This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File:                     n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier:          G85F72bVVcl9OiAFWAtSrS+uCtdKh7sJAcFH6l78GxM=
Subject key identifier:   1F:13:94:D1:E1:05:72:C2:D8:98:8F:78:2C:6D:CF:66:72:BB:2B:18
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer:       /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial:       019B247629E0FEF25F88AB64ECBF890685F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number:          25
Signing time:             Tue 16 Dec 2025 00:01:22 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:22 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:22 +0000
Files and hashes:         1: UeQMQKBSHdroxIS0vXmTkkgb_kw.roa (hash: 3drND/9p9/h8FwC5YZRmAUwNKn5zQHLox5Z2I6On0f4=)
                          2: VMmg_hoECr2h5_VWWytxSyvcL-Q.roa (hash: SkKfiuZXr1b9jgYau6J5ZFLluNCuffm/Ryzfe71CDeo=)
                          3: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: A7UJq3HMNLjNYxT/yrxb0XKnKyxR6nuOTivawUsHCNg=)
                          4: yhhCzt4IpqhONpxIRsB9W6AXEGY.roa (hash: njnq+R46IxMluyP1lNXUl3Hmykg2ym4U9EP0GSKKu5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:29:e0:fe:f2:5f:88:ab:64:ec:bf:89:06:85:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
        Validity
            Not Before: Dec 16 00:01:22 2025 GMT
            Not After : Dec 17 00:01:22 2025 GMT
        Subject: CN=1f1394d1e10572c2d8988f782c6dcf6672bb2b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:d0:0f:2e:21:62:4e:6c:76:30:31:30:7a:
                    07:6d:1e:5d:2b:97:0f:ef:0b:27:28:f8:50:89:49:
                    9a:7e:92:38:b9:17:58:f6:1b:c0:d0:44:2c:d2:32:
                    0b:3b:01:e7:21:24:29:48:51:29:29:45:f1:88:bb:
                    d8:df:02:82:f3:e7:2c:07:8b:6d:cb:55:cb:20:87:
                    7c:a0:35:04:6b:6a:cd:53:2c:87:00:44:32:9a:87:
                    04:00:b6:9f:64:de:aa:2b:99:71:70:c7:8b:5c:b0:
                    cf:0f:8e:c5:ca:71:cb:ce:a7:f8:24:aa:fb:85:f3:
                    66:0c:90:84:a3:45:d9:66:93:4c:0c:bd:e5:b5:0d:
                    9d:e2:af:bc:b9:a7:6a:68:c3:dd:af:63:0e:61:2c:
                    4c:c7:e1:cc:ad:71:26:c0:50:da:a8:6a:fe:eb:9b:
                    77:7b:cd:75:0d:61:25:d6:9e:2b:4b:4e:b4:2a:f6:
                    84:d1:3e:09:12:a0:1c:7e:e4:fe:fe:ce:94:25:62:
                    63:93:b9:20:8b:8d:17:fe:2b:18:eb:3e:a2:3a:6d:
                    0f:cd:06:0f:0b:05:f4:e2:6d:d7:5f:85:97:e4:aa:
                    32:eb:0d:28:25:1e:88:71:70:42:72:e4:71:0e:90:
                    8e:66:78:75:49:63:73:77:d1:72:3c:8a:f9:ae:3b:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:94:D1:E1:05:72:C2:D8:98:8F:78:2C:6D:CF:66:72:BB:2B:18
            X509v3 Authority Key Identifier:
                keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4d:2b:89:3a:d6:02:95:10:63:0f:58:2c:f7:6e:ba:a4:11:
         9e:9e:47:26:47:36:49:ed:71:6e:7c:39:67:30:39:1e:8d:52:
         1b:25:26:96:eb:e6:88:0e:c1:2d:4d:04:82:44:4b:74:7e:26:
         69:1f:ac:a4:3e:6e:e5:93:2f:34:25:c3:7c:a9:4f:6d:03:0c:
         d1:44:16:1c:3d:53:2d:2c:91:97:18:42:f4:b5:a9:c5:ad:e0:
         a5:c7:ef:ee:ea:da:af:8b:f6:ab:9e:ad:d0:a7:51:23:3a:8e:
         3c:34:91:65:a2:0f:76:1a:5e:a5:de:d1:c3:09:d3:30:f5:9b:
         cb:32:14:5d:44:78:a0:c6:3b:d8:22:ee:96:02:b0:6f:1f:30:
         63:aa:93:67:97:d7:99:ee:98:84:df:e8:dc:84:76:27:e2:b5:
         c3:f1:96:c5:a9:9b:5f:56:02:43:d5:cf:13:be:7f:85:04:0c:
         49:6d:94:da:48:68:ab:e0:df:21:fd:51:12:cd:49:39:43:4a:
         bc:a3:82:57:6c:66:65:f3:ee:d0:71:37:92:ef:e5:e2:03:9a:
         c3:ee:d2:ec:0c:59:5a:9f:f4:58:51:26:ff:4a:be:48:9a:4b:
         5a:eb:93:7a:43:24:76:c9:1f:75:a7:bf:a3:d3:24:ba:e6:22:
         72:44:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:56:47 2025 by rpki-client