This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          EFZPA5lZ04YHbPzxufxYpOfcXBHH8PTnG2DVWq/0Xh4=
Subject key identifier:   84:BA:18:DF:8A:63:2B:CC:FE:F2:B2:B9:22:3B:A6:1C:F5:BE:21:09
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       019B59082A5B483249344572C92C8E8C267B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          038B
Signing time:             Fri 26 Dec 2025 05:01:05 +0000
Manifest this update:     Fri 26 Dec 2025 05:01:05 +0000
Manifest next update:     Sat 27 Dec 2025 05:01:05 +0000
Files and hashes:         1: 5BPtNrEhH9Rw1aJqmYEkCzXkQjY.roa (hash: qBma49p0UmV3mrUVRqrsoQSZBl3jQDEOljuj/i+uqbI=)
                          2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: 4S7WjLo6r8RCe0TtJ/gL2oand4ROZp9V3ZLkJq6xX8s=)
                          3: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (hash: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:08:2a:5b:48:32:49:34:45:72:c9:2c:8e:8c:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Dec 26 05:01:05 2025 GMT
            Not After : Dec 27 05:01:05 2025 GMT
        Subject: CN=84ba18df8a632bccfef2b2b9223ba61cf5be2109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:26:1b:7f:fe:95:9f:a0:95:73:02:54:c3:
                    6f:b9:31:62:75:ba:66:7b:12:08:7e:cf:57:91:87:
                    dc:77:91:74:d8:62:5d:ae:ab:6a:c3:d7:0d:36:18:
                    a7:c3:c4:3b:71:20:3b:a5:66:6a:ea:b7:a1:d9:43:
                    9d:2e:47:7b:7a:8e:e2:c6:22:56:0c:eb:ae:09:71:
                    be:47:67:b8:d5:d5:86:9f:e0:cb:de:45:fd:1a:77:
                    2b:70:9f:6b:a5:36:d5:3b:8a:4c:92:4b:7c:f6:ff:
                    5a:25:60:1e:4e:10:9b:f8:fe:a8:54:53:d8:7e:fc:
                    e0:df:2c:09:27:13:7e:bd:d4:35:d3:9c:4b:9a:f2:
                    b7:e8:1e:87:3c:b4:5a:84:5b:b3:00:7b:32:9c:c9:
                    06:68:f1:6c:c9:0a:86:59:52:fe:0f:c7:b0:f6:16:
                    5f:43:c4:f0:33:b7:46:99:10:98:81:ce:56:d2:06:
                    89:f6:88:09:76:d4:e9:cd:13:8b:3d:ae:e6:d9:69:
                    a9:f3:85:58:c6:ae:9c:66:e0:27:23:af:00:30:9d:
                    cb:d6:51:e9:cb:5f:b0:a2:b5:e1:6f:98:6e:77:96:
                    35:77:fe:f6:01:c5:d6:94:cd:1e:bd:d2:c6:e8:ed:
                    62:97:22:af:8b:a5:e5:6d:88:9f:39:ed:82:26:90:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:18:DF:8A:63:2B:CC:FE:F2:B2:B9:22:3B:A6:1C:F5:BE:21:09
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:42:30:bc:3e:8f:be:f7:a6:f5:50:55:55:1a:ae:82:e2:
         4d:ed:4a:bb:a6:91:cd:d5:77:16:30:a9:87:20:d9:8c:ec:d4:
         51:3f:d7:c4:6b:c1:19:70:17:9c:1c:6a:74:8d:ee:a8:3c:4c:
         40:42:99:1c:5b:6f:b2:95:b4:56:6f:8a:c0:ff:1f:fb:2c:95:
         48:21:ec:3f:24:98:6b:cd:a6:1e:91:fb:b4:68:d5:b2:c3:ab:
         27:c2:0d:b4:1f:be:d8:58:2b:f9:32:d5:65:7a:d7:1b:df:a7:
         5a:90:93:af:d3:08:34:66:da:d7:c5:ee:87:c4:52:72:82:16:
         42:8a:06:29:18:fe:b5:5f:63:39:c1:96:91:5f:6e:e3:30:a9:
         39:80:42:4f:6e:8f:aa:2e:4a:ae:1d:bf:7d:85:1a:b0:41:f7:
         72:8d:dd:ff:31:ab:6f:53:67:67:75:59:8c:7c:30:b2:90:48:
         cc:a8:58:3a:7e:3e:13:44:8f:49:c3:d1:03:86:a8:b9:3e:33:
         06:ff:50:2c:a5:92:3d:25:1a:6b:a0:a5:b7:f7:0b:47:35:9f:
         3e:8a:e5:ef:80:89:4b:d0:32:42:ae:ea:53:85:c8:dc:60:2a:
         74:fe:b4:93:e4:77:07:1d:7b:b2:79:d6:b6:72:3b:c9:08:f1:
         32:45:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:16:55 2025 by rpki-client