This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File:                     AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier:          AQo9ZhJBE4pJ2aMbO1282pN9D76w6PsQWgCb9Q0bHIE=
Subject key identifier:   BD:67:B0:0B:9A:FE:94:59:1B:4A:1A:6C:B6:AD:78:81:8D:6D:8A:19
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer:       /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial:       019B58D10D6FC9505ACFD0FEB52FB3A274B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number:          086D
Signing time:             Fri 26 Dec 2025 04:00:53 +0000
Manifest this update:     Fri 26 Dec 2025 04:00:53 +0000
Manifest next update:     Sat 27 Dec 2025 04:00:53 +0000
Files and hashes:         1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: BlzEiBgtftFv65SIXxtLlENatSAKHtrWUv6vm1dPOzg=)
                          2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
                          3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:d1:0d:6f:c9:50:5a:cf:d0:fe:b5:2f:b3:a2:74:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
        Validity
            Not Before: Dec 26 04:00:53 2025 GMT
            Not After : Dec 27 04:00:53 2025 GMT
        Subject: CN=bd67b00b9afe94591b4a1a6cb6ad78818d6d8a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:4a:b7:3b:43:f8:73:66:55:c8:20:9d:2c:
                    65:c7:fa:94:18:e5:56:7b:86:f2:dd:0b:ea:ae:0e:
                    6c:c4:b3:0d:b1:21:03:eb:91:ce:e2:eb:d8:cc:c1:
                    b5:e2:cd:56:2e:3c:54:0a:a0:0a:0a:b6:f3:10:19:
                    7b:ce:da:d5:f2:a4:6d:28:cb:de:b8:9e:92:27:59:
                    3b:c7:89:fe:fd:16:85:98:c6:c9:9e:f0:7c:03:71:
                    f0:5d:1a:13:07:0d:fb:65:8a:e8:a9:ec:9c:68:bd:
                    58:5b:59:e1:eb:3c:86:69:7d:9a:e5:fc:85:84:1d:
                    bc:df:0d:2f:2e:b6:82:1d:f1:e1:8a:fe:93:30:8f:
                    d4:90:93:69:35:43:c3:71:3f:ca:3a:a6:81:aa:8c:
                    5a:9a:21:32:21:9a:a0:3d:7e:12:8e:d0:fe:88:31:
                    68:77:8d:d2:ea:1d:df:e5:54:2b:14:48:15:18:8c:
                    da:61:77:d1:f2:06:61:2b:55:60:2c:ae:ab:ad:b5:
                    dc:f6:ce:53:66:9d:fe:39:2b:eb:25:a9:7a:29:65:
                    a7:2b:3f:c5:e9:9c:0f:af:60:92:25:f3:52:1a:9a:
                    1e:0f:84:74:74:f2:09:64:aa:7f:62:9c:0d:06:08:
                    72:8d:73:47:33:b8:5f:ef:1e:77:0e:17:06:86:91:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:67:B0:0B:9A:FE:94:59:1B:4A:1A:6C:B6:AD:78:81:8D:6D:8A:19
            X509v3 Authority Key Identifier:
                keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:66:de:40:54:12:77:d0:c2:d3:32:0f:62:a5:70:8f:52:be:
         c1:e9:a7:84:68:e3:92:b9:7f:9b:e0:03:85:d6:3b:d3:5b:a4:
         93:a5:7d:32:c9:2a:5c:f0:78:b1:80:a9:2b:c7:5d:c5:b4:7b:
         23:8f:15:fe:cd:2c:1c:f4:8c:27:04:80:b7:36:a0:b2:65:ad:
         66:0d:3d:1f:14:11:bc:42:2a:ae:ca:24:85:d3:3d:ad:df:ee:
         88:de:59:28:db:e1:83:cb:20:ad:c9:18:21:40:4e:13:9f:9d:
         96:cf:b6:a1:0e:c9:fb:17:d6:23:d8:f8:82:f4:69:f6:17:72:
         68:d3:37:f8:8e:41:1b:a6:3c:11:81:b3:6e:e4:b0:8b:43:13:
         a0:be:3d:be:42:34:ac:99:ad:c2:a6:5c:15:c4:10:e4:e7:5a:
         91:04:0f:e9:e6:fe:e5:07:00:f5:be:d2:eb:63:c8:59:07:43:
         68:bd:e7:b5:58:ab:b2:3c:05:e2:92:ee:76:8f:af:1d:1e:e4:
         4d:06:78:b2:58:41:6d:dc:ff:c2:3f:69:bc:73:92:fa:36:15:
         7e:49:0f:7a:8b:c2:de:0f:5d:de:ae:48:ef:11:23:a8:a5:ff:
         42:0d:82:21:2b:b6:32:1d:7f:69:90:e6:5e:bc:7a:58:14:fc:
         1a:00:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:18:21 2025 by rpki-client