This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          PuKLrKL1iAXN2nx14EgKqkcdYijfEoNoxWnX7ASBKS8=
Subject key identifier:   B6:07:A1:1E:9B:6C:72:1B:A0:DC:B3:CF:87:73:A5:83:BB:96:81:86
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       019B0E261522CDD094ECE795324E806AA6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          1774
Signing time:             Thu 11 Dec 2025 16:02:15 +0000
Manifest this update:     Thu 11 Dec 2025 16:02:15 +0000
Manifest next update:     Fri 12 Dec 2025 16:02:15 +0000
Files and hashes:         1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
                          2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
                          3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: zLvmcITxv70miukcRNusfC5VLWFDmUWDQ1HkzqosS6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:26:15:22:cd:d0:94:ec:e7:95:32:4e:80:6a:a6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Dec 11 16:02:15 2025 GMT
            Not After : Dec 12 16:02:15 2025 GMT
        Subject: CN=b607a11e9b6c721ba0dcb3cf8773a583bb968186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:aa:c6:09:62:1d:3c:5d:11:c7:e0:c9:1c:
                    32:47:0b:30:14:c3:8b:a6:84:df:cc:ba:2c:eb:aa:
                    d7:59:97:ab:11:8c:84:66:16:74:f5:3a:5a:b8:d4:
                    73:16:8a:84:bc:26:87:53:0d:a9:8e:7f:83:63:12:
                    38:ca:c0:4f:e6:42:a7:7e:00:36:90:81:9f:2c:13:
                    df:25:0a:15:66:14:8b:67:d9:1b:57:4b:10:64:88:
                    9b:b8:ff:48:ac:f3:74:60:1e:e8:75:78:33:94:54:
                    70:a3:29:e4:db:e9:4a:d9:a2:f4:d8:9c:49:7a:96:
                    fa:bb:b1:ac:6b:22:8d:c3:79:8a:1d:6c:2c:93:e4:
                    aa:4a:e7:e9:ac:2c:81:3c:3b:4f:b5:03:ac:ef:a9:
                    07:f4:5a:30:28:b1:d6:36:dd:4b:11:f6:09:1e:07:
                    81:79:d7:42:a0:83:25:2a:ee:56:26:f7:8d:ee:02:
                    da:0a:05:70:b3:ff:c0:ed:7a:4d:99:cd:c3:3d:59:
                    f8:b3:64:3a:7b:40:4f:50:b6:40:f3:97:8c:1a:c1:
                    3b:85:88:41:c2:bb:f9:92:48:49:16:f9:1e:d4:36:
                    42:85:8e:c9:d8:d3:7d:83:9f:1e:98:2b:cf:1f:7f:
                    43:9a:9b:fd:34:8c:aa:33:16:f5:bb:c7:2c:24:e2:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:07:A1:1E:9B:6C:72:1B:A0:DC:B3:CF:87:73:A5:83:BB:96:81:86
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:af:c4:e4:1e:c0:e9:32:09:b7:37:db:93:25:e7:80:17:
         dc:ec:ab:43:46:3b:b0:8b:a5:40:b9:15:eb:48:38:65:69:0c:
         c7:d6:ac:9e:c8:02:ba:54:cc:c4:e8:04:e6:ff:66:3b:4e:8f:
         52:e3:49:9a:50:97:8b:db:b2:11:bf:ae:4a:f6:cb:a1:ec:4e:
         b9:9a:3e:78:5a:81:12:7b:17:51:c5:a1:90:4a:52:cb:61:f2:
         8e:2d:cc:4b:68:c9:3c:89:8e:b3:8a:35:c0:5c:86:e1:84:3a:
         92:77:46:53:41:9e:45:aa:4d:f8:8c:bb:78:3d:bc:dc:d0:16:
         70:3b:1a:d6:ef:49:58:56:b9:91:90:61:27:4c:61:5b:bf:10:
         d1:e1:45:a7:2a:24:f0:5f:f1:aa:9e:05:80:6b:2f:d8:17:0f:
         b7:43:29:ec:95:34:4a:cf:98:12:68:b5:e7:a5:5d:d9:32:ca:
         32:39:b4:c2:54:17:64:56:4f:bd:38:32:11:3a:f0:3b:26:b3:
         6c:1d:96:42:53:32:ff:08:28:7e:e1:70:f2:34:a1:89:da:69:
         8b:77:ae:14:1f:81:18:70:6e:db:e0:78:21:d7:c2:4a:f0:e4:
         69:af:14:71:5e:4c:c3:73:0e:3e:79:0a:18:c3:8c:89:dc:a7:
         b9:c8:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:57:41 2025 by rpki-client