This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File:                     f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier:          iOV5D8qFoM2Zm5OHLjiZ57gyyIMOEDM+3Yb2LHl8KD4=
Subject key identifier:   36:BD:C6:62:92:D8:13:B0:06:9D:F0:7F:31:CB:24:BF:C9:3C:4F:4F
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer:       /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial:       019B2E1DC01865901473E363A3F38EC53D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number:          0DEC
Signing time:             Wed 17 Dec 2025 21:01:00 +0000
Manifest this update:     Wed 17 Dec 2025 21:01:00 +0000
Manifest next update:     Thu 18 Dec 2025 21:01:00 +0000
Files and hashes:         1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
                          2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
                          3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: ZaI1BjqvpXEg8ZZXK4oxTCfKRwX0hOzxH4gPSrZbXsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:c0:18:65:90:14:73:e3:63:a3:f3:8e:c5:3d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
        Validity
            Not Before: Dec 17 21:01:00 2025 GMT
            Not After : Dec 18 21:01:00 2025 GMT
        Subject: CN=36bdc66292d813b0069df07f31cb24bfc93c4f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:18:ca:06:64:54:46:80:2a:cb:b2:a0:41:
                    23:bf:98:e9:14:37:b2:e9:1e:9c:dc:8f:cc:7f:0f:
                    02:cc:3c:6d:36:33:b4:5f:ab:7a:22:12:a3:a3:4a:
                    e2:bf:40:37:e5:61:4b:2a:86:1e:7a:af:8d:15:e2:
                    82:85:92:6d:05:d6:c2:1a:5a:cb:5a:d8:02:bd:92:
                    9b:33:52:06:2b:3d:05:21:65:2c:52:97:55:02:06:
                    78:dc:a8:db:97:03:83:14:da:26:89:c6:a7:26:5c:
                    4d:d4:6a:8c:7a:b9:7e:77:f9:0a:2c:f7:a2:18:18:
                    fa:77:c1:19:2d:71:1e:02:38:70:97:80:30:40:14:
                    bd:27:8a:9b:78:e6:2d:10:53:5c:ce:61:b5:35:16:
                    db:8c:b8:fc:85:c7:19:ec:31:70:a3:9a:ac:71:20:
                    1d:d2:97:9a:02:d6:b2:2b:31:73:f3:fc:6f:0c:87:
                    1d:f1:1f:f9:09:5a:fc:2d:d3:88:36:f0:33:8b:2b:
                    14:50:b7:a7:3c:7f:6d:24:56:6a:b5:22:a2:f1:1e:
                    12:8b:42:38:e3:bd:b7:b6:18:82:17:56:84:ae:61:
                    88:ba:fa:8f:f1:c4:14:ae:b0:28:7d:a4:70:d3:aa:
                    5c:83:a6:00:7f:8f:f7:5a:07:bc:8e:4e:1f:4e:aa:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BD:C6:62:92:D8:13:B0:06:9D:F0:7F:31:CB:24:BF:C9:3C:4F:4F
            X509v3 Authority Key Identifier:
                keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:39:23:af:93:92:b5:1b:33:5d:56:89:0a:6f:3d:c2:6a:d5:
         33:f0:28:f7:72:6c:51:48:5b:7b:d4:72:99:95:42:ba:9f:c0:
         a5:cb:2a:4d:c5:6d:45:a0:b7:21:c8:57:9f:6c:76:43:2a:a6:
         85:54:da:cf:f0:6b:f4:bc:70:a2:0c:76:f4:3d:ef:1e:16:61:
         96:2f:ea:7c:72:7f:63:cd:dc:6f:a7:6b:a1:7c:0f:a9:e7:35:
         fd:77:c4:3c:07:e2:97:3e:38:a9:41:8d:23:90:b4:cf:b4:ce:
         dc:c5:b4:6f:50:83:2d:e5:e8:1b:f9:62:f7:75:f3:ea:60:7c:
         6d:f9:52:84:e3:15:b0:8e:c9:06:b2:ce:bb:56:fc:78:df:b1:
         4a:58:a9:00:66:05:d4:60:ff:1d:13:47:bf:6a:4e:da:d3:c5:
         d0:31:f1:01:ea:4a:d0:8d:a3:fb:48:bf:d0:ad:e1:5a:a7:14:
         c9:af:9c:05:ab:52:d2:f5:8c:6d:8a:4b:aa:c3:86:ab:93:d7:
         0b:a8:80:e6:0b:3d:46:6a:d0:47:2b:88:4f:cc:66:5a:bd:9a:
         39:b6:fc:6b:19:4d:a7:ff:fb:6e:18:9f:8f:e8:d1:cf:85:f4:
         85:c7:4b:a0:db:c5:d6:89:51:0a:a5:c4:69:bc:63:b0:a8:8f:
         ce:32:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 03:45:02 2025 by rpki-client