This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          Zj/LAX79FARGyXAkoCMmc7F/IZJYaVU/LDzuRmxvISc=
Subject key identifier:   84:0A:C8:7D:F8:14:F1:71:95:3A:66:38:33:DE:FE:94:22:AB:0F:F7
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019B33E873E9D1FED966D34E57BAAFC6822D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          1399
Signing time:             Fri 19 Dec 2025 00:00:30 +0000
Manifest this update:     Fri 19 Dec 2025 00:00:30 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:30 +0000
Files and hashes:         1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
                          2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
                          3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: gah6qbnnbQZGlgtHv9PesCopqPc/GPPlek+FTuTE3Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e8:73:e9:d1:fe:d9:66:d3:4e:57:ba:af:c6:82:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Dec 19 00:00:30 2025 GMT
            Not After : Dec 20 00:00:30 2025 GMT
        Subject: CN=840ac87df814f171953a663833defe9422ab0ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:62:72:79:c5:be:97:fe:4e:e3:f4:4e:6e:
                    cc:7f:d7:85:1a:1d:1b:3e:f9:aa:27:7b:70:99:5b:
                    f5:33:26:68:35:6a:ac:15:15:a4:fa:ea:9b:f9:d3:
                    30:1f:12:a0:3a:ae:d7:85:35:71:51:46:0a:a7:29:
                    94:8b:ff:a9:db:dc:d3:dc:a6:be:70:01:85:e0:e5:
                    b9:e5:4a:2a:c8:f1:ff:75:d3:3c:fb:6b:83:7a:ac:
                    1e:73:b1:d9:80:6f:f8:1f:3d:ca:64:2e:19:91:67:
                    f0:74:c6:cb:00:58:15:86:f3:e8:29:0a:48:20:84:
                    51:c6:65:d5:a6:d1:3c:7c:13:22:f8:81:f5:10:be:
                    6a:5f:e9:29:78:11:32:30:20:68:86:da:8e:ee:50:
                    a4:b2:f4:c3:9d:5f:c9:49:5c:84:d7:ab:f6:80:a7:
                    af:de:47:88:13:32:0d:0c:0a:28:7e:2e:93:01:f7:
                    21:3f:3a:b5:96:47:dd:e5:d5:d7:9f:6f:f7:7f:ac:
                    ec:1f:17:59:97:d8:01:90:94:0e:95:da:df:e2:32:
                    4b:71:fb:99:55:27:40:2b:b1:2f:3c:21:56:d0:56:
                    2b:1d:16:c9:9e:d7:0e:fb:2f:b3:79:28:82:bb:4e:
                    af:a1:5d:84:ec:4c:af:dd:a1:2e:ec:95:3b:63:0f:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:C8:7D:F8:14:F1:71:95:3A:66:38:33:DE:FE:94:22:AB:0F:F7
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:3f:c5:06:32:c3:06:9a:8f:d4:87:4d:86:2e:62:ba:c9:
         64:ae:4f:da:19:71:77:15:ba:f1:87:91:1e:e5:c6:ed:bc:13:
         82:ff:1a:3e:d0:11:fb:c5:d2:54:d1:6d:95:5c:dd:53:8f:62:
         2d:db:36:80:95:04:26:27:65:a2:d5:49:fa:ea:e8:9d:56:5f:
         97:95:05:3a:05:53:c1:9f:0c:a9:8b:08:60:8c:a7:f5:b5:3a:
         1b:b5:81:3a:62:9e:0b:c6:73:00:f1:ce:b9:b3:50:7a:01:20:
         f1:ff:f0:eb:6f:47:27:4d:78:ff:cd:fa:b3:76:b9:fb:07:37:
         45:71:c1:29:7a:ea:d7:89:3b:82:1f:2b:28:23:62:79:b5:3b:
         a1:6b:88:40:06:96:4f:c0:f1:93:7b:77:f5:3f:27:4e:b2:ba:
         7c:6d:6a:4d:56:7c:29:6d:35:93:31:f9:f8:4d:ad:a2:dc:06:
         c6:b7:ce:d6:b5:ba:78:35:5d:27:ad:b9:d4:a0:4d:bc:6b:79:
         b4:85:85:1e:4d:72:7c:a2:24:15:88:cd:96:88:9f:d1:38:d2:
         43:f2:2e:01:96:56:41:81:b3:9c:c8:50:28:8d:40:d1:1e:38:
         94:d4:b9:de:12:f8:fe:76:d2:e7:95:f2:0b:55:c9:78:4d:7e:
         81:5e:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:18:16 2025 by rpki-client