This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File:                     T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier:          j9YF+6QnJvQOxW8ijFNJO6JR5Ue6ZEHAHIgv+8INcRs=
Subject key identifier:   B7:4D:D3:FA:24:D0:14:07:39:CB:0E:A5:39:8B:00:EB:32:A1:CE:9B
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer:       /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial:       019AF4650D7AAC71952215109B866A1CB864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 16:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:54 +0000
Files and hashes:         1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
                          2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: VZHZ8Kfp5oEpxMglr+pjVjlUGqcBcETnWcZ0HXy7Bls=)
                          3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:0d:7a:ac:71:95:22:15:10:9b:86:6a:1c:b8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
        Validity
            Not Before: Dec  6 16:00:54 2025 GMT
            Not After : Dec  7 16:00:54 2025 GMT
        Subject: CN=b74dd3fa24d0140739cb0ea5398b00eb32a1ce9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:e4:f5:c7:05:32:8a:9f:b7:3a:15:0c:1a:
                    76:86:89:00:ea:ff:8a:df:f2:b5:0e:c1:a5:da:b4:
                    13:37:da:12:80:d9:e1:04:a3:14:0a:8c:dd:52:e3:
                    47:08:6f:f7:23:e0:ec:cf:0f:9a:eb:6a:14:c6:98:
                    91:01:40:e7:73:3f:98:0a:50:e8:e9:ac:d5:0e:06:
                    ba:6b:f7:00:99:23:8f:54:b1:2b:2b:b1:ec:23:c6:
                    b2:f3:a6:a2:88:ea:94:bb:2f:95:88:41:ba:ca:1f:
                    97:ab:94:46:76:f0:4c:36:40:04:1f:7c:ae:fb:97:
                    b8:be:00:8c:e3:95:70:e4:a5:ee:46:05:6a:19:fb:
                    42:1d:49:27:47:e6:0e:69:85:55:da:15:5d:01:98:
                    c3:a0:13:67:a1:e4:64:75:2e:e6:5f:0d:b4:ca:17:
                    96:5f:d9:b3:18:6a:4f:29:fd:d2:a9:d1:95:ea:4b:
                    12:6c:e4:67:2b:e0:54:9b:ca:df:d9:1c:95:33:88:
                    4a:71:de:8b:b0:3b:29:98:93:36:70:5a:4c:93:4b:
                    54:ac:4b:70:9b:2f:69:12:bf:54:22:6c:0b:ac:d6:
                    58:87:f4:1b:da:2d:7d:cc:f6:20:34:d8:6c:68:37:
                    68:55:b5:61:dc:e5:1b:a6:1d:12:e1:d1:11:a3:76:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:D3:FA:24:D0:14:07:39:CB:0E:A5:39:8B:00:EB:32:A1:CE:9B
            X509v3 Authority Key Identifier:
                keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:1b:cb:91:8b:6a:da:93:36:af:94:9a:76:92:5d:82:35:
         52:ed:58:80:c1:7f:05:e3:5a:ce:58:3b:ac:e5:72:df:40:01:
         5c:d9:a4:a3:18:b5:6b:38:49:c2:90:01:32:6a:49:60:72:ee:
         d0:c8:07:86:c2:bd:ca:21:f2:ed:a4:5d:ae:b8:94:9b:6b:93:
         c8:91:36:2b:fa:45:86:c8:ca:24:19:ed:b1:f7:f0:56:70:15:
         07:b2:b8:d4:3a:85:bb:70:c1:7c:25:25:e5:ae:db:7b:09:6b:
         76:46:40:7a:b2:1a:18:3f:18:f7:97:31:40:68:b4:8c:61:8c:
         62:86:da:9b:ab:54:51:bd:4e:ec:5b:4b:d8:16:e8:d5:8b:d1:
         d3:54:dc:6b:27:42:e4:63:a9:7b:6a:e8:73:62:7e:96:93:70:
         a1:73:86:63:f6:03:d6:b0:30:00:53:56:e2:30:33:d8:31:22:
         fe:94:3f:22:9e:9b:54:c9:d5:75:20:37:78:2c:7f:fb:0d:39:
         e2:27:f0:f9:58:7e:3e:29:e0:49:19:63:2c:28:83:d0:c5:00:
         83:56:36:83:99:23:18:44:34:04:85:c9:62:a5:10:14:2e:61:
         bf:9c:28:80:85:6d:93:bf:43:8d:25:bb:13:ad:71:c0:3a:eb:
         d1:24:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:40:46 2025 by rpki-client