This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File:                     txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier:          JmXvzUKrb2gN7CFqbBgvlyIhgB/qQ8KUQA+2smHzJ7o=
Subject key identifier:   4A:1D:80:48:64:46:DA:89:9C:ED:6C:33:AA:E9:F6:3D:12:EC:9A:D7
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer:       /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial:       019B040F2A0FE2A27A2C56C568319C4090B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number:          045F
Signing time:             Tue 09 Dec 2025 17:01:01 +0000
Manifest this update:     Tue 09 Dec 2025 17:01:01 +0000
Manifest next update:     Wed 10 Dec 2025 17:01:01 +0000
Files and hashes:         1: Hqr3lFqQdjNoLAvKkFjdiwPEQr8.roa (hash: cZCMxo45VpaV48xQft3UBtyd8xJ7RJpZ5PQFW9cG3+g=)
                          2: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: UPubdnTyAULnAZple6CAnbpDfxsqyktewEPxc/9ydio=)
                          3: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 16:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:0f:2a:0f:e2:a2:7a:2c:56:c5:68:31:9c:40:90:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
        Validity
            Not Before: Dec  9 17:01:01 2025 GMT
            Not After : Dec 10 17:01:01 2025 GMT
        Subject: CN=4a1d80486446da899ced6c33aae9f63d12ec9ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:a4:ea:45:ca:dc:93:c6:dc:88:dc:79:74:
                    c5:98:c9:d9:6d:58:de:91:41:cf:27:09:2a:a9:8f:
                    1a:c2:ea:24:31:07:96:73:9e:14:f6:0f:81:ad:10:
                    3d:dc:27:d0:31:e9:c4:fc:ce:cf:ba:a8:2d:54:90:
                    83:44:ed:3e:a4:8b:7d:1e:4f:a5:c4:c8:34:51:64:
                    1c:b3:59:ce:75:75:93:cf:b4:3e:0d:c9:20:b0:f8:
                    eb:d4:20:e5:92:d1:51:34:6c:66:64:15:00:f8:fe:
                    e4:85:9c:e7:9b:4d:cc:25:fb:73:a0:70:ba:41:ce:
                    fc:39:23:ac:57:b2:e3:e3:ff:bc:5a:8d:58:4e:86:
                    b8:dd:8f:9a:03:31:00:41:d5:49:78:1d:d4:27:5f:
                    44:62:dc:c7:c6:1e:27:25:ca:fa:fe:8d:6c:03:60:
                    44:a9:b4:11:9c:aa:6b:60:61:8e:b5:07:c2:66:c7:
                    65:ac:f2:0a:e3:69:0b:7a:c2:36:9c:c2:26:01:2b:
                    7c:63:6e:55:99:02:12:f8:09:ea:b5:45:83:17:51:
                    ae:e9:7b:b4:0f:95:c8:2b:ba:34:ba:54:fd:be:0a:
                    e9:e8:d4:91:d2:67:51:5d:5f:94:ed:32:ab:d2:ac:
                    6f:3c:52:91:f7:84:9f:75:81:ef:76:12:f8:1f:d1:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:80:48:64:46:DA:89:9C:ED:6C:33:AA:E9:F6:3D:12:EC:9A:D7
            X509v3 Authority Key Identifier:
                keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:42:19:01:b8:e1:0e:70:d7:1a:7f:e7:0c:b5:ce:36:3d:
         87:18:d8:31:8b:d1:fb:07:74:2e:3c:87:81:48:69:f3:46:a4:
         b0:02:ca:fe:08:0e:d7:88:7c:ae:16:5d:b0:83:8c:8b:c5:c6:
         18:47:9a:12:b4:e9:39:0c:75:46:8f:b7:83:64:3a:80:8f:ca:
         b4:0d:04:92:ef:36:3e:82:8c:c4:7f:d6:c6:3a:db:3a:e1:dd:
         28:8e:d6:44:0e:f0:1d:6d:9e:5e:15:8e:9e:6c:92:91:81:e7:
         11:1b:7d:16:6b:da:dd:a7:d5:81:2d:48:12:2c:cc:81:7c:12:
         6d:1a:eb:15:bc:ba:28:58:34:30:25:fc:25:7f:49:c2:dd:2a:
         1a:b6:d1:14:0e:84:03:14:f2:84:b3:d5:43:4c:fe:ce:6c:7a:
         83:b6:1a:e6:e2:29:b9:77:37:09:5b:54:ee:14:5e:91:d7:04:
         ce:45:ab:1a:27:6e:e3:85:dc:51:b0:85:5b:8c:ad:6d:0d:9e:
         d5:85:4e:88:47:67:67:60:f2:24:49:11:f6:ee:98:23:0d:96:
         6d:c5:ff:03:55:fc:99:28:78:07:9f:23:84:93:9b:74:c2:12:
         57:54:8a:72:67:32:04:51:39:32:96:8e:6a:d2:b0:dc:56:1c:
         4e:1d:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 01:24:47 2025 by rpki-client