This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File:                     Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier:          9hdPHRpKW+5mWOIoWZIVGPvXwMT4JmzbALBsQFrN04U=
Subject key identifier:   E5:7D:EC:64:C5:B7:99:80:A4:7A:7F:E3:EA:96:4C:6F:0E:32:1E:EE
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer:       /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial:       019AF3F741EC2D8BA65EBE74EB840C17D596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number:          0BC3
Signing time:             Sat 06 Dec 2025 14:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:58 +0000
Files and hashes:         1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: hAWeQI2tlaAkhhh3Gkn0CoxxsdvezRXlkjOUxRve00Y=)
                          2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:41:ec:2d:8b:a6:5e:be:74:eb:84:0c:17:d5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
        Validity
            Not Before: Dec  6 14:00:58 2025 GMT
            Not After : Dec  7 14:00:58 2025 GMT
        Subject: CN=e57dec64c5b79980a47a7fe3ea964c6f0e321eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:ef:74:75:ee:6f:f9:88:d0:e3:ce:9f:20:
                    b9:5a:09:cb:bb:aa:42:2c:e6:3c:b7:8a:f9:ce:59:
                    55:69:d1:ea:63:1b:6a:53:3b:a4:1e:35:67:e9:8d:
                    64:1a:6e:c0:f5:0e:40:30:97:80:35:54:5d:50:17:
                    1e:13:b2:e7:c2:50:3b:2b:78:3e:a4:e7:9c:d5:d7:
                    22:d0:a1:2c:bd:fa:2a:ce:4c:4a:cd:77:5e:7b:ec:
                    75:62:f4:df:fd:f1:45:ef:40:79:e9:d1:f1:03:e3:
                    d1:a8:62:c9:08:84:53:a2:90:ff:55:83:e2:67:49:
                    51:17:de:ca:b4:76:61:83:ab:e1:60:26:91:07:52:
                    d6:20:8f:02:55:fd:57:4c:78:8f:58:e7:3d:bd:9f:
                    bc:0b:0f:c9:6c:53:18:85:f3:3d:ea:2a:61:29:98:
                    39:22:e1:2e:b3:d9:20:a3:5a:26:49:65:02:2b:a6:
                    ad:8f:7a:47:f1:45:7e:e1:82:b8:f8:99:94:13:a5:
                    d0:13:d5:ed:cd:85:07:61:df:b1:b4:1a:48:98:67:
                    61:f7:4a:72:1d:43:81:e2:ee:91:14:ab:11:92:be:
                    19:3d:55:46:d8:dc:5f:7c:fd:fa:e2:8b:c4:6f:69:
                    1d:a7:c8:1f:3d:c5:3a:d5:18:36:cf:fa:cf:08:a8:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7D:EC:64:C5:B7:99:80:A4:7A:7F:E3:EA:96:4C:6F:0E:32:1E:EE
            X509v3 Authority Key Identifier:
                keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:81:f6:4c:a3:48:d1:33:af:53:a8:b7:5e:f8:f6:f2:92:
         a1:cf:f8:d8:ed:c3:49:cd:63:a1:68:bf:7b:34:04:2e:6a:4c:
         a7:8d:7b:a3:37:07:3a:a5:f5:fe:2a:d7:7c:32:a7:4d:9a:36:
         73:f3:a9:7e:2e:3d:0c:e3:31:8c:12:90:ee:e6:46:a1:0d:bc:
         e8:b9:4a:f9:e4:18:28:cd:d1:78:ef:95:8a:e0:a9:ff:79:b3:
         bf:01:52:26:3a:a4:76:5a:b8:bb:a5:b6:e9:1c:1e:5f:61:4b:
         bc:4e:90:a1:16:4b:d9:2d:93:45:77:c2:39:44:47:99:ee:8f:
         30:7b:61:93:19:98:1f:e4:9b:69:3d:b4:cb:2c:6a:14:fc:0b:
         5b:1a:f9:e5:52:4e:29:1c:5f:e5:ab:55:74:45:9b:d0:59:69:
         31:75:8c:05:58:f0:aa:38:7b:4a:72:ae:6a:74:65:89:31:5c:
         1c:0e:78:7a:8b:d5:69:6f:1b:a0:e7:30:10:22:ed:09:7a:69:
         98:83:80:58:a0:b1:31:29:15:a1:b0:c3:da:3e:b3:73:e9:b9:
         37:ef:3d:4f:5f:10:ee:a3:c9:98:fb:ed:47:04:3d:8c:6f:93:
         d5:18:87:7f:be:6b:f6:b0:3d:1e:0d:ae:a3:e0:b3:35:e1:3a:
         bd:a5:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:30 2025 by rpki-client