This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File:                     neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier:          G+6fa7hVF18wA4iYcjMiDe9HChmAy6z3qxta3KMbsPc=
Subject key identifier:   92:C8:21:DB:DD:C5:A7:61:FA:B5:1C:07:0B:34:65:3D:7B:89:6C:94
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       019AABDDE7B72C9F15FA18B409720EBAE66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number:          0701
Signing time:             Sat 22 Nov 2025 14:00:37 +0000
Manifest this update:     Sat 22 Nov 2025 14:00:37 +0000
Manifest next update:     Sun 23 Nov 2025 14:00:37 +0000
Files and hashes:         1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
                          2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
                          3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: E9n/YpzT1EkBcXxvGd0VWACcIye6sufe3AsMeSmKszg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ab:dd:e7:b7:2c:9f:15:fa:18:b4:09:72:0e:ba:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: Nov 22 14:00:37 2025 GMT
            Not After : Nov 23 14:00:37 2025 GMT
        Subject: CN=92c821dbddc5a761fab51c070b34653d7b896c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:f9:fd:39:9f:c4:51:36:a6:9c:cb:3d:b5:
                    3e:ca:84:d5:5c:05:08:4c:c4:eb:20:12:7f:5f:cd:
                    4e:c0:28:7b:71:85:e5:b4:32:bb:04:ed:8d:72:ad:
                    b4:41:57:1d:da:61:f2:11:f9:25:39:10:86:62:19:
                    d4:c6:e1:b5:a0:d9:63:67:db:92:68:f1:d6:41:4b:
                    aa:30:dd:19:32:32:e0:c5:36:28:fd:ba:75:21:3a:
                    b8:aa:48:0f:77:28:4e:a8:44:6c:1a:28:e7:06:be:
                    37:28:9a:fe:78:0c:c2:3c:37:5a:f7:8c:a3:4a:2b:
                    d8:83:00:6f:fe:54:4f:ac:8c:d4:ca:43:11:37:d7:
                    d3:34:26:8d:3b:15:32:b5:7f:29:94:6b:e6:73:fd:
                    d3:f1:f6:21:8e:44:eb:61:0c:20:f6:d0:a4:c1:d8:
                    68:c6:42:f5:38:be:29:5a:9d:a5:ac:6c:57:b4:8b:
                    05:4b:be:1e:44:02:e1:b4:82:8e:2d:7e:0f:99:f7:
                    40:d0:b5:36:e3:e1:0a:7f:ca:b5:5b:50:40:8c:96:
                    6d:f0:f9:59:4b:0e:96:cc:b3:3f:f8:ab:75:fd:cf:
                    94:dd:67:c7:42:13:b3:c6:7f:01:ba:70:52:2a:2c:
                    34:7e:0c:fc:64:0d:e3:39:a9:d0:9c:d2:52:f6:76:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:21:DB:DD:C5:A7:61:FA:B5:1C:07:0B:34:65:3D:7B:89:6C:94
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:01:04:fc:79:29:27:95:c4:82:6f:45:06:78:e7:e2:d4:
         6a:a2:75:b9:98:23:71:a1:52:8f:9c:56:c3:02:7a:7b:7b:30:
         2d:b2:24:e3:f8:64:24:1c:0a:f8:17:8d:41:26:bc:78:27:18:
         15:23:02:11:82:39:52:e3:3b:be:6d:ab:e5:48:3f:74:00:26:
         97:7e:83:cb:f9:04:25:79:ba:db:ef:bd:bc:cd:6a:b8:f4:c4:
         76:dc:8d:98:f7:78:e6:f3:81:11:a5:de:be:d8:a0:70:e2:71:
         b5:b7:66:fc:d6:13:b7:7d:5c:8a:c3:38:62:3e:87:96:b6:83:
         67:77:aa:c5:08:bf:be:9d:41:a7:f0:88:93:12:20:7c:4b:30:
         34:29:e3:c2:2b:30:2f:e9:4f:d5:1f:8b:2c:0d:be:a4:a9:b8:
         4a:19:19:b6:09:05:0d:aa:39:54:6a:19:e6:e4:0e:e1:2b:88:
         98:b4:f2:72:f1:73:b9:51:9b:6e:b5:be:47:f1:1f:c4:c5:bc:
         3d:a1:64:cb:5f:02:16:7f:41:44:56:e4:b7:e2:9f:23:bd:68:
         8c:3f:ad:9c:1b:b6:24:4a:91:cf:43:1f:b5:7e:9e:b6:a6:bb:
         43:7a:c3:0a:aa:65:33:3e:c2:81:39:30:e9:81:e8:94:68:d4:
         18:29:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:49:26 2025 by rpki-client