This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File:                     C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier:          5hKVapJHXHonaHH7qSc2nsQOgEvNBPnrbABr6lbbUZY=
Subject key identifier:   BD:87:0B:1F:E4:98:28:17:F0:1E:F5:EE:5C:95:9C:01:62:70:4F:99
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer:       /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial:       019AF50AC75B4C37ECF97C00080951359F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number:          1474
Signing time:             Sat 06 Dec 2025 19:01:55 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:55 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:55 +0000
Files and hashes:         1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
                          2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: 3Pv1xVraN9F1vDuBt8183rtbM48xbZeMU4nVXcSlrVU=)
                          3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:c7:5b:4c:37:ec:f9:7c:00:08:09:51:35:9f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
        Validity
            Not Before: Dec  6 19:01:55 2025 GMT
            Not After : Dec  7 19:01:55 2025 GMT
        Subject: CN=bd870b1fe4982817f01ef5ee5c959c0162704f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:52:2f:eb:c0:60:fd:02:4c:a4:64:02:42:
                    cd:bf:45:cf:9e:f9:1f:1d:4e:1c:d1:4f:30:62:77:
                    ef:b7:60:4e:0e:1b:60:26:47:b2:d6:4f:f2:d3:43:
                    0c:b9:39:57:1e:ab:cd:0f:e2:c7:e0:bb:09:73:35:
                    0a:71:3f:ee:b4:84:41:d8:8f:6c:ea:f9:f8:43:34:
                    ff:41:06:e2:42:44:c8:2f:0a:48:59:1f:95:49:9b:
                    d8:3f:fb:a6:45:12:af:83:b0:36:cb:7a:4b:ce:12:
                    fb:f7:90:5a:4a:e9:4c:21:4f:f6:da:b3:34:dd:47:
                    40:61:ee:a4:9f:ea:cf:7f:bc:ea:83:8f:dd:04:30:
                    22:be:f7:dd:fb:ff:2b:14:a3:c6:f4:ec:40:e0:34:
                    f5:4d:f6:6c:d0:ce:7e:c4:89:eb:db:78:d7:b8:a8:
                    79:78:27:78:72:62:9e:e5:aa:3e:01:3b:9d:06:55:
                    a5:d2:77:f1:0e:ea:4c:35:c9:ce:26:cd:86:ca:13:
                    d6:00:c2:c5:43:60:02:6b:2f:8a:db:de:a4:8e:01:
                    eb:62:a0:b1:87:c1:92:c9:4c:a4:77:3d:f7:97:9a:
                    81:85:32:f1:c5:10:bd:d2:c0:60:cb:2e:4a:d2:01:
                    75:89:20:81:7b:79:b2:5d:7c:c0:8c:c2:ba:30:f8:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:0B:1F:E4:98:28:17:F0:1E:F5:EE:5C:95:9C:01:62:70:4F:99
            X509v3 Authority Key Identifier:
                keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:bc:b5:47:c2:43:91:e1:1f:d9:a8:de:10:85:e2:51:2b:
         bf:2a:0e:28:7f:7b:f4:f8:3e:23:01:c9:fd:29:6b:13:b9:9d:
         17:25:42:59:fc:bb:a2:e8:30:ef:13:91:c4:df:bf:c8:71:ba:
         95:b2:be:c4:29:8b:5a:9e:fd:f7:33:37:c5:d6:f0:7c:4f:61:
         85:58:17:94:54:6f:87:51:2e:c8:43:3d:de:92:d0:55:24:5f:
         f8:f3:bf:c7:0f:24:27:2e:d1:a3:cb:de:1c:ae:e1:82:4c:8e:
         f8:45:0b:22:05:06:24:81:7d:40:82:d9:ac:f2:5b:b6:5c:cc:
         9d:2d:17:33:bf:32:36:4f:98:17:cd:9e:28:db:cd:ea:df:a7:
         1e:1b:98:e5:9b:9a:0a:3e:af:1f:9f:aa:d8:0c:08:ae:eb:63:
         e9:fe:56:2b:4d:43:d7:91:3f:f2:75:e5:26:51:b5:af:72:5d:
         54:98:68:39:93:1d:af:8f:00:80:1d:29:87:24:df:d4:7b:07:
         a4:61:e8:e7:29:d5:83:94:21:8f:47:69:3c:79:ef:f2:d7:51:
         26:50:35:66:5a:db:b7:b2:0f:b5:d4:1b:97:fb:48:78:e7:64:
         8f:f5:82:83:6e:87:0b:63:88:45:7b:38:e3:6a:1e:85:57:62:
         68:df:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:50:30 2025 by rpki-client