93:0F:74:FD:62:71:4F:FB:2B:01:0A:62:59:FC:1F:E8:2D:BB
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:65:e9:2f:95:d6:97:bc:5c:eb:4a:e1:2d:41:2a:08:30:
         6f:f3:a8:3e:ce:18:2a:49:14:90:c5:ed:ff:03:56:e4:11:15:
         64:31:b4:63:ed:d6:82:a1:bb:c9:91:f9:22:0b:2b:12:b3:ff:
         b3:9a:8b:f6:2a:87:8c:1f:80:3f:f0:00:67:1b:aa:27:19:08:
         30:ba:c7:8f:cc:0a:6c:23:e9:d3:06:cf:4d:e2:c1:25:3b:f6:
         d9:c0:0d:67:ef:3c:7f:04:19:c2:c2:bb:39:4f:43:3b:7e:b9:
         f4:7f:78:9e:2e:ff:69:ce:39:b4:e3:3b:fd:b6:98:e7:a2:8b:
         9a:fc:b7:73:a5:af:35:fa:21:74:f5:b5:01:84:74:3b:ba:c2:
         c2:e2:0e:10:f6:cf:bf:af:5d:97:4a:8e:55:26:99:cb:67:f8:
         22:ed:33:4a:15:10:48:45:1d:6d:50:6a:9d:dc:d4:76:09:35:
         97:01:97:08:66:eb:9c:ee:b1:d2:0f:69:5e:41:b1:41:ab:8f:
         96:b5:d3:ba:27:60:8a:2e:fa:0e:6d:68:28:01:88:9e:fa:10:
         40:aa:89:a5:4b:3e:26:ef:4c:e7:d1:49:47:d5:27:78:f7:d5:
         8c:de:da:1c:df:82:5c:75:93:4c:c2:b3:e8:c9:79:f6:0a:48:
         14:a6:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:55:12 2025 by rpki-client