This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File:                     imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier:          FVId0rsO2HfLsWkFWXhqmxEViYwW9Kj8wAzKOAWwT7c=
Subject key identifier:   97:83:E1:45:C0:94:2F:57:55:44:3F:2B:37:4E:B4:F4:A1:60:D5:C0
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer:       /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial:       019AF389B75356D68069CABF1292F3B3B99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number:          0492
Signing time:             Sat 06 Dec 2025 12:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:20 +0000
Files and hashes:         1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
                          2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: CoztTDX0/ZixnMhX/n6Sz43XZUuLRYUbUKTXesiIB3Q=)
                          3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:b7:53:56:d6:80:69:ca:bf:12:92:f3:b3:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
        Validity
            Not Before: Dec  6 12:01:20 2025 GMT
            Not After : Dec  7 12:01:20 2025 GMT
        Subject: CN=9783e145c0942f5755443f2b374eb4f4a160d5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:ec:b5:b7:ca:00:92:cf:b5:60:5e:47:b6:
                    2b:51:fa:25:92:4a:37:56:0b:be:8e:c3:7c:0a:35:
                    c6:6e:89:30:19:db:82:92:e5:28:a8:5e:e6:5f:5d:
                    07:0e:d0:ab:e2:b8:c6:89:cc:ba:67:00:39:d8:60:
                    f2:45:fe:64:ea:18:7f:e2:a5:78:43:98:ca:ec:2a:
                    a2:75:6f:12:84:44:4f:41:4b:cb:81:45:b8:7f:09:
                    7a:90:13:7b:4b:d4:0b:0e:91:91:47:5d:1d:bc:f7:
                    bf:3b:d3:5b:0c:05:44:c1:11:02:b7:51:b3:92:15:
                    1b:a2:51:4f:b7:77:53:b5:a7:b2:66:73:3e:b5:40:
                    1f:56:7e:4c:7f:18:c7:b8:64:b8:0e:a4:d5:3b:4a:
                    70:8e:e3:a1:62:28:1f:9c:f3:e0:c1:e4:08:96:6e:
                    89:db:ab:da:75:4e:c9:47:1e:e0:42:b6:fa:bb:61:
                    bd:1e:17:ed:24:aa:08:f0:78:72:f1:43:5e:d6:31:
                    39:72:e3:9a:57:93:07:54:5b:77:fe:de:c6:a5:7a:
                    fc:98:80:67:31:1d:ce:13:05:c5:e9:b3:b0:56:03:
                    02:71:1a:34:10:3d:b2:f8:3e:60:53:e0:f9:a8:09:
                    96:e1:4a:94:56:45:83:be:ca:af:08:32:e5:0e:18:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:E1:45:C0:94:2F:57:55:44:3F:2B:37:4E:B4:F4:A1:60:D5:C0
            X509v3 Authority Key Identifier:
                keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:fa:8a:0e:bd:3f:a4:d3:6a:a2:dc:f3:7c:a2:9b:fc:c9:
         d6:8b:a7:6e:09:78:fb:7b:ff:27:00:17:05:71:00:a3:59:02:
         13:58:fc:0a:0f:f2:df:c5:19:80:ad:4d:7c:81:21:88:1b:36:
         b8:ce:6d:b8:c0:46:72:63:61:20:22:f4:e8:03:e5:f4:5c:9f:
         3a:81:61:d7:d9:4b:9b:cf:19:b1:b8:25:e0:09:85:1d:47:42:
         88:8d:cf:2b:cd:92:f9:35:46:01:f1:c1:c6:71:7b:07:0e:29:
         d5:22:e9:b7:48:37:b9:ac:b0:5b:cb:31:ea:bc:16:bd:65:f8:
         6c:5c:8d:9e:2c:a5:2f:cd:14:8d:20:d7:2a:f0:55:02:dc:55:
         2d:cd:da:91:85:b7:69:ac:a0:76:4e:5a:da:6f:ff:a3:c2:c7:
         b9:d5:89:8a:dc:d2:1c:6d:98:e4:2f:4d:1f:9f:be:d0:b6:47:
         4c:3a:59:12:95:09:9b:ae:2e:62:c4:b0:ec:54:d7:77:48:3d:
         42:da:4b:59:db:29:bd:08:66:2c:b6:ed:53:de:b9:e3:e8:af:
         0f:51:db:0b:23:f4:5f:81:c3:75:66:1a:07:76:27:69:0e:56:
         14:ed:ff:91:40:19:e8:57:ae:d8:e2:ae:c8:ec:70:b4:7f:37:
         4d:ed:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:05 2025 by rpki-client