This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File:                     tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier:          zPNzFicq+Km/ivoNW3tkHeNOP8iWTaId9jeZpIA81pY=
Subject key identifier:   99:D7:18:0B:EB:DC:DB:93:43:B6:97:4E:8E:FE:97:CC:D4:E0:0D:36
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer:       /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial:       019AF3C09B90F6B21EAB33593B8F2FF974A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number:          15A5
Signing time:             Sat 06 Dec 2025 13:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:17 +0000
Files and hashes:         1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
                          2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
                          3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: inoetKw0icOI2MbCRJdJG0NVqe3dMrTHLRSohrZSBZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:9b:90:f6:b2:1e:ab:33:59:3b:8f:2f:f9:74:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
        Validity
            Not Before: Dec  6 13:01:17 2025 GMT
            Not After : Dec  7 13:01:17 2025 GMT
        Subject: CN=99d7180bebdcdb9343b6974e8efe97ccd4e00d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:a7:81:23:8d:1f:d3:b0:31:fa:78:71:41:
                    8a:1c:9a:8b:ae:da:74:b4:3b:c3:d1:36:b9:88:0c:
                    a1:cf:00:db:84:c1:4f:14:02:65:5f:c7:20:7f:3a:
                    85:75:67:8c:0a:23:6e:9a:43:0d:4d:3a:88:bf:78:
                    84:c8:14:a6:82:d6:8a:2d:ff:06:0e:2e:b5:eb:9e:
                    9f:9e:17:49:fd:41:06:7e:ad:49:05:97:c2:85:7f:
                    3f:e3:14:51:74:c9:c0:f9:43:1c:ad:c6:b9:45:7b:
                    a7:93:9e:67:8c:c0:55:20:a7:99:39:65:73:03:0e:
                    91:94:67:34:93:96:fe:2a:ef:4a:7c:59:17:ce:ca:
                    2a:36:56:e2:03:47:81:cb:f2:46:cf:6f:c1:08:03:
                    f8:f7:6e:f5:a7:59:37:4d:16:b2:fc:6e:72:a9:02:
                    6f:33:5d:6d:cf:73:31:97:4f:7b:40:f2:93:a9:9d:
                    4f:66:f4:11:1e:3c:9c:f2:8f:38:a4:85:85:8a:bf:
                    6e:80:fa:3a:15:34:c1:ee:de:24:94:41:1b:c8:f6:
                    71:08:2e:b3:d6:86:2e:38:4e:39:94:b1:d4:3f:bc:
                    b8:09:3a:73:99:ab:37:e9:e1:17:e0:9f:bd:8b:ee:
                    e6:c3:79:8d:34:ac:2c:91:06:23:8b:ca:f5:c9:d6:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:18:0B:EB:DC:DB:93:43:B6:97:4E:8E:FE:97:CC:D4:E0:0D:36
            X509v3 Authority Key Identifier:
                keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:51:07:b0:02:a2:2d:4d:4e:76:07:e9:c2:8a:7f:ef:87:
         55:4f:ba:c0:b3:f6:da:64:0a:d1:d8:e1:46:7c:0a:b6:9d:d3:
         48:4b:2d:df:02:37:fb:c9:e2:a8:17:4c:0f:1f:b4:16:de:c7:
         19:b9:43:0c:2e:d4:9d:3a:0d:fd:f8:7a:6d:44:6a:ab:3d:56:
         81:b2:3e:ca:29:9b:be:55:8c:aa:e1:a5:45:ad:6c:e6:fd:d5:
         6e:9f:e2:bf:52:6c:60:f2:8e:51:a0:13:22:fb:18:44:e8:5f:
         14:fe:1d:d2:dc:0e:b6:3e:7e:36:ff:5f:f8:51:13:cc:14:55:
         6e:6f:65:0d:a8:4a:49:1d:05:20:ad:4c:46:44:16:ad:b3:fa:
         2b:15:87:fc:d7:9f:04:17:56:91:43:6d:29:0c:54:5f:2f:b6:
         b1:1d:97:d4:0c:78:cc:c9:b3:84:f3:3b:0d:55:f8:78:50:d2:
         44:01:6f:4a:16:52:2d:bb:e3:27:9a:86:26:b0:dd:6b:99:ee:
         7f:15:74:3b:64:bf:2c:f9:ea:6a:87:cc:57:98:fb:cd:d8:e6:
         0e:3b:5a:dc:d6:cd:55:7d:94:11:ed:01:fe:25:4c:a7:a6:c8:
         bf:51:a3:e6:8b:e9:14:6a:62:2a:15:37:b7:62:38:fb:22:9e:
         20:0a:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:40:32 2025 by rpki-client