This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          zHIiTiJZEhNzgeJVWBf7RXqyDlGBaxqV5xsPHQYLr8g=
Subject key identifier:   C6:39:61:2D:68:83:CD:66:9A:F0:F8:EA:0B:A3:75:77:90:D1:EC:F4
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019B1E05992840209FE11B46A1E707FE62D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          06A0
Signing time:             Sun 14 Dec 2025 18:00:41 +0000
Manifest this update:     Sun 14 Dec 2025 18:00:41 +0000
Manifest next update:     Mon 15 Dec 2025 18:00:41 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: oRRN6mx1tqGTVPZaEwpiy3Hq4LWkNPnPdUR3QNXP2MA=)
                          2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:05:99:28:40:20:9f:e1:1b:46:a1:e7:07:fe:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Dec 14 18:00:41 2025 GMT
            Not After : Dec 15 18:00:41 2025 GMT
        Subject: CN=c639612d6883cd669af0f8ea0ba3757790d1ecf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:36:15:39:9e:fc:e1:d0:c0:f3:69:12:02:
                    f5:d3:d8:6f:58:da:33:73:84:70:9c:5a:62:e6:67:
                    88:83:37:48:4e:ff:c9:e8:ab:57:ff:9b:a3:36:68:
                    14:09:08:c3:6c:3f:31:e7:44:63:ee:ed:cc:64:f5:
                    62:ac:95:cf:af:69:c4:ca:eb:f8:31:14:fa:58:01:
                    9a:49:90:25:f3:38:bd:42:bd:97:d0:cf:7c:06:d4:
                    a0:da:bd:5e:a2:b2:e2:06:1f:e2:50:ec:f7:b5:15:
                    cc:e1:f2:98:96:98:af:51:27:f3:07:bc:39:5a:d2:
                    1e:eb:fb:15:b3:06:f7:a4:c5:23:ab:2f:26:16:45:
                    3d:c0:70:05:af:4b:8b:40:44:64:f5:db:d4:0f:b8:
                    6d:a7:5c:57:d4:42:05:09:ac:66:f2:53:70:24:87:
                    1a:13:52:74:87:7b:04:e2:5f:35:8f:c5:55:ef:13:
                    fa:9a:37:39:73:8f:3b:8f:f5:c0:9f:4b:72:7b:ae:
                    95:55:ad:b3:40:da:34:e7:64:43:d2:8c:b9:fa:d4:
                    32:52:72:b3:32:17:27:eb:b1:e6:2f:2e:bf:90:2e:
                    b4:8e:87:c6:b5:5c:f2:a8:37:0b:f5:3c:7b:29:cb:
                    68:9e:9e:71:84:3a:61:77:57:d2:b5:93:5b:a9:4d:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:61:2D:68:83:CD:66:9A:F0:F8:EA:0B:A3:75:77:90:D1:EC:F4
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ea:03:c8:5d:41:83:c2:dc:1c:02:f8:8a:47:50:67:72:64:
         0b:8a:3a:6d:45:df:4f:27:74:a0:bf:a8:49:04:c7:70:f6:43:
         ad:7d:88:90:ed:90:1e:6d:08:89:8c:fa:1c:3e:36:59:20:89:
         06:00:10:e5:e0:bd:6b:d5:93:a8:0a:70:94:f9:27:0d:d5:1c:
         98:86:ae:76:0f:cf:28:f2:9e:4c:8b:8a:78:e4:3c:6b:0d:20:
         57:72:90:5d:1a:70:63:9a:2a:c8:30:62:e7:ac:ef:2d:c9:dc:
         d4:b8:b0:b8:fd:b6:39:75:a2:76:0f:74:89:0a:af:20:b2:c6:
         f6:95:33:54:93:b6:5f:c9:3c:83:bf:2a:82:d2:ba:f0:70:8b:
         30:18:ee:90:fc:b8:b1:b8:eb:06:a1:61:9e:84:49:4d:1b:fe:
         1f:64:97:3a:96:66:53:49:07:81:44:4c:22:e4:11:00:a9:d9:
         d9:16:81:12:dd:d9:ab:2e:17:7f:b2:1e:b0:c1:bb:ff:ae:33:
         ab:ed:28:c4:a8:b5:ec:dc:bf:a2:1c:aa:6d:87:a7:0b:99:25:
         4f:4b:53:4b:84:f8:3b:11:15:fb:2e:16:98:7e:aa:8a:18:6b:
         5b:85:24:21:6d:66:f9:03:b9:67:5e:d6:f7:e6:dc:21:1a:c4:
         23:84:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 01:58:15 2025 by rpki-client