This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          WZM8dn6Mae+98y23O0rp4OR4cDk3eoA+AUWHDmv5dqY=
Subject key identifier:   3A:C1:14:8C:83:F6:8C:37:53:0A:79:EC:5F:2C:B8:D8:9E:8F:59:68
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019B48B983B8FB9A7FC1EFE79D7F1428D6F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          062A
Signing time:             Tue 23 Dec 2025 01:01:15 +0000
Manifest this update:     Tue 23 Dec 2025 01:01:15 +0000
Manifest next update:     Wed 24 Dec 2025 01:01:15 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: Vv6tSAl9cL2JaYf8ragtlAa4SU7ldkGwCPZi5F6obog=)
                          2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:48:b9:83:b8:fb:9a:7f:c1:ef:e7:9d:7f:14:28:d6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Dec 23 01:01:15 2025 GMT
            Not After : Dec 24 01:01:15 2025 GMT
        Subject: CN=3ac1148c83f68c37530a79ec5f2cb8d89e8f5968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:13:b5:a7:2d:6b:a8:2b:69:1b:dc:f4:f3:
                    7e:1d:e6:79:95:f0:0b:0a:54:1c:bb:cb:ba:fe:c7:
                    3f:59:2a:59:6f:0d:76:10:48:70:6d:8b:6e:e8:16:
                    13:a7:ac:a2:c1:9c:a1:26:4c:64:0c:74:77:bb:e8:
                    90:67:cf:4d:33:1c:fd:1f:1f:35:a9:65:79:0b:7b:
                    a5:9a:fe:c8:e7:50:0a:3c:0d:e4:f4:da:7e:99:93:
                    d0:39:6e:ec:bd:7b:66:5a:d2:35:df:a0:0f:19:a6:
                    e6:59:5a:71:91:b2:08:71:74:bc:c8:b3:b7:a4:a7:
                    c3:74:58:29:a3:3f:c5:2c:22:7c:c4:7a:01:49:eb:
                    8e:22:50:28:3f:0e:24:d4:9a:1b:77:03:e7:60:67:
                    19:7c:ac:aa:80:dc:fd:05:16:60:67:56:5f:2f:c6:
                    16:6a:83:92:55:6b:0c:22:fe:f4:e0:c4:64:47:d7:
                    f9:b2:9c:af:4d:8c:5d:b5:f5:f3:b1:90:0a:52:fc:
                    8a:f4:5d:bd:3a:21:3f:0b:c0:70:38:a5:7a:7d:e8:
                    e5:0d:68:21:41:5b:b2:0e:81:6a:56:66:13:02:88:
                    82:b4:ef:03:67:3b:ff:a3:9f:9f:bc:ce:69:91:af:
                    9c:c6:1e:7f:ef:b3:26:d3:f1:df:59:8b:3b:fe:7a:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C1:14:8C:83:F6:8C:37:53:0A:79:EC:5F:2C:B8:D8:9E:8F:59:68
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:a5:2c:24:ca:2e:f7:4f:96:4f:96:d2:4c:ca:07:7b:9c:
         22:0e:32:d1:2f:cc:73:6a:42:dc:30:4d:79:51:c0:1d:73:30:
         0c:f3:50:bf:23:a0:9e:3c:d1:74:78:7a:65:1b:00:9c:26:5d:
         b2:d1:67:f2:c6:89:cf:c6:a6:17:33:e8:e9:63:9f:6a:bd:a9:
         9a:6a:1e:01:fa:02:b7:92:67:4d:93:fa:fa:53:61:d4:d3:70:
         70:c8:2a:d1:44:1b:f8:2f:20:48:bf:b0:d4:dc:f8:e8:8d:64:
         66:62:2c:32:77:f3:48:49:10:1f:9a:de:64:0a:82:34:84:16:
         aa:06:c3:1e:f8:5a:24:3e:92:ed:db:97:65:4c:96:a8:e6:f9:
         bc:e3:45:7d:fd:64:b1:37:04:9e:5a:a4:ec:dc:f9:60:c3:6a:
         44:46:de:4f:7d:2f:bd:49:cd:f4:fa:cb:d2:b5:65:1f:67:9d:
         ba:68:3d:77:1a:44:3d:ea:9f:7a:d9:72:78:e8:52:49:30:5f:
         3b:bd:77:b9:67:06:0c:db:4d:31:66:2a:8e:fd:09:f5:5b:14:
         f6:b2:07:a0:85:b3:0f:57:2f:8b:cb:4f:14:18:94:1b:74:cf:
         d9:51:0f:70:3d:78:a3:8f:f2:ae:e0:79:d0:23:e7:a8:3e:e6:
         24:36:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:15:16 2025 by rpki-client