This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File:                     NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier:          /y9fdrROt7jsAM3M8TvMsHj9uSY6IJbD0NdXR9fSqRA=
Subject key identifier:   17:9A:9A:47:57:4B:14:1A:E9:F8:2A:A5:99:C5:B8:62:FC:85:4E:1F
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer:       /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial:       019B2CD3C315E6C5EF4514609E316DC582EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number:          048D
Signing time:             Wed 17 Dec 2025 15:00:33 +0000
Manifest this update:     Wed 17 Dec 2025 15:00:33 +0000
Manifest next update:     Thu 18 Dec 2025 15:00:33 +0000
Files and hashes:         1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: Gtn/iuLDxGB6HGEzOmOHVv+UZ54DeVoo5scFUpuCneM=)
                          2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
                          3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:d3:c3:15:e6:c5:ef:45:14:60:9e:31:6d:c5:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
        Validity
            Not Before: Dec 17 15:00:33 2025 GMT
            Not After : Dec 18 15:00:33 2025 GMT
        Subject: CN=179a9a47574b141ae9f82aa599c5b862fc854e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:01:79:28:ac:e8:d0:4b:a5:26:c1:cf:3d:
                    56:95:3e:4b:58:e2:b0:41:0a:97:e1:c3:69:59:7f:
                    0f:1f:e4:4b:51:08:b7:0a:4e:19:83:2e:32:07:53:
                    92:67:25:98:f5:d0:5e:38:2e:99:4b:a0:15:c0:46:
                    9b:a3:05:94:e2:1c:83:23:04:66:eb:d1:fa:c2:bb:
                    47:24:ac:eb:d4:60:1b:32:08:ea:ad:71:80:d3:02:
                    2e:54:70:25:9c:2a:ef:94:fd:75:ec:c0:e7:d1:cf:
                    59:89:23:3f:95:17:d0:38:a6:84:56:7e:f9:51:4f:
                    31:04:79:9b:23:9e:18:68:89:a7:14:12:be:d9:10:
                    b6:1d:2a:05:94:e5:23:d2:d5:34:08:63:e4:f5:bc:
                    b3:4b:1f:25:a2:79:b2:c4:7c:f6:de:73:ab:13:8c:
                    df:f1:a9:b9:1b:e5:53:b2:62:cb:3a:93:fa:80:f7:
                    a3:15:a2:be:fa:dd:46:37:48:7e:7e:a4:6d:99:2f:
                    f5:87:eb:96:8b:d0:42:0b:06:40:1d:3b:48:e1:ad:
                    73:0d:46:3e:f0:00:69:3f:df:8c:10:69:5b:24:36:
                    d1:37:99:2e:65:1b:4a:f3:94:7f:bf:29:b9:dd:70:
                    ce:93:9b:1b:43:66:2f:54:aa:76:8d:2d:a8:17:f6:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:9A:47:57:4B:14:1A:E9:F8:2A:A5:99:C5:B8:62:FC:85:4E:1F
            X509v3 Authority Key Identifier:
                keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:d3:ac:3a:40:de:00:39:b0:0e:d5:63:65:88:34:27:27:
         99:7b:0e:b0:78:65:ae:ef:c8:79:08:0b:f4:b5:97:8a:36:b2:
         ab:cb:fb:b1:88:03:94:58:c0:fe:ec:8e:38:0b:4e:59:fe:0d:
         69:ba:67:fd:4b:4b:1d:ad:49:57:3a:0d:5d:a9:b2:a5:1f:dd:
         f6:70:b4:b7:2a:a8:9f:bb:a4:5f:a4:3e:2a:e1:9a:b7:20:84:
         e9:29:da:98:a5:1d:fb:8d:10:1b:a6:08:b4:b4:58:ab:03:46:
         e1:2f:92:ac:fd:37:ae:5f:07:86:51:55:23:ae:ae:45:5a:c0:
         7e:4d:24:93:b1:00:c2:5e:ec:6b:a2:08:5e:97:a7:e8:5e:8e:
         d5:ce:81:fc:ed:89:a8:c1:6f:bd:09:18:d9:7d:79:e7:96:32:
         b5:4e:97:76:15:dd:8e:7f:5a:b9:65:d4:05:54:76:d1:62:f4:
         c0:9f:0a:61:d2:a8:01:fa:62:17:d6:5e:65:96:57:26:47:11:
         91:38:6c:77:89:e1:83:9b:ef:b5:eb:63:4a:fd:02:00:60:7a:
         1a:74:be:5c:51:68:4a:75:cd:65:cb:c9:5d:44:82:92:45:7b:
         69:64:0c:51:60:84:83:51:45:02:cf:6d:93:af:8f:1b:5d:42:
         ae:72:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:02:27 2025 by rpki-client