This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          MWnHvr0iHNr2kOCpfDgis6nN5Gpj6AKRoctUF9di/+E=
Subject key identifier:   43:50:78:94:C5:75:C9:F5:A6:68:39:8B:A2:00:64:21:C9:FE:DC:03
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       019AF1D24D55023B579BF6618F0A82A63A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          06E4
Signing time:             Sat 06 Dec 2025 04:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:22 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: iTWyjUXVYMgTH59GEJq8m04RxqyD1DnGLIdjVieOIes=)
                          2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:4d:55:02:3b:57:9b:f6:61:8f:0a:82:a6:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Dec  6 04:01:22 2025 GMT
            Not After : Dec  7 04:01:22 2025 GMT
        Subject: CN=43507894c575c9f5a668398ba2006421c9fedc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:2a:3b:4e:46:06:8c:a0:07:ff:d3:21:60:
                    16:06:af:8e:bd:78:aa:fd:6b:f5:88:26:19:d8:d9:
                    82:df:9a:1e:1e:0b:56:3d:8e:49:07:ea:00:ce:8a:
                    6e:0c:a4:cd:66:f6:73:e2:12:79:02:7f:a3:44:54:
                    89:4d:e5:3e:a9:b4:ba:3b:62:52:ed:ec:51:60:ef:
                    38:c2:ba:40:a1:77:5f:7e:21:1e:8e:1b:11:98:7d:
                    5b:a0:33:30:50:9d:7e:db:41:dd:56:46:69:5e:fb:
                    8c:ec:19:14:ee:4f:46:7b:98:6c:12:07:c6:cc:bf:
                    e2:a9:30:02:3e:f3:c6:49:17:3a:f5:3f:8a:45:6f:
                    86:d2:23:a6:9c:4d:ad:1d:a1:7f:a1:9a:8c:c1:4d:
                    08:f4:44:26:bb:cc:66:ad:e3:b4:d2:e4:c0:e3:56:
                    55:8f:6e:f7:b1:6d:cd:f0:61:d5:cb:18:11:db:8e:
                    70:be:17:29:14:b1:b6:51:a3:46:14:6f:9d:ac:13:
                    1a:b6:3b:70:17:2b:4b:02:48:50:40:e6:95:32:30:
                    57:1e:23:71:a2:da:55:a8:11:7f:7e:66:56:aa:91:
                    1d:c2:ed:76:a1:b4:86:2c:1d:73:17:b0:d7:31:b1:
                    5e:36:e2:25:8d:f5:cc:9d:54:d9:3d:bd:5f:f0:4f:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:50:78:94:C5:75:C9:F5:A6:68:39:8B:A2:00:64:21:C9:FE:DC:03
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:57:ac:7b:58:da:a8:17:f5:64:a7:1a:fd:6f:64:48:c3:
         c5:d9:77:4b:f3:7c:4a:a0:b9:b4:c9:f8:88:42:64:61:e2:d6:
         a9:ee:ec:92:1c:8e:5d:97:21:b4:23:42:16:d8:4c:64:2b:2b:
         14:0b:11:44:84:a6:d6:16:9b:9e:8e:93:a0:cb:dc:0d:68:97:
         12:9b:4b:67:dd:c7:b2:61:47:51:1d:9c:3f:f9:d4:18:88:5f:
         9f:72:5d:f9:ae:6c:b5:f3:fb:50:e7:7d:81:da:c4:a3:22:18:
         62:bb:d0:5c:83:bc:8a:67:02:1c:b6:f7:84:ca:42:7d:2d:6c:
         39:2a:eb:54:b9:94:53:cc:94:9e:a0:2b:06:91:fc:5f:c7:67:
         ad:a7:f0:21:64:12:68:9a:31:55:b5:c9:a6:89:e3:af:05:c9:
         db:5b:b6:b0:5c:19:cb:e7:1b:0e:20:35:69:10:4d:8a:1e:40:
         fc:91:af:76:e4:1b:b0:c8:5d:5e:f7:c5:3f:8f:02:0b:50:7e:
         d1:6f:1c:1f:3d:44:2b:52:1c:c5:08:c9:b6:3a:c5:45:6b:3b:
         f5:49:e7:80:76:9c:f0:61:e5:f6:3a:a0:d9:ee:8b:7f:aa:72:
         e2:3f:48:d1:24:d0:8f:6c:5e:a6:f9:8b:c0:dc:00:83:d5:19:
         3b:09:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:34:22 2025 by rpki-client