This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          7VTRQYh8h6cYyGhij8SY83qQs+skgpDzwh1ArtFUxp0=
Subject key identifier:   92:8B:44:D8:68:74:87:85:51:FD:AF:21:CB:EF:B5:16:15:1B:C1:60
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019AF4D2ADF139AAAB6B574FFC04AE6AF5F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 18:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:39 +0000
Files and hashes:         1: 0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa (hash: hF9BYbX+aU6Xe7lbRtg8LFUuOtXHeJr7ExZ5hZljljc=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: MpxNXx8hwWY0miBJAwATzcDiYkJy5gNrkmrupyTteVs=)
                          3: BxC0D_I8cfkE04FMob8aYCC9sOA.roa (hash: 8IymUbIEXnnTEcSvkY2I75XlihbCRPpcceQZo2zPDi4=)
                          4: IVrRWFI1ry1_t1jTghjesJBZcQ0.roa (hash: Gd14w4+1RfDgCwueX1ZHqk/dUawCUFDofpaoy6972KE=)
                          5: fAbOIbHK5-PVtXMOGIO2S4Xc80s.roa (hash: A/R1dGee9i9ll3uzH2uvDgQFeaI46CgRuWCcx8V04Lc=)
                          6: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (hash: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:ad:f1:39:aa:ab:6b:57:4f:fc:04:ae:6a:f5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Dec  6 18:00:39 2025 GMT
            Not After : Dec  7 18:00:39 2025 GMT
        Subject: CN=928b44d86874878551fdaf21cbefb516151bc160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:ac:25:62:6f:5c:d1:e9:bb:94:86:c9:1d:
                    d1:c8:7c:c5:05:a5:50:71:f6:fc:51:b7:9a:bd:50:
                    49:eb:da:3e:2d:e7:f2:7b:ea:17:5c:dc:88:32:67:
                    82:d1:30:d5:69:31:8e:55:7b:e1:db:a6:8f:2d:98:
                    47:56:1f:b1:92:83:3f:4a:da:b4:3c:7c:f7:f4:63:
                    b1:27:88:e5:e4:73:a6:71:b1:45:45:35:11:aa:a1:
                    05:11:5b:dc:18:77:78:69:42:04:10:99:4c:9b:d7:
                    e9:a5:ea:24:3e:65:32:4a:7b:f7:78:ad:ea:36:e4:
                    22:2a:84:39:71:c8:f7:d3:c3:92:cf:bc:2c:6e:16:
                    c0:31:de:11:f2:8a:a9:3c:b4:1a:67:c0:65:ca:74:
                    c5:fe:d6:9c:6e:e5:bb:b5:7c:8d:7e:f5:58:bc:14:
                    16:c3:b2:68:4c:fd:24:55:09:bd:71:a6:13:da:7e:
                    c9:f0:ea:b5:da:86:a9:02:0d:ee:5a:0d:b4:39:75:
                    3e:df:4a:f0:c4:4c:8b:ce:6b:09:aa:fd:d4:04:a9:
                    f0:70:fc:b5:6e:65:51:08:55:d8:e8:6b:d3:fe:a4:
                    92:a7:30:53:5f:07:cc:af:87:be:4f:49:7c:1e:b3:
                    15:c0:06:02:64:26:47:4b:7f:57:80:96:e0:01:5d:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8B:44:D8:68:74:87:85:51:FD:AF:21:CB:EF:B5:16:15:1B:C1:60
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:4e:5c:94:f0:00:71:a0:43:3d:e9:38:11:e5:2a:11:0a:
         da:22:6e:6e:47:95:e9:ae:7f:ce:0e:47:be:ac:a3:f8:3e:2f:
         fb:1f:99:bb:57:8c:14:df:de:e3:11:2e:b3:e8:b7:f3:70:f2:
         54:f6:5e:1d:e0:75:bf:52:29:1a:c3:08:7d:50:51:a1:55:87:
         e7:fc:7d:fa:29:4b:f9:a5:8a:a3:28:ca:04:e3:19:61:0a:3c:
         1b:f4:3b:7f:7a:7f:ed:d5:ae:c7:0f:99:2e:dd:90:51:a2:16:
         ab:c3:89:a6:dc:b5:cd:e9:e2:f1:b5:68:ca:45:b6:00:3e:c9:
         29:65:38:26:8a:17:98:46:6d:37:18:96:f8:15:94:3d:2f:4b:
         8a:46:40:5f:9c:36:14:5f:80:57:f9:31:3d:58:e5:a4:f5:45:
         c3:f3:93:52:b9:79:16:56:7d:2a:ae:2c:ad:18:43:7d:f0:63:
         1d:f8:60:31:e5:d8:13:20:2c:e6:40:68:24:35:5a:ff:83:d1:
         ee:b4:bc:f8:7c:7c:b5:ce:b3:79:e4:72:21:9e:58:3f:77:c0:
         84:40:13:d8:7e:d5:eb:87:ed:03:fb:90:7b:fd:af:8a:c5:05:
         d6:2b:b3:fd:4e:85:d3:61:34:1c:c0:ff:d0:53:dc:a7:79:8c:
         d8:56:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:14:09 2025 by rpki-client