This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          ODDm+eM6iAbCO6Wxj8YSle5pkJdZqo8DYP2pZz1QpqY=
Subject key identifier:   14:95:3E:6F:09:58:54:05:0A:6A:DC:21:B1:79:00:CF:5C:22:5D:C6
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019AF4D29DCEBFE8A726F8EDE6D8A6B5FCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0B0F
Signing time:             Sat 06 Dec 2025 18:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:34 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
                          3: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (hash: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=)
                          4: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 97pr1QlRZ5tpoGszAM3mgEmLrXLCwN/rT4ZrsYb8xpw=)
                          6: m5c36cD4HEnvnKSFkdVs5FAdwfY.roa (hash: zDDIqdWDgnB3uWdjXBi6MQIDiaHOTeoGWkwt3yBBNJ4=)
                          7: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
                          8: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (hash: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:9d:ce:bf:e8:a7:26:f8:ed:e6:d8:a6:b5:fc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Dec  6 18:00:34 2025 GMT
            Not After : Dec  7 18:00:34 2025 GMT
        Subject: CN=14953e6f095854050a6adc21b17900cf5c225dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:49:63:32:02:62:7f:c7:db:a6:ec:f7:7c:
                    26:c6:27:ae:bd:5a:6f:d9:10:37:20:f1:75:cb:4c:
                    f3:3f:63:a6:c6:ac:15:06:cc:27:77:f5:ac:49:bf:
                    68:2d:fe:89:a7:7b:da:2d:c2:17:ae:b5:b7:72:12:
                    e6:6c:d3:a0:93:21:6e:bb:5e:93:62:cf:0f:58:44:
                    e9:c1:3d:7c:14:3a:03:1a:00:5d:3c:34:8c:13:49:
                    5b:c5:55:04:9c:f1:45:a1:b0:8d:20:cf:d6:8d:e3:
                    47:60:fa:05:d1:4d:e0:d2:38:1e:52:a6:32:44:91:
                    e7:61:29:fb:a7:fd:77:00:16:b5:c4:d9:92:ea:63:
                    65:ef:6f:5f:80:b0:29:16:82:93:4c:52:26:0d:19:
                    01:71:35:3d:59:fe:37:20:5b:56:8c:3b:e8:4f:0f:
                    e4:1c:f1:f2:4f:47:bd:5b:c8:cb:13:8a:58:29:14:
                    e4:47:ec:98:85:2e:87:11:48:59:f9:5e:3c:6b:03:
                    00:05:43:78:b5:4c:ad:79:d1:76:a0:bc:cf:17:be:
                    48:9a:e9:3b:ba:d1:b9:94:fb:0f:c9:a3:26:73:b2:
                    8c:a4:7b:3d:ca:95:28:88:93:d8:fc:a7:82:2c:9a:
                    b4:5a:fe:ec:c8:1d:9d:ef:e3:eb:8f:5d:2e:a8:71:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:3E:6F:09:58:54:05:0A:6A:DC:21:B1:79:00:CF:5C:22:5D:C6
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:a3:82:f1:52:18:62:91:0b:38:ea:31:08:b4:5e:52:f4:
         f1:1a:7f:14:64:6b:50:33:49:9c:c8:65:e9:fd:b9:d2:18:eb:
         ae:3c:bf:f8:50:8f:94:aa:db:88:48:21:55:95:69:01:15:75:
         0b:a5:e6:0e:02:fa:f1:71:11:ff:25:c2:47:7b:00:4c:65:74:
         6d:93:de:2c:5d:c0:90:74:48:57:e3:e3:72:dc:3a:8f:f6:6e:
         e8:bd:25:70:6b:5a:ce:18:18:0a:ac:92:63:74:46:09:d9:49:
         d5:15:13:6e:88:8b:e7:27:8c:4d:ca:1f:0f:8a:1d:fc:19:95:
         fe:be:e2:4c:97:d4:68:51:c5:04:53:02:07:54:34:31:5f:cb:
         da:19:1f:cb:dc:75:79:aa:da:92:97:3d:14:ed:c5:12:c5:93:
         49:64:03:1c:36:eb:b5:49:11:9c:60:cb:fb:6d:3e:78:79:a7:
         f3:65:f0:e1:01:03:96:1f:0d:dc:ef:cf:26:bf:e6:e3:48:0b:
         15:16:96:68:33:15:3d:3c:ff:26:57:2a:ec:c9:80:a7:0a:8c:
         37:b8:5d:a1:85:b9:34:4b:f2:5a:22:25:14:50:80:47:48:8c:
         b7:76:b2:27:46:eb:a9:81:80:2d:c3:93:af:7c:e6:47:d4:ed:
         47:92:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:12:25 2025 by rpki-client