This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          nQHLemsW6MEoJXzfInAbMAReMsHCxRHQXhyYInDOC58=
Subject key identifier:   60:50:8F:2D:EF:59:4F:59:F6:D9:44:72:E4:93:D0:9B:7D:FC:75:84
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       019AF2AD40F8DBD22CC8E251A1D5906510BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          03E4
Signing time:             Sat 06 Dec 2025 08:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:31 +0000
Files and hashes:         1: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (hash: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=)
                          2: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: +jJj/R/jnlo0nWxfhFQEr491XWRZTUn4Df5JSRhU3Sk=)
                          4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:40:f8:db:d2:2c:c8:e2:51:a1:d5:90:65:10:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Dec  6 08:00:31 2025 GMT
            Not After : Dec  7 08:00:31 2025 GMT
        Subject: CN=60508f2def594f59f6d94472e493d09b7dfc7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:da:f8:72:a6:24:79:42:c1:cd:e5:de:2b:
                    d2:30:a9:94:b2:8a:a0:7d:ee:aa:84:bb:93:c5:0a:
                    03:3d:b3:28:d3:19:1f:f8:f8:a7:2d:42:6e:75:22:
                    ee:93:f1:8c:64:0a:69:50:c3:23:40:30:c0:35:42:
                    19:06:d0:94:67:cc:06:0f:bb:d9:d3:44:c5:67:ae:
                    3e:c4:ae:02:ee:44:54:d4:b6:a2:ea:b6:8a:fa:67:
                    12:6f:56:cb:26:08:fa:cf:a8:2f:41:94:7d:30:2f:
                    c0:c4:be:6d:04:64:22:3c:df:5e:ce:8f:d3:f5:fa:
                    0b:0d:be:49:a0:6c:a8:86:22:b0:39:a1:cf:31:5f:
                    55:4e:1d:82:9a:85:83:fe:35:7e:5d:2c:35:8e:2c:
                    be:50:dd:9c:e8:fb:6a:4f:04:21:79:8f:e3:60:87:
                    ce:71:ee:11:c1:88:a0:17:99:b4:a7:f8:a5:57:41:
                    0d:60:18:f7:ac:31:ea:12:cc:e5:cd:2d:6e:90:e4:
                    cb:85:79:9c:2e:fd:6a:cc:32:9d:4a:56:cb:5d:2d:
                    5b:6e:05:8f:11:9c:5e:68:8b:12:5a:a0:e3:a4:e6:
                    bb:b5:5d:59:1a:7f:b9:9b:d0:a6:42:39:9c:61:5a:
                    f4:5d:42:96:c3:4a:64:1d:3b:cf:e1:56:8a:e3:a5:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:8F:2D:EF:59:4F:59:F6:D9:44:72:E4:93:D0:9B:7D:FC:75:84
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:96:69:00:f5:c3:71:82:07:5e:87:73:13:9e:e3:30:36:6f:
         9b:ec:b0:36:f1:48:f9:92:4a:d2:de:40:bd:5d:fd:b5:cc:12:
         10:28:23:58:28:4e:d4:85:ad:49:fd:23:70:9c:fd:97:66:7e:
         7f:54:6e:1e:76:b8:82:ed:62:28:b6:18:06:30:f6:d2:70:1f:
         ca:a0:e0:f3:ac:39:02:92:4e:4d:ab:c9:2c:3e:14:9d:73:f4:
         62:3f:f4:07:fa:71:da:fe:b5:4a:f6:b6:2a:68:69:71:9e:fc:
         81:ce:df:e6:cb:98:0f:5a:fe:ed:b2:b3:d7:8e:f3:ea:40:c6:
         e3:ff:88:14:30:d3:69:83:b0:83:f0:85:d4:01:24:97:32:cd:
         36:70:84:86:1a:3e:7a:97:5a:b6:3b:4b:b6:c5:c4:12:7a:de:
         13:b1:15:df:1d:b7:b8:b2:04:f1:e7:84:e8:d9:a8:a5:a7:45:
         93:ec:9c:5c:b7:3b:33:2f:11:17:61:d2:2c:99:d5:5a:81:8f:
         41:91:31:35:be:48:5b:6c:2d:0b:9b:a7:bb:a0:4f:be:7c:25:
         8f:f5:d5:f1:f2:f0:1c:ee:d8:a0:71:7e:93:bf:17:d0:20:23:
         18:84:0a:52:44:a9:a8:f1:0b:c0:40:3b:14:14:9d:a0:32:8c:
         14:b8:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:34 2025 by rpki-client