This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File:                     0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier:          eMZ2fe6WJ5h5sQ0awWWvmPJ7gfZ749xjKTqU5tVjHII=
Subject key identifier:   1B:19:7B:DF:B6:8E:24:BD:E4:99:05:60:25:71:36:AF:BF:8D:9F:D1
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer:       /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial:       019B3757C8FEBCE5B56158B8DC07AAA8C3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number:          10C1
Signing time:             Fri 19 Dec 2025 16:00:58 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:58 +0000
Manifest next update:     Sat 20 Dec 2025 16:00:58 +0000
Files and hashes:         1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: zL3yAITp16UUpg76mGQ43ywWJhDBQuULpkIRb3RyiPM=)
                          2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:c8:fe:bc:e5:b5:61:58:b8:dc:07:aa:a8:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
        Validity
            Not Before: Dec 19 16:00:58 2025 GMT
            Not After : Dec 20 16:00:58 2025 GMT
        Subject: CN=1b197bdfb68e24bde4990560257136afbf8d9fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:17:26:30:26:d4:8d:e2:d2:5a:cd:3c:cd:
                    3f:e4:59:e9:53:e9:26:1a:da:df:48:d4:df:50:37:
                    b8:85:3b:5a:6b:19:94:3e:3b:c3:1b:c7:f2:b1:55:
                    f5:a2:88:80:c0:e4:2c:0a:e2:10:60:9e:81:d2:61:
                    67:5a:69:e5:47:88:df:f0:5c:24:1c:2c:a8:00:ef:
                    f9:29:74:b3:1a:53:7c:39:43:da:60:c2:13:b6:60:
                    d9:85:35:2e:c5:a5:ca:0e:61:a0:74:e5:d8:74:ef:
                    00:0c:13:69:73:1b:6e:19:69:db:4f:35:2c:dd:6f:
                    0c:f4:4a:67:45:7b:60:07:e4:8d:7a:11:f2:e2:75:
                    36:78:fe:7f:e3:a1:41:14:d6:04:e9:cd:2c:f7:12:
                    96:ee:56:1f:6c:3a:a8:e5:1c:7a:c0:28:73:5c:f0:
                    fe:55:99:13:6e:cb:e0:d3:fc:7d:5e:f1:f8:48:f1:
                    d1:f7:9c:ec:59:dd:05:27:ad:a2:d0:4e:c9:62:ab:
                    56:81:7f:36:e8:49:ae:5a:e6:67:7a:6d:52:31:6d:
                    41:62:1b:74:4e:f2:56:96:04:f8:0e:2e:7b:2a:da:
                    d7:92:f2:2b:c1:07:e4:ff:a1:ae:48:21:aa:66:d6:
                    82:1a:04:2e:40:28:51:82:9f:0d:90:3e:b7:55:c4:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:7B:DF:B6:8E:24:BD:E4:99:05:60:25:71:36:AF:BF:8D:9F:D1
            X509v3 Authority Key Identifier:
                keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:23:eb:15:cb:20:5b:47:bd:bf:ae:64:6b:63:76:1a:35:
         06:9a:ed:27:f5:5a:5d:a3:50:66:56:c6:3b:4a:f7:3d:90:c3:
         77:08:72:d3:7d:a2:75:c4:ff:11:fc:8a:0c:70:36:a6:14:22:
         41:84:86:61:66:23:bd:d7:e1:6f:15:90:ef:7b:37:b2:5c:39:
         34:d6:e7:f8:01:99:41:3c:36:05:e3:b2:ac:ed:24:f5:40:56:
         dd:ed:af:55:0f:6f:73:0b:82:1c:f0:ae:62:7f:0b:17:51:8f:
         96:35:2e:1b:e0:b7:b4:74:d2:2d:50:5f:d1:f6:35:38:a0:fd:
         63:5e:f9:b0:70:19:01:d2:e7:4e:2d:45:5b:fa:27:9d:08:61:
         d0:b2:03:8f:6c:cb:68:43:1f:12:ab:39:89:da:51:82:68:d0:
         5a:f9:98:c8:9a:c1:f4:a7:b7:74:ce:bf:99:df:16:ff:a1:f8:
         8d:65:45:b1:11:81:99:8e:7a:d1:2d:da:27:92:c7:98:46:76:
         3b:c5:ed:18:8a:85:13:44:d8:03:7f:3f:da:b5:8e:80:b7:a2:
         03:80:43:31:8c:50:3e:0c:a2:5b:99:01:bf:6c:3c:04:f4:77:
         91:0e:bc:19:d6:04:ad:48:0f:6e:f3:cc:52:34:1e:1e:3d:69:
         ab:c3:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:12:21 2025 by rpki-client