This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File:                     75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier:          RPEogWd8e3OVnmbY7lHgbJqJz/HNv3JvDeP6JwV6Doc=
Subject key identifier:   3B:39:65:A5:EE:42:49:0C:A6:9D:93:EC:13:6C:1E:1D:A4:4C:00:85
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer:       /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial:       019B066BCE3009E3854EA8C7B93B2D4D2F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number:          092D
Signing time:             Wed 10 Dec 2025 04:01:26 +0000
Manifest this update:     Wed 10 Dec 2025 04:01:26 +0000
Manifest next update:     Thu 11 Dec 2025 04:01:26 +0000
Files and hashes:         1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: LMnSYlkCI0z44c/Ab96t7xMhLTAwi75EnWbxiygbV/w=)
                          2: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (hash: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=)
                          3: qsZrdnkoO0E25hqGWNb8Z9dNerM.roa (hash: hAyilmx8AWlJmwYPt85XuLAx4M2nXqrLORTF4xGEO6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:6b:ce:30:09:e3:85:4e:a8:c7:b9:3b:2d:4d:2f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
        Validity
            Not Before: Dec 10 04:01:26 2025 GMT
            Not After : Dec 11 04:01:26 2025 GMT
        Subject: CN=3b3965a5ee42490ca69d93ec136c1e1da44c0085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:42:9a:19:27:f8:eb:fe:c8:1e:cc:46:9f:
                    7c:02:14:e5:d5:74:4e:ab:fe:f5:5b:9a:5a:85:38:
                    32:8f:47:b5:cd:07:a1:6e:64:40:d7:b3:68:e6:e8:
                    6c:53:0f:f5:07:6e:07:63:28:c4:69:a9:0f:66:48:
                    98:42:cd:be:01:2e:91:bc:c5:3c:68:80:13:49:7f:
                    59:86:e8:ce:6b:17:d0:b6:a0:7b:11:79:a1:d0:7e:
                    bf:b8:4f:59:13:58:79:08:95:d6:ae:e1:61:01:29:
                    99:e7:17:ca:fe:55:a9:03:98:1d:41:79:b3:57:5c:
                    d1:04:d8:3b:a2:fe:4f:c7:68:07:0e:f3:19:72:f0:
                    20:90:75:f7:62:1b:eb:fe:59:d6:50:17:b8:ef:aa:
                    07:12:61:33:ab:8c:b6:90:6a:9c:ba:01:36:d2:61:
                    d2:ca:86:87:09:8d:07:75:09:2a:5e:09:21:00:3d:
                    91:e7:32:81:8d:d9:58:f7:68:e1:cf:5c:59:ad:32:
                    79:74:f1:5f:06:f2:b5:34:2c:34:7c:5d:32:74:44:
                    23:2c:fd:56:43:c3:e7:04:80:a3:85:72:78:8f:5d:
                    c4:67:69:97:37:dd:5c:dc:77:5f:46:dd:c0:71:8a:
                    88:af:34:b3:b9:85:ab:b7:47:3d:a7:c0:93:34:b8:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:39:65:A5:EE:42:49:0C:A6:9D:93:EC:13:6C:1E:1D:A4:4C:00:85
            X509v3 Authority Key Identifier:
                keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:e8:65:e9:94:3d:86:23:dc:d8:60:07:14:95:eb:f5:f8:
         7c:b3:3f:e7:7f:e2:b6:61:59:7f:66:e9:6a:a7:6d:fe:14:23:
         3e:2b:f2:ed:ed:77:c6:71:4a:f6:a5:89:fe:1e:ff:f9:f4:ba:
         55:fb:7b:ef:b7:2a:b6:fe:2f:1b:9d:f6:fa:91:ec:2f:89:73:
         8e:4c:70:c2:30:85:9c:b6:85:e7:db:c2:55:56:31:e6:71:18:
         e9:23:69:36:87:6d:d7:5c:20:dc:a3:a2:b5:fd:11:db:26:7b:
         dc:8d:34:89:bc:d5:14:f9:44:5a:a7:42:04:fa:76:11:e3:68:
         6e:02:43:98:b6:38:ad:e0:2f:fd:6c:30:5e:d1:73:46:ad:7a:
         5c:37:81:9a:36:27:2e:90:bf:70:94:ca:78:ae:10:b7:6c:40:
         d9:57:fc:7a:4f:a9:6e:d7:4a:58:a3:a2:c3:13:92:ac:71:64:
         ba:af:37:e1:33:c1:4b:f1:26:1c:2a:b8:8d:7a:20:16:8a:d3:
         52:4a:d8:08:8e:9b:16:53:71:81:d2:9e:e6:8b:f4:1b:24:29:
         c4:c9:82:56:91:5c:69:b3:c3:ce:fe:38:1c:33:23:a9:de:62:
         13:2c:a0:ae:45:70:0b:cc:db:f5:2a:e5:43:18:4e:da:13:1f:
         f2:46:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:36:14 2025 by rpki-client