This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File:                     H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier:          pKkCxvIKf0ERN3C+wJSOKzZc1H2TRlYG2fNKJNuewIw=
Subject key identifier:   00:96:B4:B6:DB:B4:57:A9:06:02:D3:32:DE:C0:E3:DA:AB:F7:67:5F
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer:       /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial:       019B372165B0340BB1FE2E634F89446FCD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number:          AB
Signing time:             Fri 19 Dec 2025 15:01:34 +0000
Manifest this update:     Fri 19 Dec 2025 15:01:34 +0000
Manifest next update:     Sat 20 Dec 2025 15:01:34 +0000
Files and hashes:         1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=)
                          2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: LwDiPJTLzKtXTyaBcYiClwxpw/DT4E5NCmuFF2KBd0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:21:65:b0:34:0b:b1:fe:2e:63:4f:89:44:6f:cd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
        Validity
            Not Before: Dec 19 15:01:34 2025 GMT
            Not After : Dec 20 15:01:34 2025 GMT
        Subject: CN=0096b4b6dbb457a90602d332dec0e3daabf7675f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:94:e3:30:42:26:a0:80:be:a3:11:90:77:
                    36:54:20:93:eb:0d:f5:17:6a:85:4c:30:b7:04:3b:
                    ba:49:6b:cf:2d:f9:b5:48:3a:9e:49:a9:8c:6c:04:
                    c6:49:5a:57:e4:e2:cb:b6:6b:c6:6f:2a:29:e0:5f:
                    71:3f:8a:7c:38:3f:0a:fe:58:b4:d9:12:d9:41:0b:
                    ba:aa:05:62:cc:4c:2d:ea:2d:6f:40:28:a9:2f:43:
                    9e:0c:e6:96:63:a4:2e:de:ff:0f:f3:db:58:4a:54:
                    46:48:9a:03:52:34:25:e2:f7:19:07:2c:95:f3:45:
                    d2:55:01:3e:e6:cd:4b:6d:ad:6b:0a:97:69:7e:24:
                    b8:26:8c:6f:52:28:ae:e3:37:28:7e:f8:ba:d9:cf:
                    ec:e5:5a:5d:db:f7:c0:51:de:5e:e5:d3:48:31:37:
                    84:25:d8:19:f1:6e:2b:63:62:b5:b8:c1:0b:bf:e0:
                    2e:1c:fa:84:c9:3e:97:86:e7:22:98:06:34:4b:16:
                    bf:ae:90:38:f3:42:76:42:d5:89:9f:a9:2b:11:48:
                    4f:33:bf:1f:5d:52:b2:73:40:81:5d:11:f1:00:70:
                    3d:b4:16:41:58:69:ee:3e:77:15:a3:46:1e:2c:85:
                    b0:2e:af:85:c0:aa:1c:99:cb:27:b8:1f:0b:14:57:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:B4:B6:DB:B4:57:A9:06:02:D3:32:DE:C0:E3:DA:AB:F7:67:5F
            X509v3 Authority Key Identifier:
                keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6f:dd:2e:13:47:49:4e:34:9d:22:1f:aa:df:bc:22:a3:57:
         9f:3a:d1:84:42:7c:af:c4:fe:a8:17:00:41:32:b1:54:8f:4e:
         d5:8f:20:97:17:6f:67:41:da:c1:57:0d:07:d4:44:44:24:f3:
         18:02:c3:e1:c1:ad:24:05:57:ec:36:cc:60:85:0c:f5:16:7b:
         b8:52:0f:d2:17:86:3a:1d:e5:0c:28:3d:26:95:e8:d0:ec:9f:
         88:ac:82:b8:19:42:f2:79:8c:fa:ff:d9:83:4d:23:38:dc:8b:
         ce:4e:6d:2a:a6:03:e8:f0:29:68:f9:4a:75:ca:a2:6f:2b:b1:
         17:0f:a1:96:1f:a2:37:ee:2b:a6:3d:43:d1:d9:5a:3a:47:36:
         55:c2:25:cf:82:1a:89:ec:e1:b6:4d:a0:fd:36:f5:01:60:72:
         dd:99:94:52:90:ab:5f:c8:e0:cc:2e:59:fd:45:3e:ca:07:f0:
         71:ad:17:c2:42:d9:61:1a:8a:fb:00:55:9d:7b:d7:ae:ba:6a:
         db:4f:ab:7d:d4:65:d7:bc:1d:24:ad:23:76:0e:9a:83:8a:e3:
         82:5a:03:89:30:71:e6:4b:10:1f:f6:f0:b9:a0:1a:c4:bc:8a:
         52:07:f8:95:b8:b1:bd:ad:49:57:8c:09:44:d9:b0:cb:ff:62:
         20:97:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:50 2025 by rpki-client