This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft
File:                     TutrLD4JyhxF_XVH5FiUbMikaLQ.mft (raw, json)
Hash identifier:          MOtM04cTNgDEFBg2v9D365EGyUNF1qZbaqIIvhCMCMY=
Subject key identifier:   C8:31:8D:11:38:3C:91:64:D0:BC:BD:E9:24:2A:75:1E:99:5C:4E:E1
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Certificate issuer:       /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial:       019AF3F75725BD7D5728325D02DFF0245742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 14:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:04 +0000
Files and hashes:         1: K__GMoXF7tpKIBCiKEO4YQunEUE.roa (hash: Hsn/cSGE8VGLi98WwQiwxBKaIoAEOSSG1bmkWgHfUWc=)
                          2: TutrLD4JyhxF_XVH5FiUbMikaLQ.crl (hash: V3f9+6Ve6auFd7Q1z2VXIMDvgF8NgJ/s4bAxAoCMZuI=)
                          3: dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa (hash: UyKK2/i5Yn8gqe/TaIulEkQyB+tb4FXt18YdvEC0TSo=)
                          4: gF7051dp_cMuLgQvCjwhgEPPRqw.roa (hash: q3Q/Dxx58MNi5+ugrnS2SfmFlMdjPiuWsnFSR9Imvjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:57:25:bd:7d:57:28:32:5d:02:df:f0:24:57:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
        Validity
            Not Before: Dec  6 14:01:04 2025 GMT
            Not After : Dec  7 14:01:04 2025 GMT
        Subject: CN=c8318d11383c9164d0bcbde9242a751e995c4ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:dc:11:4f:61:c6:7d:c6:ef:37:61:7c:57:
                    da:8f:0e:f9:b6:ad:0a:9b:ba:54:3f:b7:ff:90:da:
                    2f:e5:bf:8f:64:a7:35:42:e4:5c:29:71:92:a2:4d:
                    cf:60:8e:6c:d9:6b:c0:20:86:6c:50:07:85:d8:1e:
                    93:13:4b:bb:1c:2e:8e:7c:d8:2a:4f:12:d8:4f:9f:
                    8f:13:13:78:3b:86:70:56:10:e4:96:ce:90:c8:ad:
                    54:ac:85:bb:df:02:8a:4a:be:59:d0:80:1d:25:bf:
                    99:92:30:7e:47:08:01:f9:f7:85:ef:1c:df:92:fe:
                    1b:4d:b7:8a:b9:b8:df:0c:32:29:9d:83:87:79:56:
                    8a:e0:6c:43:46:17:61:97:4c:89:33:c3:61:ad:61:
                    49:30:5c:fe:62:22:7a:5d:fa:cb:04:31:fa:5c:78:
                    3a:50:e1:8c:c4:5f:9a:26:f0:bb:5d:0c:b0:5d:5d:
                    c5:f3:4e:d7:1d:fd:4e:0f:e7:7b:ff:d6:66:9e:f4:
                    29:5a:62:0f:50:c2:53:40:b5:12:76:0a:67:73:cb:
                    27:9e:32:85:1d:b1:4f:39:a0:a2:00:53:15:23:54:
                    6d:7a:76:4d:e1:6f:69:fc:14:26:b2:10:4c:cb:bb:
                    09:36:fc:71:ca:34:70:c0:76:db:ea:e7:03:b6:b8:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:31:8D:11:38:3C:91:64:D0:BC:BD:E9:24:2A:75:1E:99:5C:4E:E1
            X509v3 Authority Key Identifier:
                keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:f2:84:94:da:71:d4:c1:ef:ca:6f:6d:dc:ec:2a:da:86:
         11:54:78:7c:87:16:f3:e9:7e:6a:52:65:c4:0f:b5:b8:23:e9:
         55:21:54:9e:7c:79:63:11:61:b5:1a:79:4b:e1:a7:03:b3:3d:
         66:8a:04:2f:2a:d4:ef:e0:7e:ec:9d:b4:c8:2c:9a:9e:96:00:
         db:d8:70:07:ef:28:f5:71:88:19:36:39:65:c7:94:e6:f8:d2:
         4f:8e:98:59:ee:ed:be:18:f4:b5:a0:3b:56:fc:9d:38:ab:a8:
         c0:2d:e7:de:47:07:3c:dd:ec:7c:ff:bd:50:0b:2f:60:95:aa:
         1e:c3:d7:eb:c6:b0:f8:d9:f7:04:f4:3b:91:57:30:0c:ed:0e:
         bd:b1:d1:cb:c6:3e:e0:39:96:be:e8:6c:38:ee:c9:13:02:4d:
         24:ac:7c:1d:dc:fb:d9:40:63:b3:c2:2d:a1:57:1c:2d:73:2d:
         d0:3f:f9:30:66:27:8f:73:04:3b:6b:ac:b0:27:73:55:ff:7b:
         b4:23:3f:90:45:79:58:85:07:03:c4:af:f7:05:76:74:a5:6a:
         a5:10:59:99:ad:cb:33:ea:61:e3:a3:fd:f2:cf:b7:47:ce:09:
         6f:90:8d:a3:4f:22:c2:4a:19:fb:b4:d5:89:f3:a0:cb:23:26:
         0d:f9:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:33 2025 by rpki-client