This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File:                     KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier:          wbRK4rxwE0qZsv1B7eQHQba3X2Ur74W4wLPHBQdU2EQ=
Subject key identifier:   B8:3D:A8:F7:02:00:17:50:0A:6F:66:9E:91:02:D8:3A:43:8C:D1:E2
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer:       /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial:       019AF12E30385415744410F7FCBBE6854F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number:          0DF6
Signing time:             Sat 06 Dec 2025 01:02:07 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:07 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:07 +0000
Files and hashes:         1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=)
                          2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: o/0ja8IOEifnFfVk1l+ZU6AmAUKuzUVQR60HJ6dr8us=)
                          3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:30:38:54:15:74:44:10:f7:fc:bb:e6:85:4f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
        Validity
            Not Before: Dec  6 01:02:07 2025 GMT
            Not After : Dec  7 01:02:07 2025 GMT
        Subject: CN=b83da8f7020017500a6f669e9102d83a438cd1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:ea:37:0e:4f:c6:8b:87:48:34:01:94:67:
                    e4:ce:9a:4c:0e:b0:3b:0e:cb:d8:da:bc:08:b3:b7:
                    a3:84:3e:3d:5f:9f:7f:12:5e:c8:f3:22:a3:b0:bd:
                    0f:ca:7b:97:7a:5d:47:08:b3:12:a3:22:d5:96:52:
                    75:86:7c:ea:7d:70:ae:b5:a8:b3:01:87:47:f7:b0:
                    87:21:45:93:f8:b9:da:f1:62:98:bc:bb:4a:6b:b9:
                    eb:42:bd:df:6c:df:84:c9:c1:0c:49:23:35:cf:2c:
                    6f:b3:93:23:9d:dc:f7:aa:7f:60:67:4e:d2:0c:d8:
                    74:53:06:d7:79:d6:4a:0a:84:8b:e9:67:69:80:ef:
                    85:6c:df:68:05:7e:36:00:18:58:bd:f8:be:f9:32:
                    be:9e:b9:51:6a:f9:13:cc:54:0c:30:db:0d:6c:4a:
                    3a:b6:7d:72:2b:b2:e8:d7:b5:4b:de:55:ba:ea:0a:
                    ff:97:60:75:3a:28:3c:dc:a2:5d:bc:b6:5f:12:bd:
                    fa:84:b1:54:05:b3:99:cd:b2:23:68:37:dd:68:5d:
                    4c:b6:13:37:39:91:f0:b8:23:c3:14:44:3a:1b:fa:
                    e6:7b:fa:2d:ca:4a:bf:85:92:95:2d:05:17:3a:50:
                    9b:c6:b5:23:90:df:48:4c:66:25:cc:91:73:8d:dc:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:A8:F7:02:00:17:50:0A:6F:66:9E:91:02:D8:3A:43:8C:D1:E2
            X509v3 Authority Key Identifier:
                keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:d7:86:33:64:09:a8:cc:05:56:12:36:c9:29:1e:39:b4:
         2c:07:ea:28:5e:6c:98:23:e5:6e:56:f4:8c:4d:78:8c:9b:3b:
         a8:8d:1d:aa:a4:76:a8:89:a8:85:d2:d5:c8:8c:84:81:97:5a:
         02:17:73:6c:22:e8:e3:01:61:50:ad:db:bf:5f:18:5b:27:da:
         3c:e4:5d:d9:b1:ce:de:6a:da:26:0f:c6:30:2f:99:d9:6d:0b:
         a6:52:0d:55:8f:4d:93:25:05:2c:b5:15:a4:df:8e:41:35:23:
         aa:06:fb:de:56:b1:49:83:28:06:d2:75:c2:1d:97:62:98:00:
         99:54:29:8f:0c:ba:b6:88:23:24:79:4e:e7:68:ca:42:76:3e:
         c4:64:c0:11:99:54:7a:f1:a2:24:04:29:13:e8:9f:da:6e:1a:
         87:1b:1d:8d:10:6a:ed:7d:eb:c2:75:a5:f7:a9:aa:9e:e2:03:
         57:ff:a3:5a:60:8b:b3:91:7d:64:eb:4a:a4:ad:a7:40:c3:0b:
         e3:00:67:32:e3:9f:8c:c4:b9:69:89:2b:1a:ac:b7:f9:5d:5f:
         dc:75:c9:52:be:c2:67:d0:df:59:0a:b3:95:9c:bc:fe:b8:3c:
         74:30:a8:ea:13:53:f3:33:3c:f8:fc:00:b0:8a:e0:29:05:1a:
         c4:13:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:50 2025 by rpki-client