This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File:                     RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier:          BZ07s/BZwO5Um2OgaTGMPkjz6yGA1QFHjD6CD6VF+MY=
Subject key identifier:   D7:B9:ED:14:4A:92:2F:7D:81:36:C8:E5:42:61:63:EC:55:F0:66:BE
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer:       /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial:       019AF38921EDE45C0E6CE2D9CA86A0A2989B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number:          05BA
Signing time:             Sat 06 Dec 2025 12:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:41 +0000
Files and hashes:         1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
                          2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: gjyL7c0p/urCE99gJXWTRPzkOQSH3Ka4O22LhzrEjEA=)
                          3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:21:ed:e4:5c:0e:6c:e2:d9:ca:86:a0:a2:98:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
        Validity
            Not Before: Dec  6 12:00:41 2025 GMT
            Not After : Dec  7 12:00:41 2025 GMT
        Subject: CN=d7b9ed144a922f7d8136c8e5426163ec55f066be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:f5:5b:01:fd:ba:44:4c:58:83:b4:3d:8b:
                    ad:c7:00:15:5a:80:0c:83:f4:88:d0:3a:aa:4c:1b:
                    ba:80:48:3d:5e:07:df:c4:f2:a5:d6:7c:db:41:9e:
                    df:8b:33:00:a4:f0:3f:1b:3b:1a:36:24:78:d8:49:
                    fd:7c:1d:89:97:ca:aa:09:bc:ab:a4:74:1b:aa:1b:
                    b4:f8:ad:e1:7c:25:65:90:4a:9f:39:1c:e2:be:dc:
                    b5:79:9e:86:94:cd:1e:f9:f2:ed:64:52:c0:7a:ba:
                    06:8f:d7:c5:36:00:bb:75:f9:20:1d:2a:98:2a:46:
                    aa:59:6a:35:9c:be:45:e1:da:20:19:8d:3d:b6:c4:
                    d2:4a:69:33:55:af:95:f8:2e:49:1a:2e:22:1c:44:
                    6c:76:07:92:ec:a1:03:f9:18:52:89:4d:ec:a2:22:
                    9b:54:8f:69:60:2b:a3:75:df:42:c7:4f:5c:d5:28:
                    58:98:80:73:9f:21:31:d5:14:11:40:47:c9:b7:5e:
                    a5:1d:68:1d:cc:b2:6b:2b:19:c1:d6:38:d2:1f:a4:
                    a3:e6:e6:ef:b8:bb:3d:0c:fb:dc:2b:c8:43:61:7d:
                    3e:f3:99:2d:53:b5:c9:6f:11:03:fc:87:b8:08:41:
                    ab:e5:a3:fd:de:b6:96:15:0d:30:7d:c9:16:bd:13:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:ED:14:4A:92:2F:7D:81:36:C8:E5:42:61:63:EC:55:F0:66:BE
            X509v3 Authority Key Identifier:
                keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:2d:56:7f:ed:55:da:bd:7b:2d:98:91:be:2a:04:43:dc:
         45:97:7e:3e:e1:d7:5d:62:97:21:09:65:bb:f5:c7:69:44:59:
         ef:85:47:03:fe:f0:d2:93:e8:19:c2:53:91:55:65:55:05:6d:
         e2:a5:e9:cb:08:69:ab:c1:4e:94:47:3b:69:1a:22:26:29:bb:
         07:18:10:66:c1:b3:09:3d:27:18:37:cc:38:4b:9e:ab:db:9b:
         da:dc:f9:50:29:9b:dc:37:70:64:bc:c1:91:de:3d:4c:cc:58:
         d1:65:02:72:6c:d9:0c:d3:90:73:dd:0f:fc:6e:9a:96:de:c5:
         30:fa:47:54:f8:4f:03:7c:50:bf:27:39:4b:2e:61:1d:47:da:
         1f:bf:1d:a8:50:14:6a:dc:d9:93:12:3b:37:f8:75:bd:22:4f:
         a7:26:28:59:4a:38:30:e0:8b:09:8e:7f:3c:6b:2c:9d:77:da:
         95:4f:56:f7:ba:fc:b1:b7:0a:3a:c5:ef:86:8b:c0:7c:32:08:
         58:44:c7:ae:9a:02:e1:a8:20:01:6f:31:ad:86:67:a7:41:64:
         64:8b:e9:88:36:11:b3:2b:da:ef:c5:3a:f6:3d:58:b5:51:8e:
         e3:39:4e:0b:f0:4f:10:c4:e4:d6:ae:3f:22:18:90:f1:ec:1e:
         a6:68:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:15:49 2025 by rpki-client