This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File:                     Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier:          s4TxUSQIx7xc65FnO2k1HqqTpWSyz4UlRY5vOGefU74=
Subject key identifier:   29:B2:DB:46:73:82:32:4A:F9:E0:AC:31:76:CC:0D:9B:37:ED:72:42
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       019AF23F811244C74DC422CC4AAE8BCA0929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number:          17C3
Signing time:             Sat 06 Dec 2025 06:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:39 +0000
Files and hashes:         1: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (hash: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=)
                          2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
                          3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
                          4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: yxiXLM6brnmiGKgl+tsz8DJqvV1GCGF4H0LdUW1eXaA=)
                          5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
                          6: ikzzB-TS7fbu_e8Jm20uc--Bfbk.roa (hash: L3G3izasb6pEF2T5imYXwo1rhko1cZpeUonzNyfE5G4=)
                          7: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
                          8: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:81:12:44:c7:4d:c4:22:cc:4a:ae:8b:ca:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Dec  6 06:00:39 2025 GMT
            Not After : Dec  7 06:00:39 2025 GMT
        Subject: CN=29b2db467382324af9e0ac3176cc0d9b37ed7242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:0b:42:7e:a8:ad:ee:30:05:5e:c9:f1:97:
                    3d:98:1c:76:a2:8f:5f:a6:80:01:ad:a2:c0:a0:5a:
                    10:e7:b2:97:d4:0e:a5:81:5f:e1:97:9d:bb:d0:e1:
                    55:8c:6b:7f:19:91:f2:b9:8f:7d:e5:81:90:b0:b8:
                    84:8d:23:12:36:48:f2:e7:dd:24:1c:c8:8e:b1:2a:
                    a0:d2:e6:c6:92:46:d3:38:67:92:06:3f:75:f1:bb:
                    7e:18:9c:cb:a2:13:ce:b4:ef:b5:2f:f6:7d:92:6b:
                    0a:41:ad:56:8d:90:80:e7:74:77:f4:23:25:f7:97:
                    a3:74:d4:e3:1c:4d:c6:c9:2e:91:fd:16:9d:a4:cf:
                    9c:18:36:00:ed:0d:35:76:56:fc:60:24:90:00:e9:
                    ed:87:32:10:3f:1e:aa:ef:e8:35:dc:47:05:3e:f5:
                    e3:69:c9:f8:14:53:20:b3:36:10:f6:66:80:0b:08:
                    9e:a5:25:20:c4:e6:e7:4e:3e:6f:04:43:23:42:77:
                    dd:76:17:ed:65:95:a2:9a:2f:bb:eb:92:34:08:67:
                    14:ad:c2:5f:79:ff:15:91:84:a8:0f:c6:1d:ff:9d:
                    e9:65:0d:95:1c:1b:7e:91:b1:cc:24:b1:2a:a9:86:
                    38:53:f0:96:1d:5d:6c:b7:89:e5:f9:65:a8:0c:d5:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:DB:46:73:82:32:4A:F9:E0:AC:31:76:CC:0D:9B:37:ED:72:42
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:86:6f:d3:95:28:9a:4d:c6:c0:21:26:22:48:a4:75:13:d9:
         b4:c6:a1:fa:95:d7:8e:e9:de:ef:5a:30:16:99:39:37:a0:25:
         42:83:a9:66:5f:82:88:e0:4d:91:64:3c:f7:ac:f5:9d:5b:18:
         94:40:68:fd:1c:75:cc:2e:bc:e2:de:50:c5:3c:15:43:3b:d7:
         b6:d7:79:91:56:07:2e:79:a0:3b:01:7d:4e:5d:4e:e1:fc:57:
         57:70:ce:4e:e1:3a:df:8d:59:3c:f1:db:f9:46:f7:6c:54:af:
         47:52:3f:0d:36:7d:97:42:04:06:c6:c6:07:d4:e4:aa:a6:f5:
         81:6b:2a:a3:78:fe:03:8f:4d:2f:91:aa:88:e4:6b:7a:fc:9f:
         d7:c6:8f:49:0c:1a:4c:1e:f0:cb:f8:0b:85:f5:a1:bd:10:fe:
         ef:46:a3:d4:9f:d9:9c:55:c3:39:da:cc:29:92:ed:e6:58:59:
         db:c5:85:69:1a:2c:22:62:1d:bc:b8:be:e2:3d:2d:54:23:81:
         44:ac:e9:48:13:8f:72:fa:62:8f:ff:84:ff:3f:13:dc:26:c7:
         11:41:1a:e6:31:cf:e3:97:0b:75:20:86:18:1d:e7:1c:86:41:
         4f:f7:39:7a:1d:8b:d1:d5:c8:51:ef:a5:da:a3:91:c7:23:c3:
         63:ca:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:31:30 2025 by rpki-client