This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
File:                     0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json)
Hash identifier:          b6GbVMwDyCFl0tG+zojShHkH2i0Rh8S6rXf8I28X824=
Subject key identifier:   71:D3:E0:C0:92:FF:87:1D:81:C4:94:A1:D1:B8:A5:30:FB:55:A3:3B
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Certificate issuer:       /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial:       019AF79CD888438790945A41E55A84774515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
Manifest number:          1287
Signing time:             Sun 07 Dec 2025 07:00:42 +0000
Manifest this update:     Sun 07 Dec 2025 07:00:42 +0000
Manifest next update:     Mon 08 Dec 2025 07:00:42 +0000
Files and hashes:         1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: EMLsR61XlS4JhkkWpmts35apSKGQAaRrcP7l7mu024k=)
                          2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=)
                          3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=)
                          4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=)
                          5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=)
                          6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=)
                          7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=)
                          8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=)
                          9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=)
                          10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=)
                          11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:9c:d8:88:43:87:90:94:5a:41:e5:5a:84:77:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
        Validity
            Not Before: Dec  7 07:00:42 2025 GMT
            Not After : Dec  8 07:00:42 2025 GMT
        Subject: CN=71d3e0c092ff871d81c494a1d1b8a530fb55a33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:4e:96:ca:31:29:d4:4b:45:c3:fe:fe:40:
                    68:95:4a:b9:86:a2:0c:e7:92:8c:af:c5:1e:6f:b1:
                    5f:f4:c2:1e:8d:e0:8d:20:0d:74:a7:24:91:85:a3:
                    47:8e:24:b0:e8:f7:47:c0:da:bc:64:63:45:9c:47:
                    3a:04:df:f4:8f:96:53:70:6c:12:42:a4:e3:0b:a2:
                    67:16:8e:4f:bc:69:25:25:3d:a7:dd:d4:b7:8c:65:
                    4f:a9:49:8e:d7:70:26:f9:64:d7:25:a3:dc:8c:4f:
                    56:b2:90:8b:d1:3c:37:20:19:93:34:67:1b:32:49:
                    4f:e7:8a:63:20:e7:d9:2c:41:ec:53:e8:d2:ec:0a:
                    0a:a2:8a:4d:43:d4:5d:22:ce:af:c4:4d:3a:f5:03:
                    30:00:4d:69:76:b0:0e:03:0e:61:e3:a7:29:74:61:
                    e2:a2:e0:d3:15:c3:ca:91:12:b0:4d:66:1b:01:02:
                    1f:d7:7d:74:18:a8:5f:ba:0a:95:66:6a:99:23:b4:
                    fe:9f:5d:52:ae:d7:c2:c4:b2:a7:0b:71:8d:04:89:
                    41:b7:a2:aa:a2:c6:58:71:75:de:3d:fe:70:7d:5a:
                    f3:a3:40:2f:9c:f0:af:5e:35:2f:f9:8b:57:c7:3a:
                    72:38:16:45:7b:08:29:8e:d9:f9:90:c2:40:60:45:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:E0:C0:92:FF:87:1D:81:C4:94:A1:D1:B8:A5:30:FB:55:A3:3B
            X509v3 Authority Key Identifier:
                keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:99:12:dd:6a:f0:a6:45:cf:94:7a:d6:fc:c8:d7:5a:1e:
         b4:d4:04:b6:1e:02:1f:d1:5b:1f:9a:e1:87:f4:4d:da:14:56:
         e5:be:cb:9c:45:e8:1a:59:22:47:a6:a5:d8:96:53:82:aa:94:
         45:c7:17:96:26:86:f1:dd:b8:76:88:c7:32:fc:98:59:b9:58:
         ab:8b:96:ef:50:63:2c:a9:6d:fa:de:48:a8:0a:33:23:a9:65:
         15:c6:b1:51:bf:21:e1:5f:d1:f6:de:87:45:e6:65:1f:a7:2d:
         59:14:42:83:cc:ea:9c:37:fd:b4:8e:c0:19:4c:cd:3c:70:7f:
         ee:61:02:34:3c:c4:e0:4b:4f:8a:f9:be:0e:cc:a1:e2:1c:3a:
         f3:30:3d:4b:56:08:cf:99:24:90:17:28:0a:5e:87:aa:3c:2a:
         b2:c0:c6:34:53:a9:1e:93:5f:f7:33:7a:8f:07:14:6f:e7:c9:
         33:41:9b:dc:b1:a1:7a:37:be:e6:08:5b:ad:64:73:99:22:d0:
         a1:98:7e:a1:fd:78:c4:90:54:ea:4b:fd:e2:8f:a8:a8:e5:ed:
         02:83:5a:89:4d:0d:73:98:1a:63:12:f3:a3:c1:dc:1c:fc:08:
         1d:b8:74:75:bc:fc:1e:9a:d4:d3:2b:4b:df:3a:c0:49:37:b5:
         f4:01:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:21:29 2025 by rpki-client