This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File:                     Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier:          rwS4ZorPjgxiwEOUHhJxPJ90/3K83gR/oUO0hnYtkPM=
Subject key identifier:   26:B9:AB:C2:3D:A4:93:88:2B:D0:24:FD:4D:12:62:3D:99:52:E0:4B
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer:       /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial:       019AF12DE582736E845C6250A2E660827DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number:          0456
Signing time:             Sat 06 Dec 2025 01:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:48 +0000
Files and hashes:         1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: ecGynFn2daLqu+PbJ6TJW5u1pN0yV1enY54zunPdbbA=)
                          2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
                          3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:e5:82:73:6e:84:5c:62:50:a2:e6:60:82:7d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
        Validity
            Not Before: Dec  6 01:01:48 2025 GMT
            Not After : Dec  7 01:01:48 2025 GMT
        Subject: CN=26b9abc23da493882bd024fd4d12623d9952e04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:f0:74:41:cf:1e:df:6b:4a:a3:ed:cb:03:
                    87:90:3b:b4:8b:6c:32:51:47:ff:e3:61:a6:bb:32:
                    1e:ca:17:1e:15:3b:68:1f:94:40:c6:3d:98:e8:a1:
                    c3:82:1c:22:ab:ca:c2:d2:dd:ce:a6:66:e6:93:50:
                    05:7a:ad:18:01:f0:12:0d:09:6a:c5:11:5c:7a:4d:
                    01:21:97:32:6a:4b:59:52:c3:85:da:aa:c1:05:50:
                    f5:8f:57:2c:fa:e7:af:37:ef:58:6f:ea:0d:e1:7a:
                    85:eb:5b:18:a6:a8:aa:ed:72:0d:8b:63:3b:e3:14:
                    32:39:7f:1c:bd:08:f0:cd:fe:5e:21:08:75:5f:ae:
                    08:f4:6c:ed:b7:75:f1:ab:11:ac:4d:9f:04:6e:e3:
                    0b:c7:cf:c7:8b:46:5e:d7:91:f4:fa:b9:1f:ed:3c:
                    12:dd:21:1e:60:10:a9:b2:8b:07:d6:b7:05:31:71:
                    53:8e:fa:9b:37:e6:1c:1f:c2:2c:f4:bd:9d:7f:9a:
                    e4:69:63:6e:59:1d:f8:26:15:1f:48:30:31:6f:fb:
                    31:e0:e4:20:0f:a5:01:88:0f:5f:64:d8:ec:75:cd:
                    f9:00:36:c2:f5:ed:0d:31:41:94:32:72:8d:d9:41:
                    a3:5f:38:94:5f:c3:a6:8c:f9:b6:20:58:1d:94:97:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:AB:C2:3D:A4:93:88:2B:D0:24:FD:4D:12:62:3D:99:52:E0:4B
            X509v3 Authority Key Identifier:
                keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:cd:a8:7d:09:fa:15:da:2a:5c:6a:30:a1:51:99:5e:a7:
         2b:0a:7b:8e:49:77:d9:70:eb:d9:77:24:2e:db:e5:01:ee:77:
         52:7d:a6:6d:40:d5:b9:66:06:80:b5:10:02:5f:2b:c3:1f:ea:
         6f:fc:0e:44:5a:49:0b:6f:18:eb:3d:0b:3f:b0:cd:10:ec:d8:
         70:55:6e:1a:81:7f:f7:39:97:0e:63:6a:b7:6c:69:f2:b2:11:
         07:88:a9:c7:27:38:07:59:08:42:19:61:22:3d:75:15:b9:9b:
         01:91:d4:2d:4d:2e:6b:79:b2:89:e9:3c:af:b1:b0:02:69:88:
         28:99:a9:e1:7f:d7:eb:ba:39:fb:ed:a0:b5:7f:63:90:1e:76:
         2d:f6:cb:36:4a:96:4c:74:c4:44:57:1b:5d:99:72:a9:e2:b1:
         94:55:49:f5:90:75:01:8e:a6:68:46:f6:db:59:0d:83:2c:05:
         81:ce:2a:6f:0f:2a:f8:dc:25:90:ea:2f:4d:2b:54:1f:eb:54:
         d7:a0:5a:2a:ea:9f:1f:e6:be:bc:0f:6f:95:98:93:c4:d0:8b:
         5f:ad:ed:6b:d8:2f:6a:50:87:32:b2:94:f5:db:5f:b6:f9:3b:
         cb:2b:d8:a8:51:fe:96:86:55:ff:82:04:63:2c:8b:d8:d7:4f:
         93:2b:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:56 2025 by rpki-client