This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          er5HunVbog8XqSIbSPRLxSjHPmWFx1LqmyD97vydvvQ=
Subject key identifier:   E5:F9:11:77:E1:CC:CC:A1:AB:80:34:8D:91:59:A2:39:6C:D5:31:24
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019B232BF4A8FC4257F4388C15A8EE73FAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0C36
Signing time:             Mon 15 Dec 2025 18:00:41 +0000
Manifest this update:     Mon 15 Dec 2025 18:00:41 +0000
Manifest next update:     Tue 16 Dec 2025 18:00:41 +0000
Files and hashes:         1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=)
                          2: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          3: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: PQRbaWhuFh0C7W4sQOZsSnxSqscmKlbVv/jwnVq6SMU=)
                          4: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          5: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=)
                          7: DeUytZfI95MWDsuLJPAteUD07Uc.roa (hash: wyHnlO7zWJ+apYnZ3m2Zd+YBK+GTVFGojfzCgOcEpWA=)
                          8: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          9: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          10: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          11: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:2b:f4:a8:fc:42:57:f4:38:8c:15:a8:ee:73:fa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Dec 15 18:00:41 2025 GMT
            Not After : Dec 16 18:00:41 2025 GMT
        Subject: CN=e5f91177e1cccca1ab80348d9159a2396cd53124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:f0:ea:29:d8:91:42:39:a1:81:b6:e6:2c:
                    ec:d7:60:56:85:8d:bb:cf:fd:34:c2:ae:68:53:71:
                    2b:25:15:60:4d:55:37:22:fe:4c:63:b2:d8:9e:58:
                    d7:b6:eb:07:51:e3:1e:82:31:a8:74:cc:3e:63:53:
                    d3:4b:f0:05:44:6e:70:fc:cb:47:3f:78:1a:7d:05:
                    11:c0:9b:72:66:f7:32:92:a3:14:4c:39:68:60:bb:
                    65:8d:ea:75:0a:30:70:c5:42:82:b3:26:6d:79:a9:
                    99:7a:d4:d0:b7:d0:41:5e:a2:46:96:b8:4d:ea:6b:
                    0f:59:5a:11:69:14:66:2f:3e:2e:0b:e3:54:da:9d:
                    02:13:7f:c4:9e:c5:2c:78:1e:2f:ab:cf:30:9b:50:
                    92:d1:a3:f3:0d:91:16:cf:1a:f2:be:87:8c:62:8e:
                    4d:d1:ba:e2:0b:0e:aa:6f:93:4e:1e:7e:18:fa:07:
                    80:3d:11:a3:1a:aa:f6:34:6a:cc:81:8e:83:be:e1:
                    3d:24:2e:0f:5b:47:9a:c7:82:2b:b5:40:7e:dc:21:
                    30:86:76:7a:5b:aa:d9:7a:ed:80:28:0a:93:03:ba:
                    df:96:8f:49:df:9d:eb:fc:16:77:ae:fe:fa:43:45:
                    d0:d1:05:b8:cb:8f:6f:f6:eb:cf:70:d4:6f:f1:7d:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:11:77:E1:CC:CC:A1:AB:80:34:8D:91:59:A2:39:6C:D5:31:24
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:38:96:e4:79:9f:2c:94:7e:17:35:bc:9a:f0:2f:da:6d:e6:
         aa:3f:73:6b:f1:56:5b:61:1b:b4:79:75:2a:80:22:e7:5c:75:
         ce:87:e6:10:f1:8d:78:1d:2c:b9:8f:7f:df:da:9a:b7:57:14:
         c3:4c:49:01:3c:ab:cd:09:48:a5:f1:37:14:88:a9:f1:49:b0:
         26:bd:80:d5:ff:e4:80:bd:73:e3:9d:0b:a5:52:02:7f:55:83:
         d2:52:49:2d:23:61:8f:5f:78:70:96:15:12:a3:ea:05:3d:0d:
         7d:60:ad:5c:79:69:53:e7:d7:90:ae:6f:37:c8:ac:94:91:e0:
         92:2e:59:55:43:9f:97:ab:96:28:b6:a2:fa:e0:41:13:df:34:
         1c:0d:65:d6:08:07:81:a7:35:5e:b4:f3:75:de:4a:79:2c:1f:
         0f:d3:60:82:39:bb:a4:a7:11:5f:30:ad:94:69:cd:01:f0:40:
         a7:ee:6c:54:a8:35:31:15:ca:f7:03:ee:9a:3e:b6:27:bc:5f:
         6a:2d:59:ba:fb:41:93:40:e5:44:67:95:ee:e6:c1:74:ec:27:
         1c:a6:22:a7:9c:be:34:5c:a2:e5:62:5d:7b:b1:62:c7:1e:dc:
         fa:92:48:d3:b7:a0:62:0f:cc:1a:55:dd:72:ef:f1:a4:72:21:
         9f:5e:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 21:50:25 2025 by rpki-client