This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
File:                     PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft (raw, json)
Hash identifier:          a4M/NdI7GXJQlDJrKArhFGsMT/cIylUtUwTic06ZXRw=
Subject key identifier:   9E:43:ED:A8:32:84:87:D7:34:5F:D3:DF:DA:E0:6B:82:19:F9:B1:98
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       019AF509AA0435FFD02D7237E2E1A461B6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
Manifest number:          16F7
Signing time:             Sat 06 Dec 2025 19:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:42 +0000
Files and hashes:         1: 5o7Wujr8dRj8Tg7xLsudfg7dW7M.roa (hash: qeh+5//aK6tfzfv8lL06hTEmh0G9vZwCC4vXm4+gjj4=)
                          2: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl (hash: +tlw6tOTsV8C2R1hdWP6wjF2c7NQ8N/HKQrkViLoUDw=)
                          3: f97lxnTpPAq22TugSRlYspLS210.roa (hash: JdfvaPlM9jUQgv8XgDP5xI3oBrxUeVgBrwf3Q1RSSso=)
                          4: n1FcMiLz_JoY9XiP99JB8OfMowM.roa (hash: RgJPkvDM2qRz5jBp/2aQedJ1Hffc/ZwhPvwJOiAl5xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:aa:04:35:ff:d0:2d:72:37:e2:e1:a4:61:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Dec  6 19:00:42 2025 GMT
            Not After : Dec  7 19:00:42 2025 GMT
        Subject: CN=9e43eda8328487d7345fd3dfdae06b8219f9b198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:88:fd:e5:67:73:3d:ed:01:cf:e6:02:37:
                    d5:66:65:39:24:6f:f7:7e:e8:98:d3:c2:4f:08:a3:
                    b2:45:a1:7e:65:d5:2f:c6:aa:10:de:04:32:dd:48:
                    b4:f5:9a:38:d1:62:b8:5f:4e:cc:09:68:6a:82:3e:
                    3b:4b:de:97:d6:db:b1:a2:98:bc:2c:44:ec:5b:ee:
                    a8:a5:3a:34:57:94:b6:4c:83:87:6b:41:0d:47:96:
                    9b:fd:5e:96:2f:fd:4e:05:89:dd:8a:db:16:0a:21:
                    fd:18:f7:e7:75:b9:e8:9b:a2:26:85:15:89:e3:66:
                    f7:a1:2d:a3:20:12:45:2a:ed:fb:40:74:16:71:9a:
                    f4:47:76:aa:e3:0d:86:1d:5d:17:56:64:ed:d4:4e:
                    46:95:45:6e:a8:47:10:85:75:97:ce:32:02:da:97:
                    b8:41:55:98:ca:81:24:a4:36:85:68:73:44:63:a5:
                    94:4d:68:97:b9:b3:14:11:e2:c3:aa:0f:36:24:93:
                    a6:c9:ff:65:24:aa:b3:ce:45:db:53:1c:45:81:02:
                    43:58:89:a5:3a:96:00:d4:b8:1c:18:79:b6:0a:ed:
                    04:fa:d9:88:52:db:c7:90:9a:08:50:ae:2b:c1:5c:
                    02:20:a4:7d:87:f8:0d:96:29:95:2e:35:27:77:11:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:ED:A8:32:84:87:D7:34:5F:D3:DF:DA:E0:6B:82:19:F9:B1:98
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:e5:08:f2:06:d4:e8:8c:07:7f:27:79:6e:95:6c:df:d8:
         37:bd:08:13:3a:fa:8f:cc:65:ef:cf:f2:8d:6f:fd:fe:f1:04:
         4d:92:8d:ea:a3:7d:3f:1f:f0:3c:3c:2c:35:85:c2:78:48:14:
         28:ce:b3:84:7e:48:0b:ec:1b:55:1a:08:54:66:b8:9c:63:93:
         c7:11:b4:33:99:00:6a:c2:43:cb:c8:a1:a1:94:57:3a:ad:02:
         e5:71:ed:08:99:20:e0:7e:dc:da:0a:8a:9d:51:c9:85:cc:76:
         db:02:8d:5f:d8:2b:a0:59:67:99:65:83:f4:55:c1:d5:83:11:
         a8:94:25:20:f3:58:f2:8d:d0:d9:f1:b1:cc:97:79:e6:22:20:
         b2:73:4a:a3:69:e3:4b:52:15:95:90:90:c5:cf:0a:5d:e7:e1:
         2f:a4:3a:38:2e:d0:2f:9b:53:9f:1e:dd:10:b6:f7:77:27:19:
         77:39:90:b9:8b:90:4f:5d:a0:35:3e:83:aa:99:8d:fe:52:5d:
         d9:79:d7:3b:2c:01:6a:c3:b1:ae:f6:62:47:96:57:e9:0a:96:
         f3:20:7e:ee:a3:87:f6:99:b0:41:5c:af:1e:c2:47:30:b7:47:
         e8:41:b6:76:df:fc:d1:12:2f:7f:13:21:b8:3f:c7:68:00:fb:
         21:c2:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:48:35 2025 by rpki-client