This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File:                     0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier:          zmRO8PZHWA3qoyyFBGXKVQ1ujIx2wJofTzOfEfnw3d4=
Subject key identifier:   36:02:12:F9:24:AF:DD:41:29:2F:F5:1F:2C:2C:B8:20:0B:42:47:54
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer:       /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial:       019AF509CA285435A1B35CF4EF5663B0E28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number:          13FB
Signing time:             Sat 06 Dec 2025 19:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:50 +0000
Files and hashes:         1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: xSB86qdZUpf9O3M02gE9E4s6LdUdcEl8WD7VxMIIgsw=)
                          2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
                          3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:ca:28:54:35:a1:b3:5c:f4:ef:56:63:b0:e2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
        Validity
            Not Before: Dec  6 19:00:50 2025 GMT
            Not After : Dec  7 19:00:50 2025 GMT
        Subject: CN=360212f924afdd41292ff51f2c2cb8200b424754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:a4:37:78:18:c4:a3:35:95:5d:98:45:4f:
                    35:ba:18:b9:96:2c:af:7a:4d:fa:64:0b:35:e8:f4:
                    8e:ec:15:f7:69:e7:44:24:c3:92:6f:ae:db:30:18:
                    e1:6d:f0:0a:a2:0e:0f:fc:b6:95:4c:cb:1f:1b:05:
                    05:81:d5:51:9f:6c:b3:16:d5:b0:0c:10:ef:f5:4a:
                    33:ce:2f:a1:45:14:88:f8:b9:a2:3d:1b:57:0c:90:
                    01:48:0e:73:09:dd:e7:bf:37:8d:58:4d:2f:2e:54:
                    c5:34:cf:97:22:40:83:db:fb:0a:38:61:7b:fc:7c:
                    5e:a6:ef:a0:b1:ce:c9:4d:88:f6:8b:16:c9:e3:32:
                    7e:d0:e7:40:8b:fc:c1:4a:86:4e:09:33:f1:c9:ff:
                    7b:92:ac:5e:b7:9d:d1:14:e3:6a:b5:a3:0f:d4:a9:
                    f5:e1:94:9c:f6:d1:8c:5b:2f:88:94:b2:ec:00:db:
                    93:f8:d7:30:d2:25:c1:e3:61:42:3c:bd:4d:5f:fb:
                    76:43:4c:21:38:3f:ba:15:20:e8:22:f7:dc:e4:dd:
                    7d:ae:81:87:2e:92:9a:77:16:e3:ec:e2:7a:cf:ea:
                    19:2d:be:c4:2f:de:00:aa:95:33:59:18:1e:00:63:
                    f6:f9:b4:75:e7:3d:49:8c:ca:ce:f9:61:cc:39:19:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:12:F9:24:AF:DD:41:29:2F:F5:1F:2C:2C:B8:20:0B:42:47:54
            X509v3 Authority Key Identifier:
                keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cd:20:bc:fc:75:34:fd:e4:bc:2a:e1:e3:a6:a7:1c:55:b6:
         0d:e4:4b:9d:33:e5:a8:52:ea:ac:b6:43:f3:64:55:8f:95:95:
         4c:ae:09:e0:62:2f:e2:ec:24:0d:ae:4e:f0:60:a0:91:6e:d3:
         52:17:00:2a:de:b1:8f:a5:b0:45:0c:98:ff:8e:89:30:f0:25:
         f2:88:51:4f:ad:4f:79:49:d3:2a:6d:9b:a3:37:07:5e:ba:e5:
         9f:ac:92:20:99:f0:38:04:a4:7a:3f:98:97:5c:90:0c:14:d2:
         b1:50:2f:47:79:49:2e:69:c6:9c:84:36:a4:72:2f:c0:2e:ba:
         d2:7e:af:8f:88:6f:ab:b9:20:3f:cf:08:50:68:27:b4:c9:7b:
         78:3e:61:51:4c:cf:d1:fc:f4:60:2e:93:fd:09:a4:72:3b:43:
         ff:79:13:c4:e9:7b:9e:a1:ba:46:7d:6a:af:8d:29:7f:f7:3e:
         f8:ce:79:46:a8:ee:98:39:c4:dd:dc:0f:23:88:9a:96:94:df:
         f0:34:fe:ac:48:c9:f8:b8:0b:bc:ad:97:bf:20:5b:2c:1e:15:
         4b:1e:81:a1:97:36:fd:4d:33:bc:5d:bb:fe:b9:6e:86:cf:3c:
         e3:69:42:be:ff:41:ec:d7:20:e2:1d:43:44:d4:9c:51:2d:96:
         02:13:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:32 2025 by rpki-client