This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File:                     njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier:          6D2qBAXSNikvncForyabDL0sxAEkyLkUNyC4vfPbDT8=
Subject key identifier:   57:E6:25:55:B4:DA:34:BF:93:94:E3:1B:62:47:57:20:EA:CF:7E:8C
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer:       /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial:       019AF209727C5983B89B27B40DBA5AF1EF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number:          1079
Signing time:             Sat 06 Dec 2025 05:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:36 +0000
Files and hashes:         1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
                          2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: WeGlI8lii1JbQBwHBKOc6Z53GQkpLiSyx/EjLBo3DC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:72:7c:59:83:b8:9b:27:b4:0d:ba:5a:f1:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
        Validity
            Not Before: Dec  6 05:01:36 2025 GMT
            Not After : Dec  7 05:01:36 2025 GMT
        Subject: CN=57e62555b4da34bf9394e31b62475720eacf7e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:02:14:ad:88:10:7e:cf:a4:d8:c4:77:3c:65:
                    14:10:f8:32:a9:76:95:c2:b6:2f:06:1a:58:bf:42:
                    61:91:71:c2:0f:ca:41:c6:7a:96:e5:f6:83:6c:61:
                    7e:c8:2a:18:b8:53:7f:e2:b8:47:03:34:a9:05:f8:
                    d4:94:de:b6:0a:2e:1a:67:f2:68:0f:2a:f8:c8:15:
                    cc:bb:50:e0:ec:80:45:aa:d6:ff:3b:86:11:73:7f:
                    c9:16:83:bf:97:d9:6a:1d:2f:e5:ff:a1:3f:5f:42:
                    01:5b:0f:1f:43:d1:26:14:07:ea:33:30:bf:4a:86:
                    4e:9b:56:bf:d5:0b:83:c5:b3:bb:a0:8f:35:1a:4f:
                    66:7a:a5:f3:f7:10:f8:bb:4c:19:3c:9a:27:46:c5:
                    2e:82:62:48:29:df:6c:2b:2e:51:c0:c3:25:68:e4:
                    8f:33:f1:68:dc:ba:9f:75:c6:de:c6:99:c1:38:97:
                    c8:ce:2b:ae:02:f1:10:09:ff:73:fb:2a:4d:98:04:
                    de:46:f4:e4:c1:c5:ad:57:46:59:89:3c:64:75:2d:
                    04:1d:e9:8a:03:77:6f:e6:af:42:7c:83:0d:d7:f4:
                    1a:34:02:58:9c:40:7f:d4:67:7b:dc:f5:f4:3c:6d:
                    9f:3e:a6:63:ca:20:67:84:95:9a:3f:06:f9:17:b6:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:25:55:B4:DA:34:BF:93:94:E3:1B:62:47:57:20:EA:CF:7E:8C
            X509v3 Authority Key Identifier:
                keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:78:6c:0b:f5:74:c8:eb:85:f0:40:2e:30:5a:7b:cb:5d:d0:
         77:7f:e1:bd:50:6f:d0:cf:78:ae:30:e6:7b:93:9d:9d:20:ac:
         30:95:b9:13:39:9b:7e:56:1e:10:84:85:9b:22:a5:57:ae:d6:
         28:e2:e6:e4:ed:37:b9:ea:90:ff:54:11:ce:9d:e6:4a:76:fd:
         b9:68:b1:88:54:1e:9f:54:05:84:cd:90:f4:b5:d0:80:c6:8d:
         a7:c3:c4:6f:f4:63:8d:36:75:4f:aa:d8:a4:57:a4:79:f1:4a:
         0a:39:80:b2:73:64:f6:63:5c:b4:fb:7b:a4:f4:ae:3c:c7:6d:
         8d:63:2c:af:d9:6e:4b:d6:64:21:b6:ad:93:f5:30:a4:66:cd:
         3f:69:9d:84:9f:4f:59:d7:06:b6:2b:eb:09:a3:96:41:52:c1:
         58:28:18:60:83:b4:f9:71:0f:ea:f4:eb:d4:f0:a9:2c:ff:45:
         d1:55:b8:fe:cd:7d:ac:0f:20:09:36:21:c6:3e:00:d4:65:30:
         ef:91:76:c6:a2:c3:4d:0c:09:83:ba:b7:f5:4f:e6:d5:02:36:
         da:3a:2e:43:37:bb:14:38:78:10:52:f4:a6:8d:f6:74:08:2f:
         78:be:5d:0f:56:43:c1:dc:6b:e3:10:6f:11:da:53:19:08:88:
         ed:58:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:47 2025 by rpki-client