This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          hntjlX9clkP6OaovaZWG/Uh12wBU6W9NYVRAJSEEL5Y=
Subject key identifier:   B0:C2:11:DC:D4:83:D7:E2:03:44:99:3B:20:95:E3:1C:87:EC:CF:46
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       019AF2ADBFA00D5179BF1DEFCCADD72BCC4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 08:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:04 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: Zx4+pnpX2ZLtRwaCnJsmRNxhtpMiewG9/gecR12wAM0=)
                          2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
                          3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:bf:a0:0d:51:79:bf:1d:ef:cc:ad:d7:2b:cc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Dec  6 08:01:04 2025 GMT
            Not After : Dec  7 08:01:04 2025 GMT
        Subject: CN=b0c211dcd483d7e20344993b2095e31c87eccf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:f7:32:a8:fb:4e:4d:6d:5d:6f:26:10:c9:
                    c0:e8:0a:ea:51:23:eb:e2:c3:eb:d6:a8:0b:c4:51:
                    c6:94:ac:b7:60:fa:17:a6:67:97:58:75:b1:24:3e:
                    d1:42:cc:b6:e5:c2:ed:8c:83:2c:a5:ef:62:a8:cd:
                    1e:32:49:7e:84:b2:89:51:85:1d:30:fd:08:73:29:
                    d9:c1:51:d8:dc:31:7a:9d:36:e7:06:84:d0:61:28:
                    74:13:f9:55:3a:6f:8f:28:df:77:94:91:41:0f:18:
                    4b:6d:c2:2f:3a:c5:e8:57:b4:7a:01:ad:42:6a:08:
                    bd:3a:53:4a:41:2d:1b:89:1c:08:cc:1c:34:f9:63:
                    74:5b:52:d9:25:b4:09:c4:fe:3c:3e:58:fa:89:7d:
                    78:59:72:90:a0:2b:0e:78:ce:da:fc:43:03:1b:6f:
                    3c:a9:f2:eb:0b:6e:58:14:5a:fa:04:e3:4c:d5:c9:
                    8d:92:81:9b:37:3b:44:bb:f4:ef:1b:4f:d4:28:b2:
                    1a:5a:ce:f4:2f:35:3a:48:88:17:ff:4b:73:10:07:
                    df:a9:cb:63:57:d0:eb:2c:80:8d:8e:49:91:37:a0:
                    40:c1:a2:f5:3f:a9:d4:f4:80:e3:90:b5:5f:84:4b:
                    0b:ff:b4:0e:63:3d:fe:64:8e:cf:cd:73:2d:b8:64:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C2:11:DC:D4:83:D7:E2:03:44:99:3B:20:95:E3:1C:87:EC:CF:46
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:3b:c1:29:c9:a0:b3:8a:0a:f6:ed:4e:0e:1d:0d:c7:c5:
         b0:5f:0e:db:a9:cf:4a:1c:1f:85:c8:8d:a5:d1:81:cb:e6:5b:
         88:47:18:85:01:78:9e:18:c3:80:07:d7:bb:92:a5:18:52:ed:
         a1:18:9d:f6:a6:5d:62:54:78:b5:37:3e:c9:49:c1:92:17:93:
         bf:e5:17:32:6d:c1:ff:ee:af:81:c6:f8:40:13:e2:57:af:1d:
         e1:79:99:1a:93:74:5d:ac:b3:40:34:70:e0:70:75:92:6b:e0:
         ba:74:e4:c5:e2:bd:9e:8d:54:bb:89:ca:d6:41:89:c1:61:e6:
         f6:86:9a:bc:a2:93:58:8a:80:bd:ff:40:2e:9a:ef:bd:3a:d5:
         a6:78:ab:a4:8e:b8:a1:a0:0c:6e:64:3a:80:80:8e:fe:1c:97:
         98:a4:a3:cc:92:f4:87:80:d1:92:a8:44:0e:9c:bf:62:da:18:
         54:c1:18:c0:1e:e3:0d:bf:89:3f:df:4f:db:e9:8b:af:f4:c4:
         bb:d6:1b:74:06:86:5b:61:90:c1:d1:a1:e9:95:34:53:a0:21:
         9d:4d:79:e0:49:8b:f6:f6:d4:d0:d5:5b:e0:9c:59:54:70:fc:
         70:fc:d6:c0:8b:97:ca:6c:6a:d9:c6:18:17:f1:8c:c9:94:81:
         e3:80:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:04:28 2025 by rpki-client