This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File:                     Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier:          Hugbk2ITCc9NHgdpwswMvtdLkFQYiaicZQr3fBCfH6A=
Subject key identifier:   EA:8A:35:0C:AA:9A:D6:EF:33:CB:FE:01:5C:C0:BF:B2:71:8E:13:39
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer:       /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial:       019AF3C09255207833E68FCA18B19ED1B3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number:          16F9
Signing time:             Sat 06 Dec 2025 13:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:15 +0000
Files and hashes:         1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: RNPFgTbuoacNfIuGe8FKFd6uo3F8yZ20/e3FYt0BLrE=)
                          2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
                          3: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (hash: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:92:55:20:78:33:e6:8f:ca:18:b1:9e:d1:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
        Validity
            Not Before: Dec  6 13:01:15 2025 GMT
            Not After : Dec  7 13:01:15 2025 GMT
        Subject: CN=ea8a350caa9ad6ef33cbfe015cc0bfb2718e1339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:af:31:6b:e5:34:8e:b8:a0:ff:2a:15:9a:
                    f5:3e:d8:ad:e6:c9:2c:09:68:7a:a7:7b:00:38:0b:
                    3e:f2:be:54:44:89:cc:bf:ac:8d:e8:c9:fb:d3:44:
                    d4:e1:41:73:0d:8a:ad:ca:85:71:b0:10:43:7a:c9:
                    0f:97:34:dd:ed:0a:e0:22:ad:eb:50:6e:b5:1d:83:
                    7b:09:bd:3f:e3:52:42:06:cc:e3:ef:4c:ed:aa:c0:
                    3c:b4:81:6a:38:16:33:57:a0:62:68:e8:26:ff:3d:
                    fd:5f:33:62:7c:58:6e:f9:03:af:b5:51:73:d2:90:
                    59:ff:5d:16:67:d1:3e:20:a5:2f:df:13:8b:96:14:
                    85:4f:70:0b:8c:4a:50:f2:c6:02:47:38:be:91:cc:
                    6b:61:49:bd:ff:6a:c4:c7:ae:7d:81:6e:42:57:03:
                    ff:b8:8e:06:19:62:9d:30:3e:af:5f:40:c6:43:71:
                    47:ce:84:60:ce:70:31:71:3d:8d:f6:e2:e5:2e:ad:
                    7c:65:82:bb:33:73:7d:52:ed:2c:1f:20:74:49:40:
                    a2:f5:b6:18:b8:b2:33:50:8e:3b:2c:60:e9:46:8e:
                    c2:87:fc:34:2b:84:75:4e:ad:7a:15:af:c0:4a:5b:
                    71:73:5c:86:a2:e6:fc:0a:96:c8:c4:16:e8:96:5b:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:35:0C:AA:9A:D6:EF:33:CB:FE:01:5C:C0:BF:B2:71:8E:13:39
            X509v3 Authority Key Identifier:
                keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3a:c4:07:9b:0d:fc:31:ab:1c:62:25:b9:a8:a4:fd:0f:0f:
         dc:8d:bb:0b:d4:fd:b3:b5:29:47:f9:85:9c:63:0d:16:e2:a3:
         8e:3f:74:b2:26:97:1f:be:af:f3:15:b0:e9:d9:b9:53:8b:f3:
         b4:78:df:ba:ca:9d:2d:92:d6:fa:04:86:15:8c:8d:46:ac:99:
         82:82:45:a3:9b:1f:31:f3:16:ce:c9:0e:28:cd:37:e1:d3:e6:
         99:ce:c4:52:eb:4c:24:b9:3e:95:06:37:13:5e:e0:a9:04:bd:
         3e:a9:82:9c:7a:96:57:2e:75:12:19:31:67:4c:91:98:53:c9:
         d2:00:de:b4:7b:54:7a:52:d0:da:4f:66:65:d8:16:ad:ef:49:
         b8:bf:d6:21:5c:86:2f:d1:38:89:ef:bb:77:e0:2f:bf:90:f9:
         bd:87:c2:42:d6:77:96:00:91:74:b8:29:ac:03:3f:c6:2e:c8:
         76:1d:b4:2e:28:64:ad:01:fc:48:b2:11:6d:09:b7:c6:05:fa:
         c7:2c:c8:12:27:f6:b5:90:0a:6f:ca:0c:2f:1c:fc:25:41:8c:
         fc:19:56:f3:06:00:89:e9:f0:01:ea:0e:10:dd:bf:5a:da:97:
         83:e4:e6:32:23:da:f6:50:75:48:d6:cd:74:bd:48:bc:55:09:
         ca:65:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:15:56 2025 by rpki-client