This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          KxfD4IjS1FBDUQhFCtrYnJ2/HFz83yeOqy0h+m1t458=
Subject key identifier:   EE:6B:23:AD:57:58:18:CC:5B:45:C6:8A:77:2D:A5:9A:92:67:A4:3D
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       019AF389660AEE44DBB8CC56849484A3679D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          139D
Signing time:             Sat 06 Dec 2025 12:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:59 +0000
Files and hashes:         1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
                          2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
                          3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: 2S60CCuaItoe3QBYAlG2WtrycIzI5vDyViqbGhoUPZQ=)
                          4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:66:0a:ee:44:db:b8:cc:56:84:94:84:a3:67:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Dec  6 12:00:59 2025 GMT
            Not After : Dec  7 12:00:59 2025 GMT
        Subject: CN=ee6b23ad575818cc5b45c68a772da59a9267a43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:20:80:60:7f:24:2d:25:01:b1:15:0b:64:
                    fd:e9:ef:2f:cc:8e:84:d9:45:b4:7e:4c:f0:3b:93:
                    51:cf:90:ee:3a:33:51:be:03:4c:5f:13:20:0a:71:
                    74:34:de:ec:5f:29:c7:27:95:5a:cf:05:d1:6c:cf:
                    9d:d1:48:f7:48:98:e1:24:d8:b0:e1:33:70:32:fd:
                    18:30:c8:28:1a:a0:de:b7:b0:9c:a3:33:85:58:75:
                    c0:8a:b6:b8:bc:8f:cf:05:29:13:a0:d7:71:1b:8f:
                    39:17:2b:d0:c3:97:ff:b2:3e:55:20:8b:a9:47:06:
                    1f:ea:c1:a3:23:b2:c6:d4:be:d4:c7:97:01:70:f6:
                    46:b1:39:67:0c:98:e2:ab:6f:ae:89:a8:c0:fa:43:
                    76:ca:9f:47:57:55:70:51:ee:93:62:0a:8c:5b:fd:
                    1f:b5:80:5e:a3:77:9b:65:54:ea:58:ca:82:ec:d4:
                    c9:25:13:f3:35:b0:57:49:e5:36:71:40:24:7e:6e:
                    0d:45:54:60:12:17:06:1a:a1:e8:53:54:e6:8a:8f:
                    57:17:cd:a2:9d:77:e4:58:c4:b4:d1:b2:fd:c9:45:
                    c9:f0:b4:da:dc:ce:0c:c2:73:90:cd:22:27:d7:81:
                    b5:24:24:97:3a:5f:cc:ee:87:75:6a:ab:61:da:fe:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6B:23:AD:57:58:18:CC:5B:45:C6:8A:77:2D:A5:9A:92:67:A4:3D
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:a6:3d:6f:de:1a:3d:75:92:78:65:03:12:02:57:69:2f:
         14:23:f1:5c:8e:b4:f9:d3:56:ad:7d:06:56:61:04:9e:cd:bb:
         7e:98:ec:09:04:24:52:4a:72:c8:3e:2e:0f:5d:7c:4f:e6:14:
         71:5b:0a:e8:71:d8:ed:7b:7a:4c:52:65:46:53:4c:5f:2b:cf:
         7a:99:5a:ce:55:9d:af:48:9c:54:3f:ba:16:ce:10:3e:4d:be:
         26:03:cb:59:7d:ab:06:ee:4d:5a:3f:19:07:4c:77:43:4a:6a:
         ac:06:42:0a:16:81:75:f4:95:66:32:81:3f:4c:41:da:8c:56:
         10:1e:dd:cc:39:50:25:a9:c7:ec:53:4d:ca:c8:68:27:88:33:
         dc:55:75:10:98:58:d4:ce:21:b1:e6:f8:c9:f5:ff:ec:1c:e8:
         43:86:20:aa:ef:bd:f5:98:ad:1d:a7:04:76:f2:a9:ae:30:3d:
         17:04:b9:d6:7f:a4:d0:0b:d9:7c:11:7e:ef:80:61:99:ed:7d:
         3a:bc:aa:78:41:d3:25:f3:55:9c:86:54:1e:a8:b8:d7:b6:4d:
         81:1b:51:8d:02:48:b7:fd:d7:13:29:c6:c1:58:47:9c:fd:f0:
         e7:94:bc:ab:fe:22:99:4f:61:b7:dd:38:d9:ad:b7:2a:77:72:
         d5:79:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:40:47 2025 by rpki-client