This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File:                     tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier:          4d8p1PT/NpvUn7167O/dBoylD1bu5NDsPqi7wB2UpEg=
Subject key identifier:   B0:48:E0:85:91:64:99:98:83:1D:A2:F1:E4:FB:75:15:1F:03:DD:1C
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer:       /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial:       019AF164922A83DACB9AA98A173FD866F110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 02:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:31 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:31 +0000
Files and hashes:         1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
                          2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
                          3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: 0g5HVLF/P/fU63WmbFGg9H7to8VpFCiq2lhF7QJsFB4=)
                          4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:92:2a:83:da:cb:9a:a9:8a:17:3f:d8:66:f1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
        Validity
            Not Before: Dec  6 02:01:31 2025 GMT
            Not After : Dec  7 02:01:31 2025 GMT
        Subject: CN=b048e08591649998831da2f1e4fb75151f03dd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:4d:d1:d7:6f:ff:93:86:0f:9f:85:49:da:
                    58:8c:7e:7c:e1:be:ab:73:72:2f:d2:8b:22:be:5e:
                    95:8f:35:1a:15:31:ad:65:c9:e0:ad:68:9d:62:5a:
                    f1:4f:4f:00:81:db:8a:36:91:d6:f5:1c:cb:8e:89:
                    45:b3:91:87:fe:b6:15:18:4c:f5:64:05:cd:c5:b9:
                    58:bd:c5:da:b6:62:33:22:91:4e:48:21:83:b4:14:
                    d6:2b:12:7e:3f:71:db:3d:6b:79:4c:84:1e:a2:72:
                    dc:c1:70:15:3d:e7:2b:6b:1e:d2:ec:15:a1:e9:18:
                    9d:e3:08:7e:6b:9b:aa:71:45:aa:39:19:ad:bc:1f:
                    22:0f:02:2a:f6:c3:4e:a7:6a:da:65:50:fe:0e:81:
                    8e:9e:c6:e4:2c:1e:ce:1a:cc:23:a9:4b:6a:d0:77:
                    c9:33:65:4d:aa:ea:99:63:04:7e:1a:a6:d1:29:e2:
                    f0:87:4b:2d:80:b8:d2:9e:c2:83:1b:b3:85:40:b8:
                    80:bf:ab:e0:7c:da:df:7f:18:9a:71:df:a5:ff:f4:
                    6c:06:f7:91:d4:0c:13:c3:fe:25:f2:f3:fd:a6:c3:
                    ff:7d:82:ce:88:b0:a3:f9:84:21:59:f9:15:09:fb:
                    d6:7e:11:12:4b:83:28:19:a2:dc:2b:ac:91:43:74:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:E0:85:91:64:99:98:83:1D:A2:F1:E4:FB:75:15:1F:03:DD:1C
            X509v3 Authority Key Identifier:
                keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:4a:ff:01:50:92:61:22:28:27:a7:02:a1:02:b4:7d:c7:
         bc:ee:bb:ce:2d:41:8a:7c:d4:20:8d:c1:05:e8:ff:90:b0:a0:
         39:5b:e5:6b:e9:f0:e2:40:7b:97:ad:90:d0:20:d0:74:ab:1e:
         1f:d6:dc:1a:b9:93:a3:24:6b:b9:3f:55:c6:5e:51:fa:bc:3c:
         88:e9:a2:6d:ee:74:b4:5d:45:d6:da:2d:63:fe:6d:f2:c6:74:
         71:3b:c9:d5:96:2c:c1:2b:76:df:3e:f2:e4:52:36:5f:e5:45:
         a3:ac:00:96:06:9a:c8:1c:fe:02:c7:53:0d:7d:a7:f2:f2:9d:
         ee:74:66:ff:bf:ea:82:52:a2:d9:02:28:e8:7b:9e:37:50:98:
         48:79:2e:b1:4d:19:21:66:77:af:04:78:79:41:16:ad:74:89:
         2b:8b:4f:74:8b:75:b9:63:c1:c4:3a:ca:d6:b0:e7:ac:d3:ef:
         49:06:27:d7:7d:9c:58:5f:83:64:b6:20:0e:1f:1e:8a:73:49:
         b3:cf:34:57:c7:9c:a3:26:9b:5e:7a:40:d0:04:cd:2c:aa:57:
         95:95:c7:06:e3:5f:34:45:d4:9a:71:2b:2c:ef:29:83:95:04:
         69:0c:29:4f:c6:ab:a7:a9:93:de:dd:df:4b:19:44:3c:9f:3c:
         e2:45:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:37:11 2025 by rpki-client