This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          c58uJ0idDsV3h/GlWLf+pB/nts86rVlGoIXwIP7x5LQ=
Subject key identifier:   71:C1:F5:BB:8A:62:2F:EB:6B:8D:1C:34:D9:5F:FA:AB:3E:41:11:BB
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       019B1201DA701F5AED5A331A45A399620EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          0BB4
Signing time:             Fri 12 Dec 2025 10:01:09 +0000
Manifest this update:     Fri 12 Dec 2025 10:01:09 +0000
Manifest next update:     Sat 13 Dec 2025 10:01:09 +0000
Files and hashes:         1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
                          2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: 45BhAC1O4kYBViH1wP8Iw1piO+/VGVip0ZrHTj9yYkg=)
                          3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:01:da:70:1f:5a:ed:5a:33:1a:45:a3:99:62:0e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Dec 12 10:01:09 2025 GMT
            Not After : Dec 13 10:01:09 2025 GMT
        Subject: CN=71c1f5bb8a622feb6b8d1c34d95ffaab3e4111bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:bc:cf:8b:32:78:2c:5c:ac:15:91:ce:68:
                    1d:82:0c:50:e2:5e:1c:35:37:c2:e8:2f:b9:41:f0:
                    10:dc:dd:b3:8a:da:b5:20:5c:30:ed:f9:ef:df:fc:
                    43:82:4c:dc:be:12:0e:ab:c9:ee:4e:6d:81:7b:ae:
                    54:b7:ed:ae:0b:8b:df:93:35:84:3b:82:60:56:1a:
                    7a:1b:45:f2:cc:03:ef:90:ee:f8:7f:a1:fd:6c:25:
                    e1:d1:76:e6:37:cd:fd:7b:f7:d2:06:fc:bf:0d:a0:
                    bf:5a:f1:e3:35:b5:6b:1d:ca:28:7e:2a:61:bd:bd:
                    fd:01:94:cb:b5:81:2d:e2:39:8d:15:48:4a:10:14:
                    b3:3e:d3:b6:23:f0:62:b8:ed:8a:01:79:03:f0:d2:
                    2a:b3:f6:fd:7e:35:cc:76:fd:e2:fe:62:3f:13:b5:
                    a6:75:1b:2b:c8:9c:cb:ce:ee:12:a3:9f:b8:0c:d5:
                    b2:04:a8:02:7b:7f:42:16:70:4f:66:35:c1:96:55:
                    5d:d1:6a:6d:70:2e:57:0e:95:53:21:ac:06:c8:72:
                    ec:3c:30:39:7d:26:04:76:e1:9e:be:28:f3:63:cf:
                    9e:cb:7d:20:b2:a3:7b:87:d6:6d:5f:17:43:0e:ce:
                    c8:a8:fc:25:b3:47:a8:c5:41:b9:da:bc:d4:05:e3:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C1:F5:BB:8A:62:2F:EB:6B:8D:1C:34:D9:5F:FA:AB:3E:41:11:BB
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:be:72:61:a0:ee:df:44:6e:cb:34:a2:98:65:9c:63:c2:
         16:02:e3:3b:4a:0e:72:71:ca:c6:c9:9d:f3:36:4c:cd:00:ec:
         10:0c:ac:53:9a:ac:09:47:4c:f3:54:c1:5e:61:ed:c6:1d:f9:
         81:d5:61:f8:ca:19:c7:c6:fa:f1:22:d6:ea:07:c0:7b:4b:c1:
         80:a8:07:5c:d6:7e:73:5b:c1:3c:dd:a1:cb:4e:ad:73:e5:33:
         30:a5:04:26:d2:ec:52:21:4e:ac:ac:b5:a7:f4:e4:c3:06:62:
         b2:6c:3d:f4:9d:70:e2:c4:05:74:26:9b:00:a0:14:4c:d0:8b:
         60:e8:59:c8:4b:de:05:ac:9e:ff:af:2e:75:ea:85:1c:13:b2:
         b5:b6:80:c7:e3:32:5d:33:3d:c1:89:73:94:c2:68:e4:72:aa:
         42:d8:1e:bf:d9:58:4a:fa:75:18:ec:aa:5a:8d:07:73:95:50:
         bb:80:33:df:b6:d9:19:24:6d:82:14:f5:49:3a:5e:3a:eb:5d:
         f7:67:49:81:50:c7:42:e1:2a:13:5d:ff:b5:d3:0f:a4:4e:b9:
         a9:10:94:08:f6:77:8c:9c:9d:f4:c4:61:a7:c9:5b:9e:2c:45:
         9d:28:e6:6f:bd:2d:5f:de:90:49:28:1e:9b:25:93:61:ab:da:
         66:21:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:23:16 2025 by rpki-client