This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File:                     557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier:          MabkTKeI43qgz/weId+iETfSLHnhz/mS9FhBbmyv71M=
Subject key identifier:   34:25:6F:D6:C1:05:0D:C0:F3:08:31:19:14:07:66:18:25:6F:69:9B
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer:       /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial:       019AF31C9E7B0D0396DA5019FEC06AF6A4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number:          0C33
Signing time:             Sat 06 Dec 2025 10:02:10 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:10 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:10 +0000
Files and hashes:         1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
                          2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: ja36xGiyK9kClA1+1sQz2vXI2n3HrDX6QokfXb/eGIc=)
                          3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:9e:7b:0d:03:96:da:50:19:fe:c0:6a:f6:a4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
        Validity
            Not Before: Dec  6 10:02:10 2025 GMT
            Not After : Dec  7 10:02:10 2025 GMT
        Subject: CN=34256fd6c1050dc0f308311914076618256f699b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:b5:55:44:8e:8f:b9:d2:da:6b:e9:82:5d:
                    a7:a0:44:9d:ab:c6:06:82:f4:af:37:80:3a:07:51:
                    f0:a8:a2:8d:47:7b:8b:26:53:09:6f:dc:ba:04:00:
                    c2:fd:c1:e0:5e:0c:d3:74:fe:c0:67:81:41:d9:4c:
                    01:10:c0:f0:dc:dc:02:aa:66:28:18:71:a6:a1:ea:
                    64:14:10:2e:eb:95:b8:82:80:b5:f2:98:ad:94:dc:
                    cc:92:55:4b:77:54:f2:d6:f7:17:76:a3:33:b8:fa:
                    b1:f3:e7:95:e4:2d:af:42:69:5f:2e:aa:ee:3b:46:
                    11:ca:c0:6b:1d:56:49:36:4f:23:59:b0:2f:a9:27:
                    6a:58:62:1c:d6:3b:7b:b5:e0:08:67:da:91:8c:65:
                    8d:76:31:0b:c3:38:41:bb:88:b2:6a:f1:45:b4:8b:
                    2d:77:b0:91:74:51:2e:45:cd:70:31:7f:aa:5e:9e:
                    f8:5d:52:eb:3f:fb:13:a0:37:fa:f3:b4:ce:de:4f:
                    ed:28:1c:c3:d0:94:08:f9:19:75:53:de:7c:a9:bd:
                    00:94:ed:a1:42:a6:23:9d:19:77:dd:02:53:3f:f0:
                    57:cd:49:cb:6b:23:d7:67:7d:56:be:5a:a3:d0:d4:
                    c6:e0:7f:3c:5c:68:98:8a:48:c0:a1:ee:26:0e:08:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:6F:D6:C1:05:0D:C0:F3:08:31:19:14:07:66:18:25:6F:69:9B
            X509v3 Authority Key Identifier:
                keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:f0:7e:81:3c:b9:8c:08:d6:b9:22:0b:9f:14:b5:92:47:
         24:e2:71:33:45:66:c0:89:49:9f:39:20:6c:aa:2a:0d:6f:29:
         cb:8d:e7:5d:8c:63:da:41:c6:19:4f:39:ff:8d:d1:a3:7d:63:
         19:f5:5e:51:42:66:41:cf:4d:ed:0b:d2:ab:e6:a6:2b:63:ce:
         3b:1f:46:4f:4f:77:59:67:83:fa:d6:31:53:2d:dc:69:8e:6f:
         af:b1:97:85:25:25:20:26:59:f6:75:eb:65:d0:d1:de:dc:bd:
         b0:0a:18:9e:36:5f:a8:f3:2f:ec:8e:d0:26:9c:a7:e5:19:cf:
         76:2c:37:b2:ef:da:75:27:b7:09:06:ff:12:d1:66:b8:cd:bb:
         bd:e7:ed:b0:05:eb:ce:1b:dd:80:1a:f5:05:0c:c2:e9:b2:46:
         f7:86:58:cd:06:3d:5f:fc:73:d4:8d:5d:37:5d:c6:a0:a7:ae:
         18:2d:06:2f:b2:2a:46:f2:0b:9a:7e:17:db:e3:79:15:11:ba:
         61:e2:82:c9:b5:f1:60:54:38:61:50:d3:b2:c5:47:9e:3d:7a:
         14:55:c0:18:a0:d0:ee:d7:00:d5:de:50:b0:9b:c8:b2:b0:97:
         f4:21:a0:97:fe:57:30:12:66:57:74:12:91:2f:3e:ca:ee:8c:
         a3:e2:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:39:58 2025 by rpki-client