This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          Z03a4kAzK+ADHKEpxGJ+qBOt0X9FMqvz98QwBRtzRcE=
Subject key identifier:   F3:F8:FF:60:19:55:4A:EC:5E:3C:E6:75:67:D2:97:12:45:10:07:5C
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019AF465244EDE971176EF6B6C1DA5B8A54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          1479
Signing time:             Sat 06 Dec 2025 16:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:00 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: 38tpJnSf5y80CrYmurm4NFFbPZxfh2uZErFOh3e6TBI=)
                          2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
                          3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
                          4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:24:4e:de:97:11:76:ef:6b:6c:1d:a5:b8:a5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Dec  6 16:01:00 2025 GMT
            Not After : Dec  7 16:01:00 2025 GMT
        Subject: CN=f3f8ff6019554aec5e3ce67567d297124510075c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:02:4a:39:39:0b:05:77:64:7c:04:91:54:
                    f9:ec:7a:81:61:d7:da:2f:7a:4f:06:46:89:ab:48:
                    94:2f:55:ab:78:d1:10:91:67:02:99:70:23:37:4c:
                    fe:74:aa:3c:7c:c3:6b:5b:f4:85:aa:bf:f3:1b:5f:
                    60:91:32:96:ee:18:55:0a:98:19:b2:d2:a2:31:ad:
                    bb:e5:56:40:f3:e8:2a:db:65:31:d0:09:bc:29:60:
                    32:97:9b:03:86:ee:87:09:63:83:e7:dc:dc:c5:9a:
                    b3:ce:c7:6f:b5:52:54:ad:ff:77:e7:57:b6:b1:8b:
                    3d:6d:75:94:5c:4a:e5:a0:0e:2f:08:33:07:38:50:
                    ee:58:9c:3b:2d:07:db:ac:63:ff:1d:29:49:c9:03:
                    4e:33:10:34:3a:9b:f7:0d:92:4f:c3:85:f3:da:5e:
                    00:6b:21:7f:bd:33:24:f5:ec:cb:15:ee:9b:74:56:
                    b1:b6:49:8b:13:f3:31:0d:d7:3a:2b:08:6a:98:4d:
                    de:a7:38:6e:e1:23:30:ac:34:8a:d0:7a:75:66:fa:
                    6d:cb:79:3b:5d:ca:d7:4b:c4:ed:cb:5e:0d:fa:92:
                    94:d7:89:56:5c:6c:be:06:63:9e:9e:35:8b:df:7a:
                    8f:af:f7:a7:41:22:7c:76:9b:2e:d2:17:f5:05:85:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F8:FF:60:19:55:4A:EC:5E:3C:E6:75:67:D2:97:12:45:10:07:5C
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:c3:cf:1b:5c:49:03:e5:94:70:7a:7c:5b:ef:4d:b8:bd:
         dc:8a:fb:df:9c:ac:31:9b:63:d1:03:e2:a5:1d:4c:64:1b:dc:
         f5:0d:9c:0f:2c:81:fe:57:a1:a7:c6:f7:c8:88:44:2d:15:0e:
         84:de:c9:7a:de:cc:85:fe:6d:de:27:5b:41:06:cd:a3:fb:c8:
         1f:31:bc:57:a6:5e:14:c7:e8:d7:4c:21:ad:30:38:fd:21:ea:
         65:fb:de:47:3d:ac:e9:68:ba:b2:6c:78:c4:66:55:55:b1:79:
         77:22:2d:81:7e:08:e0:de:a1:ea:c6:2a:80:b0:93:2c:16:16:
         68:6d:45:7b:e1:ef:8c:75:ad:72:10:0c:4f:49:1d:a5:0a:ff:
         5d:d1:10:0b:9a:55:94:8a:1f:5b:c3:26:9f:92:40:b5:59:ba:
         0c:d7:a5:71:c3:72:27:a9:88:cb:33:51:35:1e:74:e9:ac:d5:
         ae:39:df:ab:86:49:8c:9a:4d:9d:c6:2d:28:c6:53:6f:9d:39:
         05:57:5e:f0:07:e4:37:02:2a:9d:84:a1:b7:14:74:96:43:35:
         c7:e7:97:40:9f:bc:8e:8a:38:1c:5a:e9:15:d2:67:09:94:96:
         ad:1b:cd:21:97:94:dc:c8:5a:21:7c:bf:54:99:13:cf:14:76:
         12:90:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:53:51 2025 by rpki-client