This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
File:                     a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft (raw, json)
Hash identifier:          zniyMdPNgeBeyuYFXRJ/Ux5NuWEV0Hu3NdkvTxmn5O8=
Subject key identifier:   E8:F2:D1:59:A7:6F:EB:88:85:D3:8E:AF:B1:5F:3C:C8:EE:DF:5D:20
Authority key identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
Certificate issuer:       /CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Certificate serial:       019AF19AB9504B1EC0EB0A3E9F2023C0BCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
Manifest number:          0445
Signing time:             Sat 06 Dec 2025 03:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:40 +0000
Files and hashes:         1: 6ArSrzmkWIZDmYIRBoxk-EjJq_k.roa (hash: S1AZ4YBXbed4CMbdXMK5lgtU/yrbUTPwd2+O2M1CSZk=)
                          2: a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl (hash: rbJLy4oEBNs1a1MzQhVnFY/lNN3UOq1/dJ5TLJJ0Kts=)
                          3: kPZ8ETM6lNG0lavwYwIQDcxYl1g.roa (hash: SlFNEFoyK1DX28n0FPr3kQ7LoACCcNAT7qXaupdbmVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:b9:50:4b:1e:c0:eb:0a:3e:9f:20:23:c0:bc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
        Validity
            Not Before: Dec  6 03:00:40 2025 GMT
            Not After : Dec  7 03:00:40 2025 GMT
        Subject: CN=e8f2d159a76feb8885d38eafb15f3cc8eedf5d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:9d:94:d2:04:e8:55:57:24:08:06:2e:55:
                    be:b1:e3:dc:47:86:62:f2:64:ba:51:af:1c:16:54:
                    e6:dd:4b:36:f2:bc:db:21:a0:93:73:3e:b3:ab:55:
                    86:83:14:44:d1:2e:ff:e3:66:8b:18:e0:22:b1:b3:
                    79:c4:03:9f:99:9f:06:2b:00:21:ed:4f:a7:39:8d:
                    d1:ea:14:bb:b3:dd:96:3d:51:92:33:13:bf:85:8d:
                    6a:fd:fa:c5:4e:02:b0:76:71:d1:ae:1a:40:15:ca:
                    a0:4c:1f:56:55:b0:ef:b6:30:a4:1e:65:5b:f4:40:
                    f2:99:a0:a9:2f:69:87:33:17:0b:2e:20:6e:70:14:
                    de:c0:9c:6f:0a:fb:4c:fe:ea:8e:44:c7:eb:4f:f6:
                    8c:2e:9f:74:6c:41:e6:82:55:94:01:8d:ba:70:77:
                    6f:f8:44:78:2f:79:4c:a7:08:aa:85:8d:d3:00:5f:
                    33:49:7c:7a:23:d6:ac:e4:26:3e:17:4c:f8:d4:ba:
                    7d:9b:ed:0e:29:25:2c:c7:7b:bd:d3:cb:bc:ae:6d:
                    a4:33:2d:6a:44:0b:6f:32:82:fd:13:92:a9:4b:43:
                    8d:4a:4b:80:15:72:62:fa:2d:93:2c:0a:e6:2e:cc:
                    d4:47:db:45:b9:f2:46:a9:e0:a4:08:c3:92:bd:ac:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:D1:59:A7:6F:EB:88:85:D3:8E:AF:B1:5F:3C:C8:EE:DF:5D:20
            X509v3 Authority Key Identifier:
                keyid:6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:79:b2:4c:02:0a:76:ec:8c:8c:71:60:00:f6:62:97:be:
         c8:8d:c3:56:2b:ee:e5:91:27:13:7f:32:11:c2:8e:75:dc:6f:
         5b:64:f1:ea:4b:0c:0e:ef:fe:a1:57:77:f7:b3:fd:79:de:86:
         b6:7f:b0:f4:2f:c3:66:95:cf:95:b6:f2:5f:13:ab:f5:8b:c6:
         96:e8:64:9c:5a:82:34:fd:b8:92:67:96:6b:5f:8c:10:b7:61:
         33:76:73:93:7b:eb:b0:88:3b:f3:61:f1:ab:18:be:bb:dc:48:
         cf:8f:b0:11:44:28:1e:e8:38:e0:73:7f:da:6d:f4:65:cf:70:
         3e:ef:1f:07:68:47:97:d3:dd:76:bf:cf:e5:c5:4e:bd:47:0e:
         76:b4:a4:c5:52:62:7a:f5:24:f4:42:d5:54:0d:72:cf:36:33:
         97:fc:9d:be:e7:64:8f:a0:ca:bc:f2:5b:6a:6e:f6:bf:d3:96:
         e9:d4:2e:97:82:cf:a4:1b:ae:38:70:8d:07:54:57:b0:e3:4c:
         60:1f:65:a7:6e:18:1b:85:98:6a:01:10:f7:e4:c9:85:ff:10:
         db:14:59:69:6e:29:af:8b:a3:07:d2:8d:69:7a:06:cc:0e:6b:
         81:13:a9:a4:62:d5:e0:52:1e:8c:26:8c:4b:fe:f1:25:41:44:
         15:fe:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:33 2025 by rpki-client