This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          irUKxcEqKeH30jvMCr10gHf7kr0XuFU4bQ15t0yB1iQ=
Subject key identifier:   2F:2B:8C:03:51:93:4C:6B:15:AC:E4:B1:07:71:BF:A8:30:DC:69:FD
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       019AF31BF7C9BB89BF342846FCA7D05196D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          113D
Signing time:             Sat 06 Dec 2025 10:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:27 +0000
Files and hashes:         1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
                          2: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
                          3: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
                          4: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
                          5: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
                          6: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
                          7: j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (hash: bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=)
                          8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: WG0WlI6hNaMKxA+2fdJGQxt5R/Eb+vpzgITnqcfq9eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:f7:c9:bb:89:bf:34:28:46:fc:a7:d0:51:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Dec  6 10:01:27 2025 GMT
            Not After : Dec  7 10:01:27 2025 GMT
        Subject: CN=2f2b8c0351934c6b15ace4b10771bfa830dc69fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:27:ec:1c:e9:29:74:0f:63:29:d4:8f:3c:
                    7f:16:e0:3f:67:7e:07:9c:31:46:67:d0:cc:ca:92:
                    ce:3e:d5:f9:68:0d:ac:04:23:28:fd:a9:65:23:1f:
                    1b:0a:22:a4:23:84:87:37:3c:ab:05:76:02:95:ff:
                    64:6a:86:d1:95:82:4c:89:d7:db:4e:f2:2d:b0:e8:
                    49:e4:ae:33:24:01:d4:2f:8d:d4:a5:7f:7a:12:73:
                    6d:42:a3:46:f2:2d:ca:cd:1f:fb:09:82:89:7c:b9:
                    95:c2:77:c6:3c:4f:8b:12:ba:69:a7:9c:4f:e9:d4:
                    fc:59:ab:20:15:fa:c9:ea:f6:59:dc:3f:38:09:19:
                    08:9e:32:7f:0c:4e:e0:a0:a3:d0:c3:10:15:fe:88:
                    67:d6:84:90:ca:56:07:9f:5f:51:a1:07:8c:00:81:
                    c2:ce:87:fb:76:37:2d:ca:16:f8:d0:8c:c8:17:e7:
                    66:d6:9e:b7:b9:85:53:cc:34:dd:0b:98:61:df:fc:
                    28:fc:08:71:be:ee:f0:69:99:c5:ed:63:89:53:89:
                    8a:d4:20:65:7a:23:7c:96:69:2c:69:c9:d5:a3:e0:
                    e9:2c:d1:2f:e6:51:e1:ae:79:15:cc:74:a1:cc:08:
                    cd:db:5b:70:c8:26:a2:6a:96:3b:8b:c5:68:ef:5d:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:8C:03:51:93:4C:6B:15:AC:E4:B1:07:71:BF:A8:30:DC:69:FD
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:56:32:50:55:8a:02:db:6c:80:a9:e5:d7:c5:3f:73:00:68:
         ee:f0:13:e8:01:6b:15:7a:c4:a7:90:6f:fe:50:d2:85:73:ec:
         95:3c:87:73:38:76:84:45:32:85:02:1d:22:df:4a:ab:5c:b6:
         66:b5:a9:5b:37:1f:aa:a0:10:ce:e8:65:c0:35:10:18:86:72:
         df:7e:96:59:e9:21:52:59:17:df:97:b1:62:8a:cf:a2:05:69:
         c1:40:89:49:e3:42:29:a9:a9:eb:3b:b9:ce:42:41:92:9e:72:
         31:94:b1:b0:61:88:89:7b:43:f5:ff:5a:16:28:46:15:e3:5e:
         93:b5:e1:b2:bf:d4:90:83:a4:e3:bf:8c:2d:bb:2f:c4:3a:ed:
         42:17:ad:3f:42:43:d4:19:ba:b2:96:33:23:a5:9a:a1:f3:c1:
         f5:09:ff:dc:e2:71:8d:22:2e:35:e1:fc:25:d9:c1:0d:f5:dd:
         8c:ff:d6:da:67:44:ea:b4:ef:46:3d:10:d9:17:9f:86:ce:c1:
         5c:63:db:b6:a0:0d:9c:ca:17:ef:81:93:1a:9e:4a:21:54:da:
         a4:25:a3:99:db:c0:3e:be:8c:05:e9:e5:ba:b9:2f:73:b4:d1:
         c3:96:dd:5b:98:b4:e2:69:3d:8b:54:2a:22:06:ea:bb:11:0b:
         13:12:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:59:50 2025 by rpki-client