This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File:                     9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier:          mqONwVLIWnXRW54Bix0S/1a0durNa86mSAogQ4YXZmQ=
Subject key identifier:   AC:11:DD:C7:4C:44:DE:D6:55:D3:43:98:EC:80:84:F9:BD:81:99:A9
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer:       /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial:       019B1FF4856E6618448B80328606EE5C4879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number:          09CC
Signing time:             Mon 15 Dec 2025 03:01:17 +0000
Manifest this update:     Mon 15 Dec 2025 03:01:17 +0000
Manifest next update:     Tue 16 Dec 2025 03:01:17 +0000
Files and hashes:         1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
                          2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: fz2Wa/GcWvREV47IJD/Y3H3GkQeqvEkkkf+pLzDtHfE=)
                          3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:f4:85:6e:66:18:44:8b:80:32:86:06:ee:5c:48:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
        Validity
            Not Before: Dec 15 03:01:17 2025 GMT
            Not After : Dec 16 03:01:17 2025 GMT
        Subject: CN=ac11ddc74c44ded655d34398ec8084f9bd8199a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:5b:40:02:f4:5e:9f:04:88:1c:eb:11:a5:
                    ce:d1:0e:17:53:1d:d3:1e:7b:d1:68:3e:c9:f5:14:
                    fb:bf:55:27:4d:db:07:da:5d:2e:de:70:93:4e:e6:
                    13:40:22:16:d7:74:30:66:fe:ee:fc:2f:b8:00:0a:
                    ed:e6:d2:80:ac:3b:17:10:33:3e:7e:4e:50:ed:d1:
                    93:c2:ef:84:9f:d6:69:18:7c:37:1f:e9:d3:cb:ba:
                    01:21:76:6f:28:7b:da:1b:ed:30:ea:0e:51:67:55:
                    c8:dc:02:c5:90:7f:48:3f:ea:28:c5:8c:4f:5a:05:
                    7c:a5:ec:02:df:ff:a4:21:df:07:75:d3:25:ad:0a:
                    13:04:1d:3d:b4:ee:15:f5:3b:c6:3f:91:54:ab:9c:
                    37:3f:31:b4:f8:b6:df:91:b0:14:c7:c1:16:9c:92:
                    8a:97:96:08:72:ff:1f:a1:ef:26:84:ae:e8:74:f3:
                    34:9f:b7:86:45:33:17:03:29:f4:16:2f:b9:a1:23:
                    46:c2:5b:df:90:fe:26:27:11:76:be:b9:9b:43:0f:
                    72:c3:24:cf:54:84:b5:8a:9c:3e:3c:87:42:a0:61:
                    30:4b:f4:41:25:2b:9c:fb:66:f5:56:6b:6b:2a:64:
                    26:17:45:e6:31:c1:05:44:e1:66:93:c9:c6:2e:c0:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:DD:C7:4C:44:DE:D6:55:D3:43:98:EC:80:84:F9:BD:81:99:A9
            X509v3 Authority Key Identifier:
                keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:43:a4:2b:fe:d4:24:86:09:ed:4b:8a:90:84:fb:d5:a7:
         c0:bb:c6:d9:54:05:64:fb:bd:f2:68:20:9f:f4:d9:11:09:54:
         4a:e0:87:3c:57:c4:90:af:3e:e3:14:26:53:45:91:7c:30:10:
         31:e3:b3:3a:f6:c8:64:48:a3:49:36:95:9c:1f:e6:f6:06:e0:
         62:26:1c:69:6a:11:c5:d2:de:cf:8f:7e:5c:db:58:e6:ef:4d:
         7d:f3:cf:b8:6d:76:c7:13:76:7c:2c:4c:c7:55:5c:01:ce:ce:
         a2:94:d1:d5:d8:9b:e5:15:7b:de:1f:52:20:90:dd:39:1b:1a:
         88:f2:6c:3f:05:b7:bd:dc:bd:0a:02:1e:e7:cf:d7:e6:e1:0b:
         c7:4d:2b:54:40:96:57:2c:bf:18:e0:e1:10:32:e5:ed:7d:d0:
         95:c3:b6:58:01:72:ae:17:e0:a0:2d:09:14:b0:be:a9:ad:94:
         c3:52:72:30:b6:ca:7c:a9:b3:0d:0b:af:28:78:92:fc:70:3e:
         1e:c3:5b:ae:e6:34:af:c6:07:63:29:b2:c3:76:2a:2e:33:63:
         a2:70:ab:9b:05:b6:eb:ee:10:c3:b3:a7:a7:9d:be:ed:7d:77:
         78:af:d7:95:81:53:38:f1:94:fa:93:69:6c:28:f2:bf:29:a5:
         10:ab:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 06:29:48 2025 by rpki-client