This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File:                     v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier:          7SIAT0zGrBByyZUT/uLXiBCyCC4jdORn3WQJtUxrk5M=
Subject key identifier:   A6:C7:AE:BC:31:10:1A:E6:5C:4C:08:1C:47:AF:DB:6D:DD:6D:84:CB
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer:       /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial:       019B1BAA8CCBB0EC811F2ADC236EFF108790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number:          12FB
Signing time:             Sun 14 Dec 2025 07:02:00 +0000
Manifest this update:     Sun 14 Dec 2025 07:02:00 +0000
Manifest next update:     Mon 15 Dec 2025 07:02:00 +0000
Files and hashes:         1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
                          2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: RZOcvbkZEn9BGsSuQNxVYu3uwBto75SQd+PwrcBYgac=)
                          3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:aa:8c:cb:b0:ec:81:1f:2a:dc:23:6e:ff:10:87:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
        Validity
            Not Before: Dec 14 07:02:00 2025 GMT
            Not After : Dec 15 07:02:00 2025 GMT
        Subject: CN=a6c7aebc31101ae65c4c081c47afdb6ddd6d84cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:e7:a3:a0:53:59:05:c5:0c:c7:67:b0:cd:
                    b7:bf:7d:42:3a:0c:92:40:8e:21:07:45:fd:6c:61:
                    5e:bb:14:a8:f2:8e:ca:4e:87:fe:e7:38:dc:9d:f2:
                    6c:93:9f:96:88:8f:7b:38:20:85:da:b1:af:57:a2:
                    3f:fb:11:10:56:7b:55:e7:27:b0:53:7e:19:f0:56:
                    32:6c:00:d8:cf:13:e0:3b:3c:9d:7d:b6:27:46:ba:
                    8b:15:03:ee:5f:d7:a4:8e:bf:fb:58:3a:1b:a9:4e:
                    dd:05:d3:72:e1:21:1a:3c:8c:e3:ed:ba:f5:3f:e2:
                    9f:c8:10:8a:ef:79:8c:1f:f3:10:ab:39:bc:0c:cd:
                    2e:a8:17:69:9d:e7:4c:2c:77:b7:be:21:0f:a1:69:
                    7f:1a:64:c3:7a:63:f8:14:89:aa:a9:68:cb:85:e2:
                    f1:fc:83:0e:95:6f:9d:6a:76:63:c0:2e:81:0a:be:
                    ed:32:55:4a:9f:0b:65:b2:a6:f0:b3:b9:9b:6c:9a:
                    8b:8c:5a:92:bf:78:84:c5:78:c0:27:e6:27:3c:2d:
                    38:80:8a:52:dc:f0:c2:3a:d7:2b:69:68:b9:08:e5:
                    52:76:97:3a:5e:86:96:87:9e:b1:1d:b6:6e:4d:44:
                    4a:71:c3:4c:0f:fe:ae:67:35:36:fd:3b:7a:5c:df:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:AE:BC:31:10:1A:E6:5C:4C:08:1C:47:AF:DB:6D:DD:6D:84:CB
            X509v3 Authority Key Identifier:
                keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:32:8c:3b:be:f2:42:66:27:4d:84:63:59:9a:16:fe:f6:4f:
         2a:cd:b0:99:0d:9e:e7:c1:e6:0e:f3:a7:74:c5:d6:75:39:67:
         70:07:d5:44:16:99:f6:0d:4a:f3:3c:55:2d:a5:eb:43:70:48:
         9e:11:0d:ec:21:56:44:0a:79:10:95:ae:88:22:5f:2a:f5:79:
         d9:89:41:f1:cb:f3:ee:21:54:ac:06:72:a1:09:d2:ca:1d:06:
         07:69:d4:8a:eb:10:81:ba:aa:32:ca:1e:a2:28:b9:8f:20:c4:
         3c:b5:d3:1c:40:a0:84:eb:f6:c9:14:d4:4a:fb:a2:cd:75:61:
         7c:78:c7:5c:b2:fe:f0:f6:d0:4f:23:54:48:99:d7:0e:e0:a3:
         1d:40:e9:e3:16:d1:a3:b0:23:06:5e:cd:94:f9:51:ee:ec:0c:
         b8:a1:9b:59:12:eb:d3:fb:2c:55:83:61:bf:91:74:e0:51:93:
         07:5d:ad:90:53:5c:50:bd:e8:53:fd:0f:27:b3:a7:50:9f:f9:
         5b:d7:34:96:09:8c:5b:97:b6:34:bf:db:d7:a1:d5:c3:fc:d3:
         8e:a6:c8:31:73:f2:36:0b:f0:4c:33:15:1e:52:54:4d:04:9f:
         b0:d6:b7:f3:87:49:7d:96:51:46:00:09:7d:a1:26:54:88:b6:
         0b:78:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:04:58 2025 by rpki-client