This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File:                     3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier:          8bDRa7pns1OpmCP1rBu1SVScOsoiKVi+ErGPZHppTvE=
Subject key identifier:   C0:D2:0B:82:C1:65:D4:C1:BA:A0:56:88:00:75:0C:DB:08:05:67:DE
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       019B1EAAB8F390C642A0FC9192C71462C6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number:          0EB4
Signing time:             Sun 14 Dec 2025 21:01:03 +0000
Manifest this update:     Sun 14 Dec 2025 21:01:03 +0000
Manifest next update:     Mon 15 Dec 2025 21:01:03 +0000
Files and hashes:         1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: 2AcfPxDx5b6RdNZdK2QygHaQJ0D+Mdk5MjTIG05EM5Y=)
                          2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
                          3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:aa:b8:f3:90:c6:42:a0:fc:91:92:c7:14:62:c6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: Dec 14 21:01:03 2025 GMT
            Not After : Dec 15 21:01:03 2025 GMT
        Subject: CN=c0d20b82c165d4c1baa0568800750cdb080567de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:0c:43:f9:f3:c3:72:3a:8c:f2:c4:be:71:
                    54:58:c1:7c:dd:b7:f7:38:dc:e7:02:c3:ef:08:c7:
                    de:8d:2f:e4:9a:f6:b2:99:de:83:91:00:02:43:f8:
                    67:f5:16:69:d0:c1:82:f7:cf:ce:d7:54:49:d4:1d:
                    2c:3a:ee:d8:5b:d8:70:c4:fe:e2:c4:4f:68:f9:85:
                    61:5c:38:f4:0b:23:11:46:4b:28:6b:7b:57:9d:44:
                    d4:4d:06:ca:06:38:6e:0c:c1:28:57:00:82:5b:5b:
                    97:03:dd:cf:4e:58:2c:e1:76:53:43:59:9b:6e:52:
                    38:ff:71:33:01:94:7a:1d:97:cf:7f:9a:28:8a:0c:
                    de:58:13:01:aa:ba:a5:b5:5b:0a:fe:3c:52:df:00:
                    32:74:e1:dd:c7:f9:fa:2f:1c:e1:53:fb:3d:08:c7:
                    03:01:26:7a:68:ab:49:a8:1f:69:ba:98:34:8f:ee:
                    4a:dd:15:6a:62:de:61:07:f9:6b:86:05:9b:e0:bd:
                    03:dd:e1:a6:0f:ae:8a:06:fa:3e:aa:ae:1f:19:11:
                    57:e6:96:cf:30:34:b9:66:63:14:6e:ac:74:c9:10:
                    7a:78:3e:21:ea:8c:33:ce:d1:fe:bd:29:35:99:72:
                    29:62:5b:e2:67:e1:d7:76:06:b3:fa:df:92:09:bc:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:0B:82:C1:65:D4:C1:BA:A0:56:88:00:75:0C:DB:08:05:67:DE
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:33:25:0b:b0:35:ce:ec:53:41:02:75:b8:b1:0e:5e:63:
         35:a3:45:69:3c:b2:5f:88:89:fc:60:79:a2:33:fd:85:77:b6:
         31:85:61:4a:5e:54:67:7e:21:64:09:b0:5a:6a:2e:9e:96:be:
         f6:be:f6:ca:fc:78:2b:2d:cf:bb:07:5d:1c:16:4a:cd:9b:2f:
         d1:51:66:4b:c7:7c:eb:3a:9d:62:20:a4:a0:bd:0d:b6:f6:6b:
         6b:aa:39:8d:ff:af:cd:8c:8a:54:6c:2a:05:45:25:bd:10:a0:
         06:13:96:8f:9c:50:7d:47:8c:01:10:ff:63:a1:c3:77:fb:e2:
         84:e3:88:77:a1:8e:73:24:24:1d:1e:a7:cd:92:59:c5:56:38:
         54:eb:9c:2b:32:8f:ee:e1:fe:33:b7:ac:91:3b:d0:03:1a:af:
         e4:37:fb:cd:ff:a2:30:1f:20:14:db:9e:bf:1e:64:b9:a7:64:
         a9:e3:50:b9:db:cd:bb:d6:cb:f7:67:da:3e:e9:59:56:d7:64:
         fa:f5:90:be:85:62:43:e4:4f:c4:5a:a3:a1:79:67:0d:f6:98:
         a4:3c:6a:97:64:63:76:24:7b:e4:ff:6c:03:3a:be:48:0a:5c:
         19:0e:b2:fb:c9:9a:65:ec:25:18:e1:84:a5:a5:22:4c:86:d3:
         0b:98:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:57:41 2025 by rpki-client