This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          wih5qctd9ZWHnoevhQK1+MLKwFhoW4V8GMwwFf5kqYA=
Subject key identifier:   A3:E6:F6:C4:35:1E:77:01:ED:32:F8:C2:8D:E4:9E:B9:CE:6E:11:DC
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       019AF2E44A9CD9173944BD259FA731F3746D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          1776
Signing time:             Sat 06 Dec 2025 09:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:38 +0000
Files and hashes:         1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=)
                          2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
                          3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
                          4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
                          5: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=)
                          6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: IvTDi8mWKaE+p2jW2tbBFygersClxAJ+Pv5JWzPbu/M=)
                          7: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:4a:9c:d9:17:39:44:bd:25:9f:a7:31:f3:74:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Dec  6 09:00:38 2025 GMT
            Not After : Dec  7 09:00:38 2025 GMT
        Subject: CN=a3e6f6c4351e7701ed32f8c28de49eb9ce6e11dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:c7:27:e4:13:b3:0b:b7:73:e1:da:88:4a:
                    cf:a4:e3:cc:2b:c6:16:7e:57:b4:59:19:40:c9:c1:
                    b5:44:27:f3:96:e7:1a:64:64:a3:02:9c:23:29:61:
                    62:94:7d:d4:c4:1e:3d:ad:d6:22:4f:ce:54:2a:3a:
                    f1:5b:fa:8b:5c:c9:7a:ac:ef:45:cc:be:80:95:91:
                    16:a3:48:d1:9f:49:2e:c2:71:4f:36:4f:e9:fa:af:
                    cd:0b:8a:88:c3:93:95:9d:be:ce:ce:5d:b5:39:2c:
                    a8:b4:d0:9a:67:02:06:4e:09:a1:03:3f:16:b3:10:
                    2e:72:5c:7f:e5:3d:cb:c7:27:5e:0a:a6:76:0e:55:
                    54:31:68:3b:8e:a3:cd:06:a9:67:b4:21:a9:db:a0:
                    b6:78:67:b7:ca:d4:33:c3:66:05:b7:0c:54:98:41:
                    aa:59:3c:0c:d5:d5:7d:7d:6b:d3:c0:75:1a:f0:16:
                    99:a4:8a:3d:b2:0b:fc:22:48:77:cc:b7:4e:df:68:
                    71:b3:78:14:6a:11:ca:31:1b:fa:9d:92:3a:ec:73:
                    3d:83:b4:65:1e:4d:93:0b:49:83:80:6d:bf:46:26:
                    ee:a4:71:29:b2:ea:a5:c1:ee:30:a2:fa:e5:1c:c6:
                    ba:26:b9:97:3f:46:c0:89:e6:e4:06:9b:bb:36:08:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:F6:C4:35:1E:77:01:ED:32:F8:C2:8D:E4:9E:B9:CE:6E:11:DC
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:e0:80:5d:32:ff:9f:84:a2:f3:33:a8:8b:5e:25:ef:63:
         b6:0a:d8:38:78:4e:b0:52:47:e3:be:2c:16:8b:04:df:6d:ab:
         82:19:75:35:60:64:e1:d8:9b:b3:22:86:6a:f9:03:f2:1f:cc:
         5b:d0:fa:38:c0:4b:b4:a6:2c:39:26:25:bb:bc:24:57:e0:a5:
         2f:41:ec:9c:e1:20:3c:f2:6d:5c:cd:1c:fb:f1:9c:64:b3:18:
         23:c5:bb:fc:e2:9d:8b:26:a4:37:11:a8:4c:29:97:e6:6d:21:
         19:91:65:76:a9:1b:74:02:d5:60:1d:2b:fd:a5:5d:ad:85:8e:
         ef:b1:5b:a3:4f:82:13:f6:dd:24:0a:a4:d4:16:25:04:18:d4:
         2d:99:61:6d:f4:62:9a:94:90:c5:1c:76:42:e6:d3:8c:18:b6:
         b7:d9:4c:e3:50:f3:25:92:a9:63:73:a0:99:e9:47:8b:cf:1c:
         d7:e4:d4:90:87:a7:a6:d0:a0:b9:66:bc:07:1a:e5:49:4a:cc:
         ce:fa:24:6c:b7:6c:80:a8:e4:b8:ba:dd:60:f7:5d:ce:f3:12:
         15:79:32:05:9b:c0:9a:6e:fb:5c:d7:5c:24:cf:c5:af:86:1a:
         90:c0:b0:0f:1e:42:cb:ff:93:7e:a9:5f:f0:30:fb:78:fb:fc:
         f5:ae:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:12:28 2025 by rpki-client