This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          I8+n67wWwUP9/HFaWWp8HxJz0TAjwoh/Ukm56Oc6Z5s=
Subject key identifier:   78:15:C0:55:E6:1C:AB:D9:98:CE:78:CB:06:3F:A9:6C:B0:5A:C8:17
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       019B126FE459382FA6F10742730158A61A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          0247
Signing time:             Fri 12 Dec 2025 12:01:21 +0000
Manifest this update:     Fri 12 Dec 2025 12:01:21 +0000
Manifest next update:     Sat 13 Dec 2025 12:01:21 +0000
Files and hashes:         1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: i6gBi/aCIID8FKn6s7L1SP9Eb+rE54Ylzw2jDkFST5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:6f:e4:59:38:2f:a6:f1:07:42:73:01:58:a6:1a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Dec 12 12:01:21 2025 GMT
            Not After : Dec 13 12:01:21 2025 GMT
        Subject: CN=7815c055e61cabd998ce78cb063fa96cb05ac817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:f9:78:4a:b8:76:46:17:02:fe:30:82:46:
                    06:f9:ef:35:23:21:6b:35:01:a7:37:95:5f:ee:a2:
                    66:1b:a3:71:6c:74:c8:76:b4:4c:b0:33:c5:9f:02:
                    43:28:84:be:26:63:67:77:11:57:69:64:8d:29:d3:
                    40:3f:a6:f3:0d:1c:0a:7a:2f:78:4f:1e:1a:c6:41:
                    7b:48:0d:d0:c8:54:55:7d:2b:73:19:ed:6f:af:6b:
                    0e:bc:fb:75:39:79:2f:9d:a3:04:e6:37:51:69:70:
                    bc:9c:43:a9:94:cb:ae:80:86:ee:76:9d:9e:6c:c0:
                    b7:74:74:5b:e2:4b:78:bd:fb:de:4c:70:c9:33:80:
                    8b:b6:f2:15:2d:c8:35:dd:73:98:ed:af:7a:ce:a1:
                    4a:d4:1d:c6:f4:27:b9:7b:54:24:b1:94:e3:57:eb:
                    16:a4:e0:c3:1e:23:7f:53:b8:c2:e3:46:4c:4a:98:
                    01:3c:a3:46:13:78:c6:5f:04:65:4d:12:09:e8:0a:
                    a2:66:3a:24:a0:43:85:e8:f9:eb:c0:6c:47:a6:11:
                    89:66:3a:be:6e:b4:bb:55:79:a4:19:70:9c:c6:8b:
                    5b:e6:43:d4:46:d4:0d:14:5b:9b:df:2c:04:0b:08:
                    01:60:6d:81:18:a6:b1:d0:67:b6:99:6d:8f:67:24:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:C0:55:E6:1C:AB:D9:98:CE:78:CB:06:3F:A9:6C:B0:5A:C8:17
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:f7:bf:d2:70:71:8b:d2:e6:21:cd:3f:0c:0e:db:c1:b4:
         59:2a:cc:e2:d2:08:3e:56:47:79:1b:30:89:7c:2f:d5:2a:d1:
         8d:83:4b:e7:27:3c:17:e6:a1:a4:04:20:c2:73:8a:44:f0:8c:
         37:7c:03:90:0b:16:17:42:2e:0d:d9:7b:c7:11:5a:40:ea:12:
         db:d1:12:9b:19:b7:cd:ec:d4:4b:cc:09:94:cf:fd:52:9b:f8:
         87:29:4d:77:11:70:6b:29:14:82:1d:6f:08:55:fc:22:37:ae:
         5d:3b:bb:1d:2c:c3:76:08:df:9a:21:a7:90:f3:41:c5:37:1e:
         de:58:89:be:fe:0a:d5:f2:ae:9a:0f:13:da:0e:52:14:c2:a8:
         90:55:0f:5b:f5:63:99:f2:09:d0:4b:e3:57:6c:ed:cd:de:f9:
         ad:48:49:33:b1:a3:25:21:d6:d8:e8:b0:28:b4:6e:7e:16:62:
         8d:f0:3a:d8:0a:c1:85:03:05:0d:82:09:41:51:43:22:1f:22:
         a4:fd:0e:d7:af:58:2f:4c:77:e0:67:4a:08:5c:73:72:62:5c:
         11:3c:c8:51:8e:3c:43:ea:f0:17:93:69:10:fc:76:4f:e2:a3:
         56:12:67:1d:19:88:77:7d:83:c9:d5:17:7f:b6:83:5d:d3:88:
         7c:e1:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 18:49:38 2025 by rpki-client