This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File:                     t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier:          VjSp60jMstWV1uH64GqqSCP6Qpx3fG0eCD6ztAdQelg=
Subject key identifier:   29:D2:38:79:89:E7:9D:F5:13:21:C0:DF:4E:68:A8:89:29:AB:97:04
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer:       /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial:       019AF12D4ED6F933855BFBA47836E8733FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number:          0971
Signing time:             Sat 06 Dec 2025 01:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:09 +0000
Files and hashes:         1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
                          2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
                          3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: K7xMX7ulMbfu4y7pQpljc7J46jx3Pti1VtzBY/eZjGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:4e:d6:f9:33:85:5b:fb:a4:78:36:e8:73:3f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
        Validity
            Not Before: Dec  6 01:01:09 2025 GMT
            Not After : Dec  7 01:01:09 2025 GMT
        Subject: CN=29d2387989e79df51321c0df4e68a88929ab9704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:af:2e:f4:36:13:19:a5:4d:e3:d1:1f:d2:
                    4e:ef:21:db:ba:9a:b3:73:a6:cf:59:3c:9e:40:c8:
                    f9:63:ff:8d:2e:78:b0:ce:72:62:c4:99:65:d2:ac:
                    12:22:eb:1c:7d:db:ee:ba:aa:c3:b9:92:e7:23:8b:
                    17:d3:a9:e9:fd:fa:b7:59:76:40:7e:88:47:c7:63:
                    f7:e2:7f:5a:aa:7c:74:73:10:4e:e2:ac:11:e0:c8:
                    16:25:31:ca:95:f1:61:4b:1d:da:bb:d9:4e:91:1f:
                    b0:17:3c:ea:73:82:ec:d5:54:a1:b1:97:b6:2d:bf:
                    73:eb:2a:be:02:5b:bb:1e:58:28:25:5b:c5:d8:c6:
                    1d:df:c9:12:99:9b:71:31:2c:05:36:52:9b:93:ee:
                    62:b0:cc:4c:43:da:ec:8c:99:86:b2:4a:e4:d4:46:
                    87:1b:32:04:f5:aa:af:27:e1:e4:d9:27:ee:54:12:
                    d4:02:b6:5e:8e:08:ea:a5:ae:3f:33:67:b5:7f:e0:
                    f8:ba:67:bb:11:85:c3:7e:5c:f1:48:6b:31:2c:c4:
                    02:0a:21:f5:27:30:32:74:69:2a:f3:2e:c3:79:9f:
                    c8:93:d1:2d:b2:10:58:6e:5a:b2:24:c6:59:54:bc:
                    7d:f7:b1:02:1f:f6:00:ca:c9:81:92:36:24:dc:6f:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:38:79:89:E7:9D:F5:13:21:C0:DF:4E:68:A8:89:29:AB:97:04
            X509v3 Authority Key Identifier:
                keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:0f:08:41:d8:63:77:63:73:d0:53:0e:d1:11:5c:99:c6:
         1d:3f:c0:87:97:6c:07:fe:e2:e8:7a:89:6e:86:5f:62:21:90:
         e2:c0:8b:97:af:32:10:94:c8:f0:b0:57:13:ba:9b:57:8d:a1:
         aa:8d:48:93:9e:b2:ec:c1:68:66:6a:24:b5:c1:cd:6f:90:de:
         33:6d:af:e2:26:be:31:06:e7:b6:18:c0:00:33:03:45:b6:77:
         94:e9:a8:87:4e:8a:ed:f7:2b:e2:8f:2d:1b:b4:0c:72:fe:24:
         44:a0:f6:e4:47:7e:7c:0a:13:65:35:8c:8e:c3:f2:12:34:26:
         9f:74:f9:18:d8:30:78:3d:eb:8e:f2:61:c4:b6:06:f9:b9:b8:
         b8:3f:a4:30:56:87:9d:27:fa:75:5b:88:39:e3:e1:63:83:3c:
         bf:72:cf:35:17:73:e3:19:c2:42:67:dc:cf:0d:73:93:bf:9b:
         ca:aa:42:f5:a0:73:61:56:ce:65:ff:ff:b3:e4:eb:fe:05:88:
         d9:26:df:bb:fa:24:2c:5b:b2:5c:2b:24:11:be:02:36:4a:92:
         88:b1:2e:f2:74:6f:79:39:21:3a:0b:e0:86:22:d7:98:72:22:
         72:38:94:5c:a4:52:12:dd:e1:47:9d:75:8e:2c:ac:9c:ee:5e:
         d3:23:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:52 2025 by rpki-client