This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File:                     rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier:          jKddEME9vaaLVnEwi1DdqVCdRdDAulRKtMUBomejJkg=
Subject key identifier:   43:5A:22:B0:A9:24:D8:34:6B:9E:B6:5D:58:D4:FA:11:2D:72:9D:40
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer:       /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial:       019AF1D1D07C60046A0717192C6D3B2FBBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number:          0C74
Signing time:             Sat 06 Dec 2025 04:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:50 +0000
Files and hashes:         1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=)
                          2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=)
                          3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: q3j/32ovjIN42VwtpqinlU7dG02MvZL5V7PrThYK9c8=)
                          4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:d0:7c:60:04:6a:07:17:19:2c:6d:3b:2f:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
        Validity
            Not Before: Dec  6 04:00:50 2025 GMT
            Not After : Dec  7 04:00:50 2025 GMT
        Subject: CN=435a22b0a924d8346b9eb65d58d4fa112d729d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:86:f1:5d:a3:b8:ee:ce:1d:87:86:67:12:
                    d7:34:6b:a1:4f:1a:db:54:39:b3:28:0a:d9:3a:f6:
                    c4:21:cf:e4:51:fa:f7:a2:df:3d:67:ab:fc:a4:a1:
                    bd:d4:54:4c:1e:40:06:81:01:98:c7:43:d9:2a:a0:
                    0e:cc:4e:f7:a5:b7:c5:7f:9c:37:86:30:a0:f0:20:
                    c4:0c:2b:e4:13:ba:66:df:d7:9b:7c:38:db:64:62:
                    57:9b:7e:ad:9f:d6:ca:03:20:ad:bc:5a:58:15:c9:
                    e2:8c:08:bc:b4:e8:db:db:06:e9:38:f1:6b:23:ed:
                    14:8d:42:56:aa:e5:78:bf:f6:5e:44:e1:11:71:8c:
                    f3:a0:ba:86:7d:f4:67:4b:2b:51:5e:26:0f:cd:3f:
                    49:d6:e8:12:5f:73:d1:f4:de:47:e3:9e:e5:b0:17:
                    df:1e:e4:3d:96:91:60:e3:fb:eb:78:db:f8:77:a6:
                    c1:34:3c:6d:d4:bb:fd:82:6c:93:82:95:07:e0:ac:
                    9a:88:24:dd:13:fa:21:43:b0:b9:f9:6e:c8:49:6b:
                    12:84:80:3c:bf:2f:fb:57:86:66:cf:cf:f7:77:c9:
                    98:7e:ed:98:37:6f:7e:4e:20:b3:2e:4c:77:bc:e2:
                    6a:c3:b5:a7:49:5a:ed:b8:4a:7e:ae:a0:5e:2c:81:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:22:B0:A9:24:D8:34:6B:9E:B6:5D:58:D4:FA:11:2D:72:9D:40
            X509v3 Authority Key Identifier:
                keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:30:50:8d:d9:0a:d2:61:bf:47:96:7c:a3:71:0a:1e:33:
         9f:22:44:43:09:f0:df:99:7e:0b:93:aa:b5:e4:ba:15:df:0e:
         a1:4e:d7:4b:8d:cd:53:53:33:c6:01:34:db:c7:6c:f7:ba:65:
         71:dd:07:10:82:f4:2d:38:26:02:0b:60:9a:06:1b:03:71:86:
         5c:8d:b4:83:f0:9e:24:ef:b6:91:2b:67:11:87:74:d3:44:a7:
         97:0e:3a:e5:f6:de:c7:9b:c2:eb:7f:85:48:e0:21:8f:2c:c8:
         b7:3a:0d:7d:89:62:d9:96:4d:3e:b1:a2:0c:79:d8:81:38:36:
         e1:0b:16:a5:49:d3:a6:80:89:b4:07:f6:a5:2b:eb:22:b7:bb:
         13:ae:2d:1e:fc:47:d8:64:48:42:cb:d4:9f:09:c6:1d:14:ad:
         d8:d4:ee:e3:c5:3c:10:ad:c5:fb:b1:15:c0:e8:0d:7b:7c:ca:
         01:dc:f7:3e:09:ab:ce:c4:37:08:b5:e7:76:af:45:3b:25:03:
         8c:d3:22:87:21:3e:e8:d4:44:8f:c5:29:b6:b8:d5:58:36:ef:
         99:3d:33:6d:98:61:d5:fe:8c:f3:84:53:ef:d0:f7:fb:e1:a8:
         3e:de:e6:21:f0:3b:1f:28:87:cd:aa:00:61:b8:5f:92:40:b8:
         20:fa:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:34:38 2025 by rpki-client