This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File:                     1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier:          2acaD5hCdHhWphWgK9yAHrmrg9nt5SU36DwTGLj5FJE=
Subject key identifier:   26:A0:D2:D0:4C:A2:21:79:D7:99:D9:64:24:97:69:AD:E6:B3:B0:14
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer:       /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial:       019AF277044BA4601AF2D584B7EA402D4349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number:          14F9
Signing time:             Sat 06 Dec 2025 07:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:17 +0000
Files and hashes:         1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: hL9Qaw6RxIeGdDI4Y/2G9MP7VbSzZMgt1wzvjfzhvRU=)
                          2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:04:4b:a4:60:1a:f2:d5:84:b7:ea:40:2d:43:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
        Validity
            Not Before: Dec  6 07:01:17 2025 GMT
            Not After : Dec  7 07:01:17 2025 GMT
        Subject: CN=26a0d2d04ca22179d799d964249769ade6b3b014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:fd:05:c1:26:66:4d:d5:47:b4:9c:93:dc:
                    ba:4a:d6:c8:1f:f5:48:77:c3:f4:73:63:62:6a:b2:
                    ed:c5:fc:c5:98:20:f6:69:53:f7:7a:10:d5:07:63:
                    b8:d6:3f:83:db:f2:5f:de:ed:f1:97:17:e2:83:13:
                    41:cb:32:32:f0:76:f0:fe:f0:ae:fa:82:18:b5:d5:
                    67:59:f0:0a:dd:d9:af:99:51:41:b7:39:5e:3b:9f:
                    34:a9:75:db:fc:e5:2c:bd:f1:cb:75:da:5f:5c:61:
                    d9:d4:fc:6a:a7:47:c4:2d:ab:35:40:ae:39:92:80:
                    25:ad:da:4b:ff:c9:b2:da:7d:ed:39:fb:b4:e1:fc:
                    95:be:ff:52:69:aa:46:e7:59:fe:8f:e0:31:ff:59:
                    42:66:bd:11:0e:24:f5:47:e6:fb:14:c7:0f:83:e0:
                    a8:19:16:25:cf:d5:4a:cb:28:83:f1:7d:f2:21:4a:
                    cd:7f:88:c0:18:f9:60:b2:b9:5c:17:57:40:13:8e:
                    7f:09:cd:7c:a7:2c:93:15:55:bd:cd:9f:a5:e1:aa:
                    ff:01:f3:bb:a9:e1:84:33:f4:53:c1:79:2e:8c:be:
                    3c:2e:61:4f:3f:6d:f5:b9:c5:d9:fe:30:18:ad:9b:
                    d5:4f:c8:70:f8:f6:7b:a6:17:da:13:16:c0:4b:df:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:D2:D0:4C:A2:21:79:D7:99:D9:64:24:97:69:AD:E6:B3:B0:14
            X509v3 Authority Key Identifier:
                keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:db:90:d0:b6:2d:82:0c:52:6e:5b:01:13:db:26:18:c5:
         f0:54:7d:26:98:22:71:b7:04:4c:47:ae:cf:9b:a8:85:2d:4a:
         a0:24:f0:83:6b:72:3e:10:ef:60:98:15:87:af:2a:08:7e:26:
         87:ab:e8:7e:1a:cc:32:14:ff:bd:b8:ff:f3:27:a7:8a:90:bf:
         83:59:ff:6a:5f:36:32:a9:24:c4:90:de:a3:02:f7:80:cf:fb:
         e8:1d:73:35:bf:3c:de:55:43:fa:55:f1:68:59:39:49:84:21:
         86:e5:bc:5d:ae:77:63:83:36:36:73:f5:93:f3:68:e5:cd:e8:
         7c:97:e6:fb:57:77:ab:94:83:63:7c:9f:57:ae:3b:f6:cf:d0:
         8d:3c:d1:82:a1:b1:91:ee:d2:e6:51:b7:fa:1e:9f:bb:07:84:
         ef:a8:2a:19:fb:e9:94:54:06:97:77:89:ac:31:61:ab:f7:16:
         89:36:0b:e3:b0:62:08:60:00:0e:04:fe:8b:d3:90:ad:f2:2e:
         59:d9:88:ec:db:b6:85:e7:14:9c:69:95:b8:a7:d8:ec:9c:22:
         39:75:9c:ce:aa:87:97:eb:e4:7c:90:29:77:55:57:56:06:17:
         7d:e4:55:5b:49:0d:c3:89:2f:1a:b1:5b:0b:25:4a:3e:19:a9:
         3b:58:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:28 2025 by rpki-client