This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File:                     AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier:          mTiNI93ZyYqMlSxiduwDqcAgaEOTtCvglyP/Eqm8/n4=
Subject key identifier:   3C:2A:B9:82:1A:D8:24:56:88:B2:0C:6B:99:12:B1:AF:A3:C1:8A:2C
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer:       /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial:       019B1EE133D4775E81B399902BB38E7FA3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number:          07CB
Signing time:             Sun 14 Dec 2025 22:00:33 +0000
Manifest this update:     Sun 14 Dec 2025 22:00:33 +0000
Manifest next update:     Mon 15 Dec 2025 22:00:33 +0000
Files and hashes:         1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: hC08uNGSWCejY5WYFGuVnw9BxnsgR4MinzcXL14VqUw=)
                          2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
                          3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:e1:33:d4:77:5e:81:b3:99:90:2b:b3:8e:7f:a3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
        Validity
            Not Before: Dec 14 22:00:33 2025 GMT
            Not After : Dec 15 22:00:33 2025 GMT
        Subject: CN=3c2ab9821ad8245688b20c6b9912b1afa3c18a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:a2:a3:83:9e:e1:4e:1e:49:86:3d:42:aa:
                    02:e8:cb:7d:98:5a:4c:52:44:99:51:ed:20:2a:95:
                    fb:3b:27:18:d3:d7:21:db:46:93:03:c6:be:6c:4c:
                    29:a8:75:27:6c:2a:1e:a8:fd:ce:6d:0b:4e:ef:51:
                    46:59:66:02:32:b9:0b:af:40:5b:77:eb:f6:20:47:
                    b4:67:a5:f7:ac:66:ec:85:66:5d:b6:9e:ff:89:c3:
                    f7:61:36:34:19:d9:3d:35:f8:1f:23:0d:f2:38:d3:
                    c3:73:56:5e:06:af:7a:fc:1c:b3:62:af:c1:a7:ab:
                    33:c8:75:c2:cb:4f:65:1d:65:9b:95:0c:95:04:55:
                    e4:f5:90:02:e3:45:22:5d:78:03:6d:5b:9c:c9:9c:
                    d9:4f:d5:9d:d4:e4:74:12:dd:90:a7:db:de:38:14:
                    79:9a:97:28:f4:ae:06:e9:9d:53:b7:7f:c4:30:c7:
                    e2:82:98:fa:16:f6:48:56:97:cc:31:8b:17:08:de:
                    7a:c4:58:ef:dd:e4:60:53:aa:fd:4e:64:7c:d7:6c:
                    09:25:40:bb:eb:c7:b0:46:e5:21:cf:ac:3e:f5:b5:
                    42:60:72:e4:96:48:25:ad:41:79:de:d7:6c:d2:51:
                    11:8a:22:05:0c:6c:03:04:b3:02:3f:b0:c4:c6:9b:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:B9:82:1A:D8:24:56:88:B2:0C:6B:99:12:B1:AF:A3:C1:8A:2C
            X509v3 Authority Key Identifier:
                keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:20:e6:75:0f:42:ec:61:9e:9a:ea:ff:44:f6:ed:5b:d6:c8:
         ab:98:70:91:0a:10:e1:31:7c:7d:c5:69:68:43:e7:a0:3a:d2:
         ac:0c:7a:c7:2c:6d:a1:6a:fd:3c:90:96:96:4f:3d:c7:70:73:
         d4:3b:e6:d3:d5:dc:be:72:11:53:9e:53:83:4c:ee:43:97:59:
         16:50:de:15:fa:9a:4c:0a:ac:c2:49:ac:a2:06:c1:1d:8b:bb:
         b8:0e:53:29:3b:20:87:4f:75:0b:21:29:bd:22:83:9b:ce:88:
         ca:17:cb:80:5e:d2:92:34:6f:f4:60:6e:84:dd:c1:80:e1:6d:
         2c:32:9f:1a:1b:03:ec:b0:df:12:07:a2:5f:cf:db:64:d7:ef:
         ac:7a:ac:37:75:95:87:94:6e:73:5f:da:25:bf:5a:a4:67:55:
         cb:56:c9:a5:36:d2:b9:6c:17:5f:44:23:e0:e4:92:d7:58:c9:
         e5:ff:f3:f1:5b:ad:2b:e5:f9:e8:92:9e:be:ba:a8:fa:ad:0c:
         1c:be:1a:29:ac:2e:f4:55:45:14:d3:58:e6:a2:4c:66:a0:92:
         54:14:dd:16:46:70:31:a5:8b:e6:6d:15:0e:a3:cf:fa:4c:bd:
         06:c3:b3:d7:f4:9a:a1:0f:80:2b:6d:a9:ec:9b:bc:7a:4b:e5:
         6d:54:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 00:11:55 2025 by rpki-client