This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          UQyX01/G3j98rjz940I6cWlEuw9ETImtKrP9OGS2y38=
Subject key identifier:   E2:56:7F:53:80:94:5C:2A:88:AA:B9:2B:71:18:53:6A:88:0F:9A:C5
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019AF2766F59AA76E749310AA42F1657A6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          026C
Signing time:             Sat 06 Dec 2025 07:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:39 +0000
Files and hashes:         1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: CRYqkuVpGM1wOrG+hElU9ksjqfYkR1cdSLwVwSkDu5g=)
                          2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
                          3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:6f:59:aa:76:e7:49:31:0a:a4:2f:16:57:a6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Dec  6 07:00:39 2025 GMT
            Not After : Dec  7 07:00:39 2025 GMT
        Subject: CN=e2567f5380945c2a88aab92b7118536a880f9ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:e5:ab:86:d7:d9:43:79:c5:63:9b:da:24:
                    5f:a6:b8:5b:30:72:42:2c:e8:03:28:d0:73:22:b4:
                    56:c8:8b:d8:57:c0:a5:48:ed:9c:41:6c:83:bc:be:
                    b8:12:a5:d4:13:97:1c:24:ab:f1:0e:ca:43:39:79:
                    ab:e6:b7:01:aa:43:df:21:1e:ef:94:45:d8:2c:ef:
                    71:25:52:ed:97:95:41:cf:af:9f:c9:3e:af:56:e2:
                    f2:ea:8e:d0:64:13:ce:de:9b:35:f3:90:7f:4a:14:
                    f3:06:79:07:0a:20:04:e4:87:c4:00:fb:d6:3c:fe:
                    ca:43:06:ff:ab:93:fe:38:74:cc:51:bc:9b:c5:d9:
                    d1:fc:88:99:1f:0c:bc:15:ca:5f:fa:83:b0:09:56:
                    8a:3a:45:da:50:bc:5c:6f:c9:5c:fc:8a:2a:a6:c8:
                    17:6e:5e:79:5c:8c:78:6c:ee:32:3f:0a:a1:30:0b:
                    9f:53:c4:c8:b2:e8:a2:17:36:ee:30:aa:97:78:dd:
                    0b:9c:ff:4e:76:e6:db:62:88:98:0a:7c:17:bd:f3:
                    54:9f:72:e4:8f:a8:cf:8d:25:ea:8a:8c:b0:64:99:
                    70:b8:15:76:41:27:82:b5:dc:7a:71:fa:f0:90:9a:
                    c1:0c:98:cb:95:bc:33:99:5b:18:77:36:0a:c8:d3:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:7F:53:80:94:5C:2A:88:AA:B9:2B:71:18:53:6A:88:0F:9A:C5
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:80:a2:30:7f:c6:96:f7:f1:6c:e0:d9:25:1e:75:30:b4:a6:
         50:e7:d4:04:e1:f0:af:90:09:86:31:22:26:91:a1:22:e1:a5:
         01:3e:ad:c9:49:a7:b0:74:6a:04:3a:81:70:c9:de:8f:21:1b:
         ca:38:a2:d9:36:bb:aa:d5:20:8a:da:62:aa:df:13:75:b2:cd:
         84:10:6a:8e:73:78:e8:1c:a4:78:ee:76:fb:63:0a:9e:c0:cd:
         c6:7f:7b:ad:f2:f6:d9:3e:15:a1:f7:d4:4d:06:c8:fc:33:d5:
         7a:c2:93:69:70:2d:35:0c:c2:9c:96:99:f0:a7:ef:3b:19:e4:
         0a:84:41:42:b0:2a:e0:38:89:32:13:fb:cc:e8:f8:78:f3:67:
         83:46:fa:6e:a6:c2:a3:e7:9a:f2:9f:98:60:92:7d:3d:de:32:
         98:3b:e1:38:6c:a6:12:6c:69:f6:9a:9c:a5:ca:52:21:e4:26:
         8a:61:fa:90:97:48:25:a1:ce:bc:fb:2e:85:b5:8d:04:84:39:
         ed:6a:73:36:d9:45:9c:04:84:e6:1e:55:2e:c1:6d:74:63:cb:
         bf:39:7a:a0:50:9c:29:f4:f4:13:d3:3d:8d:89:39:59:9b:5b:
         51:6b:f2:47:a0:aa:53:e4:04:a5:a6:89:f2:71:56:d2:35:bb:
         a5:4a:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:30 2025 by rpki-client