This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File:                     C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier:          pOlCS7CHhrcNS355WZtP9i6SAEmaHXz3sqnuHLeGj0Y=
Subject key identifier:   00:0D:35:41:8C:0E:64:3B:86:1E:18:35:74:E4:B8:E9:3E:19:A0:F3
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer:       /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial:       019AF12CBEAEEE85A839B4840F13C5D0C6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 01:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:32 +0000
Files and hashes:         1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: 8D/fIoDFpD0+shK3YD3Mv1irHIB559WXGLs8bJim4xo=)
                          2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
                          3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:be:ae:ee:85:a8:39:b4:84:0f:13:c5:d0:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
        Validity
            Not Before: Dec  6 01:00:32 2025 GMT
            Not After : Dec  7 01:00:32 2025 GMT
        Subject: CN=000d35418c0e643b861e183574e4b8e93e19a0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:b9:f9:0c:7a:9c:3d:57:33:03:df:2c:29:
                    8b:d8:93:c2:f0:07:75:dd:aa:60:a0:ca:04:7f:2e:
                    d3:4e:f8:a7:d7:4d:70:5b:0a:37:19:71:21:d2:f1:
                    89:91:59:3a:45:a5:7b:72:c8:18:e1:20:61:86:ef:
                    2c:36:41:7d:9a:96:37:1d:b9:47:f6:e3:ad:e6:fd:
                    57:ab:4e:0b:44:18:ab:a5:84:63:31:86:31:ec:0a:
                    b8:eb:5e:6e:04:3b:b5:15:81:cf:e8:05:41:d6:dc:
                    26:ce:32:20:d1:80:3b:a8:61:a5:52:ee:e9:ca:43:
                    5b:98:7d:57:0a:4d:b1:9f:67:1d:08:b9:13:33:0e:
                    44:65:e9:8e:67:41:75:e5:5e:0a:bf:e4:2f:43:a3:
                    a3:47:1b:ed:e7:e9:6e:10:7b:7a:77:c5:d9:17:db:
                    a4:1c:5b:47:23:db:1a:63:e7:13:e6:24:9f:c0:39:
                    8a:be:a7:69:8f:06:67:51:d5:ae:cb:78:a1:62:56:
                    97:51:e0:a9:4d:6e:03:68:e3:c1:12:1b:ec:51:9a:
                    25:11:20:14:e6:6c:fd:2f:00:c3:8d:03:71:b6:9c:
                    b0:19:84:97:01:3f:67:df:73:21:9a:a2:dc:0e:78:
                    34:c0:ce:c1:c1:c5:6a:3a:48:cf:6d:a4:d8:f6:24:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0D:35:41:8C:0E:64:3B:86:1E:18:35:74:E4:B8:E9:3E:19:A0:F3
            X509v3 Authority Key Identifier:
                keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:6d:78:5b:c6:c7:6b:89:7e:42:61:f7:85:e1:01:70:eb:
         f1:ba:08:54:93:7e:5b:23:e3:84:30:e6:65:c2:ac:01:a2:14:
         cf:46:25:8a:f7:da:1a:17:7e:42:87:f3:a9:4a:fa:96:16:2c:
         c4:f6:b5:a8:ad:be:12:8e:35:8c:69:69:1f:de:df:4c:2b:eb:
         97:e4:d1:a8:df:18:bd:71:28:a1:99:3b:cf:a2:5b:f8:d0:b3:
         c1:f5:84:5f:f1:9d:84:20:05:b9:b1:56:c6:08:17:8e:8c:2a:
         cf:fd:33:bb:9a:c0:77:c0:c2:61:94:20:77:9e:99:21:65:2f:
         82:25:2a:7d:17:04:aa:27:8a:7c:bf:c6:c3:b4:ff:57:07:e4:
         5a:19:33:77:a0:0c:f4:71:a2:14:b9:d2:b9:b7:48:58:88:10:
         4a:ff:06:42:8d:5c:04:9b:af:e8:0d:9c:35:d3:f9:5e:7a:97:
         f2:ed:ab:96:45:0d:42:3d:72:b2:f6:21:d2:52:20:07:91:c6:
         25:ec:bd:8b:77:d9:34:94:2a:f4:16:15:7f:05:91:ce:8a:e8:
         b6:da:0f:b4:d6:00:64:b7:ea:55:20:83:25:e2:cf:22:d7:c0:
         ec:f1:2f:3b:c4:19:56:ad:b8:65:10:11:e3:d1:b0:90:bf:18:
         1e:7f:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:57:53 2025 by rpki-client