This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File:                     k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier:          A804gM+toUPqJgY5UYSr2Ag4auJP+QWN4ViRHAya3vU=
Subject key identifier:   E7:E8:2A:23:22:DE:AF:25:DA:3F:06:BA:EC:80:44:87:8F:54:2F:B1
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer:       /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial:       019B3D90F13E103866610449C8AAA52FDE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number:          1483
Signing time:             Sat 20 Dec 2025 21:01:07 +0000
Manifest this update:     Sat 20 Dec 2025 21:01:07 +0000
Manifest next update:     Sun 21 Dec 2025 21:01:07 +0000
Files and hashes:         1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
                          2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
                          3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: EwKSa0DNdt8i2n1Y3FbZ4xEKav5P36i14M0n/V7HIRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:f1:3e:10:38:66:61:04:49:c8:aa:a5:2f:de:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
        Validity
            Not Before: Dec 20 21:01:07 2025 GMT
            Not After : Dec 21 21:01:07 2025 GMT
        Subject: CN=e7e82a2322deaf25da3f06baec8044878f542fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:42:bf:cc:f6:59:7e:0f:37:47:4f:13:fa:
                    35:b8:71:0e:09:31:5a:2b:fa:4e:77:d0:58:ec:9d:
                    a3:b4:ba:31:75:d1:9d:2c:0d:3b:ea:76:96:61:4b:
                    01:ff:6c:84:e6:de:6b:15:0c:0e:eb:77:93:a9:44:
                    24:b1:b2:81:57:af:5d:12:fb:5c:4e:90:db:cf:55:
                    26:28:27:02:75:a9:f4:2f:e6:12:46:88:88:9d:8f:
                    31:98:f0:65:17:a6:1b:6c:d2:f1:60:6b:18:b2:78:
                    8f:2e:ff:ae:b6:fa:72:0e:56:59:d6:05:dd:ac:ab:
                    ce:ac:23:84:97:d7:41:21:c0:97:89:9c:06:d4:a1:
                    6e:72:a7:67:d6:4c:84:fb:1d:d2:29:b5:c4:78:d2:
                    97:4c:87:8b:09:f2:22:2c:6f:f6:7d:eb:6c:cd:3f:
                    12:f6:be:9c:1d:96:52:d3:0a:4e:63:b8:1c:5f:61:
                    03:e7:e6:78:ef:9a:f1:f7:ba:47:73:8f:f7:3d:04:
                    57:72:4d:cf:c2:ad:dc:96:62:3c:db:0f:44:60:0e:
                    87:21:2c:19:5b:35:3c:3e:2e:55:09:53:67:91:36:
                    ad:5a:53:8c:64:a1:fa:22:8b:b5:21:0b:ec:4b:d7:
                    f4:28:42:be:d5:d4:df:d1:1c:16:19:bd:c9:6a:36:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:2A:23:22:DE:AF:25:DA:3F:06:BA:EC:80:44:87:8F:54:2F:B1
            X509v3 Authority Key Identifier:
                keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:21:06:b1:60:25:ba:d2:88:7e:b3:c1:10:25:c3:ec:86:
         39:a8:24:c9:53:a2:6d:4e:a2:cf:44:fa:5e:f9:e6:1e:e7:65:
         73:1a:c7:d2:4b:34:41:35:90:18:71:b8:b8:5b:22:83:e2:4f:
         04:8e:ed:32:b3:f5:9d:ca:b3:63:43:53:d1:a5:31:66:fb:26:
         e1:00:51:9c:03:11:5d:31:e5:4c:39:e0:2c:f1:29:78:c3:cd:
         e8:92:c3:8a:a2:70:1b:c9:c3:36:5d:c4:78:ff:b8:4c:6c:e2:
         71:6b:d9:0b:ac:ca:cc:f5:1e:7f:96:e2:7a:e2:c5:87:ab:f7:
         c4:c2:bf:3a:25:42:bd:be:d0:c2:f6:15:65:a5:11:da:5a:b0:
         f8:a7:ad:94:a9:d0:57:88:b3:fd:25:ab:05:e0:42:7b:80:75:
         7c:35:5d:ec:6d:e5:e7:95:8b:e8:9f:d7:2f:fd:6c:e6:f5:7b:
         49:fa:c7:4d:bd:d8:e3:9f:80:ed:d1:64:af:41:81:8e:9e:d1:
         bc:7f:72:80:10:38:41:7d:c2:41:c6:39:67:81:61:7f:bd:1d:
         32:2d:a5:56:8b:bb:19:73:ae:68:6f:ac:ad:92:6c:20:08:62:
         e9:e7:26:f5:75:a1:7c:5f:9f:a8:13:f1:49:12:7a:84:b4:2c:
         99:9a:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:57:40 2025 by rpki-client