This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          zrxTA9vZoe6u/1iMUB1OR9BzL4DXJRMGdzpA/sZoaEY=
Subject key identifier:   E7:D7:E5:CF:FE:93:57:4B:D8:F9:DA:24:E9:8D:FE:BE:38:8F:3D:06
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       019AF12EEBDAC8CB49E0776DC528E8AF7338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          06FB
Signing time:             Sat 06 Dec 2025 01:02:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:55 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:55 +0000
Files and hashes:         1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
                          2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: pDMTYML3JyIfmMWaZMcFQ+EC8PtlRRcAX3NEg8cWmtg=)
                          3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:eb:da:c8:cb:49:e0:77:6d:c5:28:e8:af:73:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Dec  6 01:02:55 2025 GMT
            Not After : Dec  7 01:02:55 2025 GMT
        Subject: CN=e7d7e5cffe93574bd8f9da24e98dfebe388f3d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:a8:f4:8b:a7:9c:a2:36:8d:6f:29:b2:7a:
                    7e:f1:3c:c1:12:64:9f:25:82:84:c0:36:ac:2e:f6:
                    1f:17:45:ef:31:38:98:39:b0:e2:c0:03:90:f2:74:
                    92:2c:65:d8:8f:18:ec:d6:c8:ff:f1:5c:01:35:a1:
                    36:8a:5f:08:76:15:4b:7c:83:e6:06:49:80:df:9c:
                    8f:29:c6:42:e4:d1:67:0a:80:67:d0:d5:98:36:7a:
                    2f:62:4a:73:55:83:34:f3:46:01:f1:09:a3:a7:62:
                    40:89:ba:0e:4d:40:32:80:a6:60:ff:a1:09:50:bd:
                    34:7c:20:93:a8:34:94:4d:7a:54:81:2b:16:63:6a:
                    1d:71:c1:16:61:6a:d6:ee:39:d8:8b:04:ac:27:e3:
                    ed:f9:e3:06:36:85:aa:d7:33:aa:66:15:69:3b:56:
                    54:7b:a8:17:12:04:f8:28:ef:ad:af:84:ed:27:86:
                    fb:17:20:b6:e4:32:b2:9c:02:c5:fc:90:8c:b0:4f:
                    19:4c:76:1a:b7:87:e6:90:62:7e:fa:2b:ee:ae:27:
                    db:e3:03:6c:5b:d9:8e:12:ad:42:72:81:ee:80:bd:
                    44:a4:05:a2:04:33:21:7b:64:e1:92:aa:bd:77:56:
                    16:a3:e4:86:10:0d:da:e5:98:76:b3:56:dc:6e:c0:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:E5:CF:FE:93:57:4B:D8:F9:DA:24:E9:8D:FE:BE:38:8F:3D:06
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:13:6d:2c:31:23:15:1b:87:e1:47:48:82:09:24:c3:1d:1d:
         fd:80:ba:fc:49:cd:29:a4:d8:a4:ea:49:1c:fe:16:6c:b3:58:
         1e:3c:57:ef:49:4a:0a:ba:f1:45:f9:28:57:0b:73:8a:6d:3c:
         62:5d:23:d7:27:88:72:0d:29:81:fe:e6:29:c7:7e:a0:39:95:
         c5:5b:4a:1a:fe:e6:c7:17:94:a4:22:03:bb:01:d1:f9:d0:47:
         c6:09:d8:db:49:4d:d0:b4:34:59:33:e6:f9:2b:96:26:5c:b5:
         6c:96:d1:f3:e3:d2:db:e1:74:b0:1a:4d:d0:49:44:06:db:5a:
         33:66:6a:1f:e5:ae:59:ea:35:2e:87:f8:0a:25:9a:66:ee:4a:
         b6:54:09:ac:ae:08:38:f6:57:16:ec:37:37:77:4e:10:38:01:
         4c:7f:f3:44:31:60:b7:40:25:fc:ad:f2:91:5c:d8:e4:3a:db:
         99:de:0d:33:27:fb:4b:01:11:0d:08:1b:ab:03:6e:b8:c2:5d:
         78:b8:04:d7:3b:2b:77:50:95:e8:2d:e3:7d:e6:10:73:a5:1f:
         d1:9f:bc:50:6c:3a:44:98:b2:08:ba:97:b0:3c:90:e0:a1:00:
         db:5a:fe:30:67:99:98:12:42:65:35:e6:d4:19:5b:5b:d3:e2:
         09:b7:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:13:41 2025 by rpki-client