This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File:                     kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier:          bGBd2Zd0cyW6wGGwTpboUnyDwzFRvI9Dgm4YX5HP3kQ=
Subject key identifier:   EE:49:50:56:12:6E:E3:F1:F9:07:14:6D:B9:DE:2E:B6:D9:65:9C:9C
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer:       /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial:       019AF16418B4C3EE54E03F1C1DA5481C7D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number:          1324
Signing time:             Sat 06 Dec 2025 02:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:00 +0000
Files and hashes:         1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
                          2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
                          3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: SRay80UqAaE79LoDz6s6/Mc6r9lBxYLCHz7D3ts37QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:18:b4:c3:ee:54:e0:3f:1c:1d:a5:48:1c:7d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
        Validity
            Not Before: Dec  6 02:01:00 2025 GMT
            Not After : Dec  7 02:01:00 2025 GMT
        Subject: CN=ee495056126ee3f1f907146db9de2eb6d9659c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:53:16:e4:b2:4c:99:ab:78:06:72:22:78:
                    cb:45:f5:fc:0d:21:78:e0:b1:ef:d0:76:7e:26:0a:
                    39:1c:f4:13:b2:b3:92:85:8b:c7:44:58:7d:2a:ba:
                    1b:3a:13:8a:43:31:6b:12:e6:86:4a:d4:3e:2c:94:
                    1f:08:d6:58:18:7a:ee:16:74:4f:83:6c:f4:2b:42:
                    37:67:0a:1e:a3:2e:c3:60:40:ed:d6:6f:4e:ca:88:
                    8a:3c:0a:2f:67:e8:ba:28:04:4f:9b:31:ba:64:dd:
                    a2:ba:66:03:c8:59:e5:65:a4:d1:c9:42:ff:7b:a2:
                    7c:0a:62:78:e3:67:85:71:48:f2:db:c7:8a:6c:5f:
                    50:ce:b6:ca:c4:2c:28:3c:53:45:70:c7:e2:35:96:
                    f6:d2:32:0d:f1:eb:f2:d7:c9:c5:3b:cf:8a:f6:b1:
                    53:f6:90:fd:aa:f2:69:09:79:e2:48:7c:f3:8b:ed:
                    6d:28:95:80:49:ee:ab:8e:30:92:fe:4b:ef:3f:b8:
                    18:01:7a:6c:f8:a5:76:0d:ff:bb:95:69:48:1c:ee:
                    76:5b:31:92:71:0c:ad:22:5d:36:be:78:83:65:9e:
                    f4:53:60:40:68:39:d6:3c:d3:9d:b6:3b:08:51:4c:
                    99:41:83:92:51:bb:2b:11:e5:65:f4:44:fd:04:9b:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:49:50:56:12:6E:E3:F1:F9:07:14:6D:B9:DE:2E:B6:D9:65:9C:9C
            X509v3 Authority Key Identifier:
                keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:26:df:28:8d:62:81:b6:7d:f3:49:69:c7:b0:10:84:3d:
         bb:ab:cd:55:08:f9:9f:28:cb:a4:0c:aa:e0:b3:97:fc:07:9b:
         5d:ec:fd:15:f7:d5:b3:3f:8a:3a:ee:7e:3f:3a:a8:b6:8b:de:
         5e:ea:fc:bc:fb:87:35:1b:fe:7c:bd:d6:b7:80:ab:4a:64:4e:
         fd:3c:e1:0e:c5:6f:79:8b:fb:b1:2d:6b:31:01:ef:d3:ad:04:
         81:4a:d1:cc:5c:76:9a:30:48:b4:2f:02:df:bf:4a:85:57:78:
         c9:04:84:15:0c:78:67:f0:4b:49:cc:64:dd:15:93:ef:12:27:
         cf:40:59:b6:71:32:15:aa:81:04:9e:23:cf:ea:32:de:d2:6c:
         6c:0c:fb:90:dd:2c:83:2f:35:02:3a:a3:5d:14:c1:80:e5:e0:
         e3:57:68:05:d8:80:34:3e:71:56:89:68:5f:a0:71:81:68:3b:
         00:54:4e:b3:c1:8f:bc:36:78:be:76:ed:af:85:a6:3d:c5:c2:
         b7:08:9a:bf:02:22:db:73:a2:3d:dd:e6:7e:ab:af:80:9f:e7:
         98:97:bd:12:49:e3:27:4b:54:8f:da:5f:8d:e0:5b:43:b6:86:
         a8:bb:bf:28:8f:11:e4:f9:99:ac:0c:69:bf:2a:fd:9a:fb:85:
         69:00:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:40:45 2025 by rpki-client