This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          h5OfAozbVa+Fa8DF/vdQDDU7O3ur5EfIpbK5aP0nFyM=
Subject key identifier:   87:E2:15:AE:43:CD:A1:BE:E3:F8:85:EA:C0:0B:C1:30:BF:92:1A:C9
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       019B0E5B84CBB4AA8BB4BBC8C8A40CFAB73E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          1106
Signing time:             Thu 11 Dec 2025 17:00:37 +0000
Manifest this update:     Thu 11 Dec 2025 17:00:37 +0000
Manifest next update:     Fri 12 Dec 2025 17:00:37 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: nAx/28B9MHrFfvf40x+hgrxGoiLNdTRzCqdSU4NQ0U0=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:5b:84:cb:b4:aa:8b:b4:bb:c8:c8:a4:0c:fa:b7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Dec 11 17:00:37 2025 GMT
            Not After : Dec 12 17:00:37 2025 GMT
        Subject: CN=87e215ae43cda1bee3f885eac00bc130bf921ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:56:ac:3a:61:cf:54:de:f1:8b:64:81:7c:
                    09:64:a4:c5:cc:31:48:f4:70:28:ec:a8:6c:53:c2:
                    b0:42:f0:f1:17:85:39:e4:43:ed:d0:8c:af:63:74:
                    3b:f0:5d:8f:a6:9f:b0:18:a2:92:54:cd:fe:fe:f2:
                    e0:c8:97:96:69:4f:46:11:d3:ac:6c:76:88:8e:ab:
                    98:5c:23:06:8f:e9:14:64:f9:40:e3:0a:87:4e:50:
                    64:45:1f:d9:d6:39:20:25:bb:ab:8e:1a:66:45:09:
                    71:6a:ea:5c:c7:0e:9a:94:e0:9b:af:0a:5b:7c:a6:
                    31:03:c8:55:a0:70:cb:b4:a8:12:08:8f:00:21:fd:
                    b1:bf:4b:c8:c2:a7:e2:e4:c5:a4:80:29:49:93:2c:
                    54:ea:7f:1a:f4:0c:bd:8c:90:6d:ae:b1:89:81:56:
                    6e:e8:07:64:1b:f5:46:94:ad:79:e8:0f:54:7a:7f:
                    f8:15:3c:29:a3:d1:28:16:96:b7:09:7b:50:fe:9a:
                    39:3a:cc:c3:31:06:a7:aa:70:e3:5b:f8:fa:66:b4:
                    66:72:b7:bb:67:14:5f:e5:aa:68:39:c7:33:16:ad:
                    07:73:f4:e0:79:9e:41:b5:a2:b0:46:22:af:53:78:
                    4d:d8:f8:41:d7:2a:35:31:63:a5:68:3b:fb:28:a7:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:15:AE:43:CD:A1:BE:E3:F8:85:EA:C0:0B:C1:30:BF:92:1A:C9
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:8a:1f:82:58:b5:01:f4:bc:e7:ce:7d:a1:75:74:61:12:
         88:da:14:db:d0:13:e9:29:24:b3:10:ea:bc:09:b3:02:f3:c2:
         27:6a:98:b2:38:69:b9:0f:bb:5d:ec:48:57:98:e7:f6:98:f1:
         41:24:ac:ff:af:2b:d3:e9:2d:65:b0:43:f2:87:22:91:2a:b1:
         1b:9d:bb:38:47:42:5b:75:81:04:c7:f5:0c:37:c4:02:fa:1e:
         25:3f:1d:f3:6a:ce:ee:0e:82:ff:3e:5e:fc:2f:fc:b5:32:02:
         13:70:2b:3a:df:de:d4:97:99:12:02:54:9c:dd:ab:d6:68:4a:
         3e:0b:51:8e:7f:19:cf:39:61:24:ff:d2:37:cb:b4:5f:cb:9f:
         9e:6f:6e:1d:c3:1f:74:e8:96:30:37:de:71:48:04:ad:a9:28:
         f4:e2:f0:3e:8b:22:05:5e:a7:a0:99:3d:fd:d5:1b:8f:d2:78:
         00:22:b6:1b:3f:ba:6b:4b:dd:57:07:4e:2b:e4:70:df:06:73:
         65:87:b1:17:64:1b:94:0f:8d:7d:b0:27:c9:f0:32:e0:a8:d7:
         06:85:cd:9d:d4:21:10:c2:55:be:2c:d8:6c:df:e9:2b:d7:8e:
         33:91:d3:13:e3:dd:e2:7e:2b:04:e2:80:38:db:89:2b:2e:e2:
         cc:ab:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:26:15 2025 by rpki-client