This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          txuFTG8ByouYL+1AWk+REtfqFFdmaocc2BA7GoYseJ0=
Subject key identifier:   96:84:F1:AE:3F:52:36:42:C6:FA:56:50:AA:ED:73:13:AD:08:78:F9
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       019B73DA644A27BBFA5735FB083360EEFCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          17C5
Signing time:             Wed 31 Dec 2025 10:00:50 +0000
Manifest this update:     Wed 31 Dec 2025 10:00:50 +0000
Manifest next update:     Thu 01 Jan 2026 10:00:50 +0000
Files and hashes:         1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
                          2: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (hash: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=)
                          3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
                          4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
                          5: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: UFhd2lJgn5Xi0Uy/Pq/DjzVk4CJZX4F16CkZQtaLvH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:73:da:64:4a:27:bb:fa:57:35:fb:08:33:60:ee:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Dec 31 10:00:50 2025 GMT
            Not After : Jan  1 10:00:50 2026 GMT
        Subject: CN=9684f1ae3f523642c6fa5650aaed7313ad0878f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:b6:08:6e:22:b4:fc:ec:2c:99:9e:f1:a9:
                    1b:38:d6:bf:55:29:71:61:fb:fb:65:e3:11:ac:c6:
                    87:fd:94:eb:9b:82:ea:ae:1f:0f:51:fd:b9:ee:60:
                    0e:86:94:a8:18:88:88:13:8e:d8:80:ff:6c:5d:e5:
                    c5:5c:f0:38:a0:95:6d:5d:36:4f:da:de:83:06:e3:
                    35:35:f7:55:d7:c3:e3:f7:77:26:06:2e:e8:76:bd:
                    e6:e6:6a:39:3a:c1:e5:57:cc:b9:5b:2a:25:67:c1:
                    9b:45:61:7d:00:02:89:6d:bb:69:8d:a0:ec:56:c6:
                    07:b3:b4:e6:5e:92:6e:f9:86:2e:06:68:6d:46:8c:
                    a5:e4:a3:49:96:d6:61:9c:9f:22:61:fe:5d:3e:30:
                    35:ce:d9:2a:09:83:c7:a5:32:07:5e:94:91:07:ed:
                    d4:93:64:dd:9c:4e:d4:04:af:0c:cd:70:bb:2a:bb:
                    52:0d:94:4c:2a:c0:0d:45:da:fe:4a:a0:eb:f6:bb:
                    2f:84:e9:ee:6f:3d:23:9a:a9:50:55:a6:c4:07:6d:
                    01:8c:11:3b:71:01:c2:3e:94:c4:a8:b7:05:73:90:
                    fd:be:e5:fe:cf:98:27:fc:83:2e:14:f1:73:31:35:
                    ca:4b:2c:78:01:d4:b5:e9:e9:b9:47:5b:8a:31:eb:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:F1:AE:3F:52:36:42:C6:FA:56:50:AA:ED:73:13:AD:08:78:F9
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:96:a5:09:bd:80:bf:4a:b3:7e:fa:cc:04:11:59:1f:fb:47:
         7b:4c:34:ea:db:4a:08:8b:11:71:db:8e:1b:ed:fa:6a:35:a8:
         70:47:6d:f3:a6:2a:98:9f:5a:52:64:fd:f1:10:9e:ae:f0:50:
         e3:18:4e:80:06:0d:aa:53:bb:75:f5:54:ad:17:13:cf:0f:c5:
         e4:a0:e4:c3:3b:e4:d2:0b:6b:05:fb:cd:37:19:30:51:45:b6:
         9c:f6:59:14:ae:c4:d2:9a:2b:20:4b:f0:6d:87:44:9c:f7:a9:
         d2:56:a1:70:39:c6:39:2d:0c:6b:3c:8b:e4:c5:d2:a2:c2:47:
         a1:61:bb:3b:27:3f:e8:ec:87:62:52:b7:63:67:00:ed:57:4c:
         5c:de:7b:65:bd:e2:53:65:5b:64:dc:98:f1:bb:7f:95:4c:8c:
         56:81:67:28:39:e9:1c:50:03:3e:64:fe:14:d4:46:de:b6:fc:
         51:dc:41:e5:a7:f0:60:83:9e:ee:23:f9:17:26:cd:50:3a:04:
         e7:ff:dd:8e:77:95:ab:40:d3:9e:41:20:f3:62:80:74:ec:e8:
         0c:09:43:92:c0:86:49:8b:17:5b:36:9b:99:6b:c1:74:63:07:
         91:95:0b:05:8d:1f:8b:77:68:7d:4d:32:6e:cf:85:18:d1:b8:
         0e:69:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 13:06:57 2025 by rpki-client