This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File:                     g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier:          j2VAEOUEfCXOsrWUECKrldsG8ms6Gk/w9r491RhIS+E=
Subject key identifier:   FB:81:4D:8A:40:1D:DA:CF:90:27:76:48:43:77:CD:02:4F:E0:4E:56
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer:       /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial:       019B36456A25E21D0815E7B9C78CA9605C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number:          0695
Signing time:             Fri 19 Dec 2025 11:01:17 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:17 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:17 +0000
Files and hashes:         1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
                          2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
                          3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: O3YU6uYWG2YRtce6F4MenVQk5dlD4j9RLqqNZnGPRxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:6a:25:e2:1d:08:15:e7:b9:c7:8c:a9:60:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
        Validity
            Not Before: Dec 19 11:01:17 2025 GMT
            Not After : Dec 20 11:01:17 2025 GMT
        Subject: CN=fb814d8a401ddacf902776484377cd024fe04e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:81:da:c6:36:ab:37:a6:d9:61:16:bc:5b:
                    7c:d9:f5:f8:47:8f:9e:6f:43:97:b5:4c:3c:67:60:
                    b8:92:d9:00:2b:1d:84:a9:2d:f7:67:61:b4:9c:a3:
                    29:8a:25:46:08:64:b8:d6:1b:cb:9e:c1:73:f1:2b:
                    c8:7d:09:d5:2e:d4:94:72:2c:6c:6c:15:71:26:b4:
                    d7:de:db:6d:0a:ee:5c:d1:f4:bc:00:a6:e2:17:50:
                    44:a5:bf:da:e3:89:5b:45:30:b4:96:7c:75:6a:21:
                    ee:ce:28:82:41:ee:8e:e0:31:c8:7a:eb:11:fb:d7:
                    ab:21:d4:3a:86:76:c6:8c:9b:cc:90:8b:84:ed:9e:
                    3e:9f:39:31:ab:7d:97:bd:6c:47:c1:2b:c1:e7:65:
                    49:88:b3:5a:34:b7:16:8d:0c:2e:a7:9c:4b:98:54:
                    d4:14:a5:50:15:af:a0:ab:b7:93:f0:57:35:ba:06:
                    c2:e6:ac:2d:80:48:23:a7:83:f7:48:4b:21:f9:ff:
                    82:5b:c0:90:cc:c0:b7:c2:ae:58:d2:b8:3c:d8:cb:
                    b4:bf:95:7d:02:f3:a5:a4:26:b9:8c:8f:cb:c3:44:
                    71:b9:b8:d0:78:5e:92:59:61:74:c2:c6:5a:76:ff:
                    02:fa:d3:0b:de:bc:c7:a0:2d:4b:ed:81:b4:da:a5:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:4D:8A:40:1D:DA:CF:90:27:76:48:43:77:CD:02:4F:E0:4E:56
            X509v3 Authority Key Identifier:
                keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:ba:e8:2f:ff:e0:c0:21:30:c9:a9:72:e0:ea:63:55:3e:
         8e:20:52:3b:58:95:3a:28:3d:c3:4e:f7:80:88:c0:78:ad:c9:
         f5:3b:0d:2b:7e:34:bd:a2:4d:7f:fa:65:47:fb:77:a4:d4:ec:
         db:63:2d:61:1d:fd:e0:6e:7c:9b:82:24:23:93:33:b2:e1:1a:
         3e:4b:72:a3:66:78:46:6a:d1:88:f3:6c:71:8f:d5:7d:21:16:
         25:df:02:ae:62:a8:52:06:0d:75:0e:d4:6b:67:43:2b:12:e2:
         ee:9b:02:dd:f2:54:39:22:86:0c:b5:3b:af:91:2a:3f:41:b0:
         0a:b2:da:37:18:7a:f7:85:64:39:ee:4d:dd:a8:87:44:b3:1a:
         72:ca:48:77:68:6f:84:b8:45:5c:cc:ed:06:49:ff:02:11:7a:
         7f:83:ca:99:07:d6:4a:92:2d:24:7d:63:6d:fb:e2:be:4f:70:
         29:44:a0:be:ca:c7:fe:d8:b9:aa:0c:c5:03:e6:3d:47:39:7d:
         7c:ff:60:52:ef:c6:d2:90:71:c9:fb:76:42:eb:d8:10:f6:dd:
         2a:34:d6:57:b5:81:a8:06:a2:00:9a:cb:b3:3b:e6:f1:d1:ec:
         1f:62:18:a2:33:99:e1:ae:37:4c:c3:09:36:3c:eb:76:e8:5a:
         16:0b:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:49:39 2025 by rpki-client