This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
File:                     TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json)
Hash identifier:          7LIstlRjKR3dAbWjTJWo1FLtZZDjjHLwYhhh4/dEMnk=
Subject key identifier:   0D:DF:0D:20:F1:C5:EE:82:DC:2F:6F:80:78:68:26:BD:92:10:0E:D3
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Certificate issuer:       /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial:       019B0E928EC2654AF9D5B0A46E123700CFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
Manifest number:          10AC
Signing time:             Thu 11 Dec 2025 18:00:44 +0000
Manifest this update:     Thu 11 Dec 2025 18:00:44 +0000
Manifest next update:     Fri 12 Dec 2025 18:00:44 +0000
Files and hashes:         1: A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa (hash: LqION540Zg0mnXlhYgbOPsJtgA4nsXptBIy0jMQ2+yc=)
                          2: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: 3Byk4grNQLjKH46rhIbpmsKzkCgZCJRTQiolExLS6kI=)
                          3: h0ikqrJ3SuzqEepqLjnvsNWJNVQ.roa (hash: RvDiiQJF7vKX50IA4ffr+9+bGA5/Q5Ynq2tViwpnB40=)
                          4: n1aoovYMZxSs0WefrRJiB3jdudI.roa (hash: q2PjweCwbyJvPPBstb2/ErFFOd9PN++7msnJLhK1PxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:92:8e:c2:65:4a:f9:d5:b0:a4:6e:12:37:00:cf:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
        Validity
            Not Before: Dec 11 18:00:44 2025 GMT
            Not After : Dec 12 18:00:44 2025 GMT
        Subject: CN=0ddf0d20f1c5ee82dc2f6f80786826bd92100ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:c0:72:78:bb:6c:51:ac:f5:ae:3b:3d:97:
                    25:2b:68:22:65:d4:f8:76:5e:11:51:fc:7b:13:8d:
                    cd:78:5b:ef:00:34:00:73:2e:8b:0d:d7:94:17:df:
                    6e:5f:3c:a8:a7:fa:b4:5c:74:51:3d:2a:64:76:aa:
                    e8:86:95:e0:86:d4:0e:bb:e9:eb:10:b0:a4:0f:a0:
                    3c:21:d3:f0:12:43:d6:56:a2:8f:56:6d:5f:30:25:
                    eb:a3:e0:51:a9:d0:a6:3a:32:fd:8f:1a:4f:b0:1e:
                    e0:90:e0:c1:20:92:ea:ca:de:2f:d3:ca:84:6d:94:
                    c4:17:91:05:31:4a:c2:9a:3f:7a:e9:9c:b3:b9:58:
                    5c:93:35:0a:9e:76:13:b6:4a:7d:4a:e1:32:b9:cd:
                    2f:46:8c:b3:8e:54:fc:4d:34:0d:c1:25:fd:b1:e8:
                    9f:70:45:a4:b3:e2:c1:0d:b2:24:e7:72:38:48:83:
                    98:29:d7:7b:7b:03:5c:a6:88:db:68:76:e9:2d:7c:
                    f4:90:52:ee:e9:ac:5c:74:c1:03:8e:cd:16:5b:aa:
                    13:7e:78:5d:f7:fe:49:99:b9:07:02:28:e1:7e:34:
                    3d:b4:fe:7e:26:58:5e:06:df:eb:76:9c:93:74:48:
                    06:ff:6c:c4:fa:b5:b5:5b:41:53:ce:f5:d0:2b:fb:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DF:0D:20:F1:C5:EE:82:DC:2F:6F:80:78:68:26:BD:92:10:0E:D3
            X509v3 Authority Key Identifier:
                keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:21:11:a6:7e:ed:90:b4:b9:52:4c:f6:ac:5b:4d:81:a4:
         ed:cf:93:11:1c:d5:5f:b5:f6:02:6c:06:4a:20:b1:35:d9:fe:
         bd:95:7d:b3:d6:4f:92:4a:c5:8a:d4:3b:99:f4:34:9e:ce:13:
         74:ee:b2:3a:f8:b1:8c:91:be:ff:59:34:33:f8:35:e0:a3:c7:
         5d:0c:26:a8:a1:6e:43:76:78:40:d0:39:6f:a3:12:66:7f:e1:
         e3:14:0a:7a:7f:b5:2c:bd:bf:1d:50:f0:73:0e:9e:5a:f8:df:
         1e:f1:41:5d:d8:94:31:e6:ee:74:1c:27:06:d5:0e:b4:48:d7:
         18:96:3d:b7:c1:20:59:9a:bc:0a:83:f3:17:c0:99:a2:4b:37:
         3d:a6:52:a2:fc:50:f5:03:17:6d:63:ef:3e:4a:83:10:9e:2c:
         05:77:e7:ce:36:29:18:fc:df:99:e2:bb:54:56:3e:9d:b2:59:
         82:ef:a7:b5:2d:58:58:3c:97:ce:84:be:05:86:8f:59:88:04:
         12:c7:97:69:85:46:ec:e8:c0:ad:8a:ab:9f:d2:fd:9a:f8:74:
         1f:a5:dc:05:0e:f8:c2:c0:e5:61:80:2c:a6:6a:83:63:6b:2b:
         11:ba:3f:76:08:42:9c:58:d5:73:08:60:cd:f8:49:cb:19:72:
         2d:27:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:40:17 2025 by rpki-client