This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File:                     3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier:          BGSuj8X5eJkjJjSKVF/xy4aWMqZhonwhpk+EAwQ8Uvw=
Subject key identifier:   A3:24:E0:0F:88:2C:E2:7A:32:FF:14:01:8C:4C:99:93:21:20:4E:D5
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer:       /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial:       019AF19AEBD1F538F767625995F1B013B905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number:          0FE2
Signing time:             Sat 06 Dec 2025 03:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:53 +0000
Files and hashes:         1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: 1Lo9k7OMLAiabf+wTv+YGDgj21YuHymqAAQyEg9PVd0=)
                          2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
                          3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:eb:d1:f5:38:f7:67:62:59:95:f1:b0:13:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
        Validity
            Not Before: Dec  6 03:00:53 2025 GMT
            Not After : Dec  7 03:00:53 2025 GMT
        Subject: CN=a324e00f882ce27a32ff14018c4c999321204ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:0c:38:3b:9a:08:f5:62:7b:62:14:c7:9f:
                    7c:d0:47:f8:c4:a9:55:11:11:c3:b8:dc:8c:b8:c8:
                    a3:da:50:b1:c5:6c:65:13:e1:ca:80:88:0e:0c:0d:
                    96:59:62:6f:bd:0a:36:c3:f1:08:ee:79:f0:0f:dd:
                    a0:f4:17:d1:35:d8:42:30:8d:fc:66:8b:12:b7:a6:
                    4d:f9:10:c4:b2:bc:1b:35:2c:68:0a:7f:10:76:4e:
                    a3:fc:ff:2f:4b:9a:ee:25:a4:85:2b:48:e5:af:0d:
                    3b:f4:e7:18:37:a4:5a:df:55:0a:c4:bd:8d:35:b3:
                    21:ec:a4:85:1b:4a:4b:0a:f0:73:45:fe:01:d8:95:
                    f1:55:95:87:72:e8:79:dc:cf:31:8d:90:09:78:73:
                    77:62:43:ac:ae:a1:a7:15:a7:e7:e1:03:36:62:53:
                    aa:72:82:f3:10:63:fe:07:b6:b3:0c:5b:18:30:23:
                    d7:7b:ec:c1:e3:ba:cc:8e:44:28:e0:f0:81:13:1b:
                    f5:06:55:71:85:d3:92:52:36:ff:8e:79:cc:46:29:
                    f7:7f:00:5d:cb:60:99:13:b5:87:db:7a:71:22:fd:
                    80:98:d6:45:82:83:ec:3c:c8:d8:a5:fb:17:3b:3e:
                    84:1c:2d:a9:de:d4:f3:45:9d:31:a2:84:10:4d:5d:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:E0:0F:88:2C:E2:7A:32:FF:14:01:8C:4C:99:93:21:20:4E:D5
            X509v3 Authority Key Identifier:
                keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:ca:c0:8c:bc:7c:eb:1a:b8:a8:81:47:bb:04:39:82:ec:
         e4:b3:72:7f:84:b3:47:a3:1d:77:3d:70:45:0f:e3:89:00:da:
         9b:18:61:ae:31:93:1d:c7:01:af:72:8c:0f:9d:06:01:14:7f:
         ef:c4:c4:02:e6:74:fc:05:4e:54:f4:1a:8e:9c:58:1a:6e:ec:
         e4:ff:d5:cf:a5:9f:af:d4:9f:bb:e6:f2:90:28:04:3c:14:51:
         37:f0:06:73:d8:81:ae:4e:ee:9c:eb:02:69:28:f8:d6:61:66:
         ca:07:c0:a8:75:db:41:1d:ee:e7:f8:70:71:18:6e:91:7e:3b:
         00:d7:7d:15:5e:e3:64:0e:18:53:7a:73:29:b0:8c:15:d2:a0:
         33:13:e5:0a:e8:90:1f:58:b0:48:3f:4a:0a:5a:b0:6a:e3:a5:
         b7:fa:fe:4d:c7:30:01:06:1a:eb:a3:96:e9:13:63:03:aa:5b:
         03:11:f8:a2:dd:b2:5e:dc:9b:87:81:44:ff:d7:4f:d5:66:50:
         83:09:23:1d:fd:f2:5d:d6:76:af:e4:e8:c9:c0:0f:27:1f:94:
         86:81:94:20:4b:a4:4c:1f:e3:77:83:52:75:ec:15:2d:c9:4b:
         da:cc:e3:96:8d:89:fb:93:ce:af:c1:14:92:cd:0b:06:43:78:
         e7:30:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:40 2025 by rpki-client