This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          U+VaI0lKaxH3w3GnivuX69fuomUxraE/YU9Df7o0FXg=
Subject key identifier:   EF:E9:74:3B:71:E7:C3:BB:CB:DB:7A:39:3C:E1:58:61:EF:4C:03:4F
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       019AF19A92145990FE132286592400515C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 03:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:30 +0000
Files and hashes:         1: 0_4kPqijH_S1Eq86-B5t4Qptkkc.roa (hash: monnJnatCyTOeVv1VvBMMHzgkVsFi5krNSX8ZQ1sFsY=)
                          2: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: 1zustDLnZPeAzLUBWkl4LePBoqkzKxkHAkU2BdfDvsk=)
                          3: F4UI4ybOifBfn-xOfyHAde2Mj9c.roa (hash: 0PCH6BF7/3q43D682K2lKa/7ZVqoTmH59+HT5oGtsRc=)
                          4: _PqP39FzftfO-7VLMM2dmTLrMcs.roa (hash: CJ+28nkgf4oNGdqZSE90eYJxAT+csrK+YiNrA00VE1w=)
                          5: fcPpzxOqbrccUQadoe87Uad0TIE.roa (hash: bZNC4F18tX7DhHmEHjEaGHkxFk5LtxXBx5M2eycD1yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:92:14:59:90:fe:13:22:86:59:24:00:51:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Dec  6 03:00:30 2025 GMT
            Not After : Dec  7 03:00:30 2025 GMT
        Subject: CN=efe9743b71e7c3bbcbdb7a393ce15861ef4c034f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:91:c9:15:eb:80:32:d9:bf:1b:91:54:27:
                    1b:c5:81:f4:1f:a6:b7:92:d8:2c:00:68:19:3d:ae:
                    4c:4d:6e:c7:2d:b8:91:21:39:9d:48:b2:70:e7:ac:
                    c5:8a:08:45:cb:61:64:96:90:9d:0f:f5:f8:26:96:
                    73:23:24:c7:27:78:a7:bd:92:47:c1:2c:59:fd:06:
                    81:24:f1:48:b2:09:47:cb:2d:de:d0:75:4c:61:68:
                    0b:b4:c9:18:49:02:70:45:5c:81:39:47:37:51:ea:
                    15:45:3a:6d:dc:2a:db:78:d5:4d:56:52:6f:d2:77:
                    37:48:81:80:07:5f:87:73:42:69:30:a8:64:ce:9f:
                    8c:6c:e3:1b:2f:76:10:a1:a2:e2:04:eb:f0:2a:a0:
                    65:65:6f:96:e3:72:2f:7f:ee:9a:0d:bd:53:63:d8:
                    ba:95:22:51:78:7a:8b:68:47:8f:d3:9e:97:e5:fc:
                    5a:06:93:ef:a1:f7:e4:f3:15:94:3e:f0:4d:5c:66:
                    59:f7:47:83:e8:ac:dd:00:8c:98:69:38:20:8d:1d:
                    d4:e2:5f:fc:52:d3:82:c8:64:f5:33:5e:3a:b8:3e:
                    57:46:2b:f9:42:da:c0:23:39:e7:b5:a2:70:cd:6e:
                    a5:7b:5f:e9:77:92:fc:ae:40:9e:b3:b3:0c:c8:6d:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:74:3B:71:E7:C3:BB:CB:DB:7A:39:3C:E1:58:61:EF:4C:03:4F
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:14:9e:68:9e:41:ae:49:ce:81:54:62:10:87:e8:7a:1a:4f:
         9b:5f:28:87:59:dd:38:f3:4a:29:01:5f:b3:8e:3b:58:dd:e2:
         27:fa:51:66:7a:84:cf:6c:b4:44:a3:34:2d:13:c5:77:59:55:
         41:46:a4:d8:18:07:ed:f0:8d:b1:38:b5:25:44:2b:ad:97:76:
         3f:4e:fc:0d:aa:85:86:40:33:b7:74:13:46:05:4c:4c:97:b3:
         27:6e:3b:a9:20:79:62:3a:84:3d:0f:11:cb:9d:8a:6f:f4:ea:
         d7:69:1b:ca:3b:85:6f:53:69:1a:46:a6:72:5c:ac:1b:fc:2f:
         4f:e3:e0:9c:7c:c5:b2:d2:9d:8c:15:48:c7:fc:4d:1b:af:c9:
         31:f0:88:ce:cd:86:aa:a7:b4:fc:67:6b:ec:41:3b:77:e2:e8:
         be:b0:99:49:1d:15:94:c1:1a:8b:2f:da:a3:35:13:e8:c8:b8:
         f1:6d:94:ab:f3:9e:99:20:e1:42:bf:8c:0d:33:bc:c0:23:9c:
         6f:4f:60:20:13:26:fd:e4:04:74:aa:eb:44:c5:af:96:69:ed:
         11:b3:fc:8e:8e:41:d3:3a:4d:c0:aa:42:18:2e:98:6a:e4:0e:
         6b:d0:02:2c:05:c3:e8:b6:1d:a6:58:30:64:c8:1b:68:1d:be:
         3b:77:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:22:47 2025 by rpki-client