This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File:                     R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier:          jkoxpnSBPttla4pASQ/ZbeHLBxACr5kFfL2muVx7wmc=
Subject key identifier:   99:32:2A:30:DF:02:5F:BE:FD:24:3B:84:70:03:CD:7C:A8:1D:4C:77
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer:       /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial:       019AF23FD5E40032C1D6336E76B73BBDD16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number:          0A8F
Signing time:             Sat 06 Dec 2025 06:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:01 +0000
Files and hashes:         1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
                          2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: YuE/B1kNormjeD9MKyDiFeaKxo2B8MMP0mR3zspn+Tw=)
                          3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:d5:e4:00:32:c1:d6:33:6e:76:b7:3b:bd:d1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
        Validity
            Not Before: Dec  6 06:01:01 2025 GMT
            Not After : Dec  7 06:01:01 2025 GMT
        Subject: CN=99322a30df025fbefd243b847003cd7ca81d4c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:a6:50:30:3b:74:d8:1a:56:8f:1b:85:3a:
                    aa:4f:a6:86:99:80:d0:8f:c1:1d:54:bd:c6:ba:d2:
                    3b:4a:1a:67:e5:78:f4:0d:f3:37:3f:73:6d:8b:90:
                    cd:e4:c3:c6:a3:64:82:41:10:10:46:c1:25:34:a0:
                    9e:d0:32:a2:25:e4:92:dc:f8:61:18:4e:f5:f4:05:
                    81:af:fb:b0:bc:de:d9:ec:6b:61:68:62:52:1d:dc:
                    15:24:47:8d:4d:b2:ff:2f:0c:21:3c:2b:ae:03:bd:
                    9e:fe:28:24:5b:16:c5:cf:57:de:52:3f:e5:79:7b:
                    f0:bd:73:0a:b0:de:ea:fe:87:ef:68:ef:85:22:9b:
                    b0:44:18:b5:13:5a:25:95:45:ce:5f:7f:95:45:3f:
                    06:dc:6b:69:7e:c7:08:c0:ac:69:78:9a:ec:71:ed:
                    27:5b:33:36:eb:22:29:87:24:b6:4d:8e:09:b7:90:
                    60:59:d9:d1:0f:46:1f:4c:14:65:8b:68:5f:fd:87:
                    10:d3:fc:2d:f1:60:68:fc:65:29:80:c2:6b:d7:b0:
                    35:fe:19:95:fd:d5:9e:fb:dc:7e:b1:ca:88:68:fb:
                    6b:91:d5:ab:22:57:35:b0:b6:11:07:90:4b:e0:00:
                    fb:d7:24:dd:17:d9:e1:7a:10:06:a4:2a:b4:96:a0:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:2A:30:DF:02:5F:BE:FD:24:3B:84:70:03:CD:7C:A8:1D:4C:77
            X509v3 Authority Key Identifier:
                keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:94:38:9c:7e:aa:60:20:cb:c1:e4:f9:d5:ae:47:88:50:e0:
         05:8d:28:21:db:83:1a:52:63:76:f5:a6:d8:08:34:39:d3:fb:
         cc:f8:cd:5a:4d:90:f3:3a:bd:c4:1f:d8:55:50:ba:72:be:1e:
         30:a7:63:3e:4b:43:74:f7:fb:d5:a7:6b:9c:7b:c6:08:75:fe:
         01:5d:18:aa:8f:df:0f:0d:10:37:43:d2:87:5e:39:be:65:c1:
         eb:c7:c5:4b:b1:2d:c5:cd:ec:38:01:2e:e7:44:c2:5e:64:6c:
         dc:f0:4f:e6:b5:63:2f:3c:11:59:d4:43:89:ec:14:fb:44:8a:
         f9:6e:35:f1:ee:a6:49:15:a6:b2:15:d3:a5:ee:3a:f6:6f:04:
         0a:28:9c:7e:03:9f:20:d0:a9:f2:d8:fa:b5:99:e9:86:0a:f6:
         0c:ee:45:9a:a5:b7:d0:55:58:63:37:34:db:28:fe:bf:0c:f4:
         bf:0e:8c:1f:09:dc:13:b9:f8:e6:81:0e:17:8c:fe:21:af:f3:
         f9:33:40:77:75:63:c0:7e:a5:7a:2e:76:71:59:c6:a1:e4:68:
         ca:20:b5:98:48:9f:5f:14:21:03:d3:77:ba:4c:34:31:65:ac:
         78:2e:f6:9a:c7:ce:e5:fe:96:5c:20:d3:f7:56:ba:14:b7:3b:
         2a:ed:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:49:25 2025 by rpki-client