This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
File:                     C-vO5NIzea7YGuz_x6dCs1rN3bM.mft (raw, json)
Hash identifier:          ixcGWqxPF/Z5H1NS8grpyQYuLlyHuuuYUH2Jz/5GylE=
Subject key identifier:   0F:9F:24:E4:C9:D3:06:29:73:4B:CB:5C:35:BA:87:16:8D:52:BC:69
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Certificate issuer:       /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial:       019B12701EAD11665BEF2B6A3ED6458E668C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
Manifest number:          073E
Signing time:             Fri 12 Dec 2025 12:01:36 +0000
Manifest this update:     Fri 12 Dec 2025 12:01:36 +0000
Manifest next update:     Sat 13 Dec 2025 12:01:36 +0000
Files and hashes:         1: AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa (hash: /0BCHflij9PTsqkAVxlV2lPjueYr2KbGYcBxxZ+N59s=)
                          2: C-vO5NIzea7YGuz_x6dCs1rN3bM.crl (hash: d+q3HeNIJ7xXN1+Qzg98+IwK52rMuBcSEauYb6DYisE=)
                          3: LnojP8VZuP5sxRZNy8ZImHWuCkE.roa (hash: QEFAmHDz1wMAzZ2EtfKdNmGtBfZo2twIT8EusXqnCMo=)
                          4: SoifJezxA6M2Rojt5hzyHbEbfq0.asa (hash: 6eNyZ5Xc/7zuDfKiwwuynBOXlEoLUXVYKPU1kYR9ciE=)
                          5: tsJwFZrDXIRwjLakU6dbnqENzD0.roa (hash: wlsUyedxgDvePxXhoMuofoRM97SDv+ta+Oc6E/8MG7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:70:1e:ad:11:66:5b:ef:2b:6a:3e:d6:45:8e:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
        Validity
            Not Before: Dec 12 12:01:36 2025 GMT
            Not After : Dec 13 12:01:36 2025 GMT
        Subject: CN=0f9f24e4c9d30629734bcb5c35ba87168d52bc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:45:c1:20:a0:31:07:f0:05:8b:a7:e4:df:
                    ec:40:1e:43:25:cc:6a:68:95:ed:21:23:58:46:8e:
                    95:fb:8b:02:48:af:dc:69:78:8e:28:87:2c:ae:01:
                    c8:d7:70:d3:64:e0:1b:3a:9e:c6:03:4e:d8:44:d0:
                    19:74:91:a6:ad:79:2a:bc:65:8a:fe:97:df:c8:5d:
                    11:35:e6:30:99:a8:39:4f:e1:7d:75:11:2e:97:1a:
                    9e:fd:ce:e2:aa:2b:43:ba:68:93:35:13:26:66:72:
                    ce:30:b8:7a:08:ea:15:32:9c:ac:90:bb:65:eb:5e:
                    cc:3c:54:95:9b:33:d9:91:a2:73:d3:5f:5d:bf:f4:
                    20:38:0d:72:a9:0a:ba:06:dd:88:39:72:00:d5:a6:
                    c7:5e:cf:8e:69:67:0a:6c:14:6b:e7:49:d3:f7:b9:
                    60:e9:53:fc:d0:d2:75:6a:ba:28:9c:34:02:50:8c:
                    5b:24:09:f6:02:a9:f9:0b:79:05:56:98:e8:09:05:
                    2c:f3:2f:43:e7:c6:a7:83:29:a3:ad:2e:02:b7:d3:
                    bc:88:11:79:bf:05:d8:2c:8d:51:91:52:a6:59:6f:
                    4c:a5:b2:3c:76:47:7f:85:c9:0d:40:c7:da:b7:8e:
                    c4:fc:0b:61:71:70:9d:30:f0:4a:38:15:59:0b:c3:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:24:E4:C9:D3:06:29:73:4B:CB:5C:35:BA:87:16:8D:52:BC:69
            X509v3 Authority Key Identifier:
                keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:0f:aa:de:40:66:18:5d:b8:00:da:b0:81:f4:8a:a5:db:
         5b:e3:a8:88:72:fb:95:1d:21:46:dd:8e:94:79:05:76:62:ef:
         b5:ae:55:ae:ed:5c:10:dd:fc:a5:b7:c6:2a:37:8c:1a:94:ae:
         1a:66:85:00:ca:47:3a:ac:2e:58:9e:3f:49:71:84:36:19:00:
         85:c9:1a:42:90:27:13:69:e9:d8:50:76:16:87:30:f6:af:a3:
         70:29:d4:a9:d0:ff:8c:d0:f1:ac:05:5a:86:2d:6a:14:ef:b0:
         04:e6:c0:a4:79:78:5f:ea:53:10:0a:81:82:8d:06:9c:2c:a0:
         6e:63:d2:5d:16:03:7a:d9:1c:22:ca:f5:f5:5c:51:a4:8b:50:
         69:4a:5f:b5:68:62:af:24:7a:b7:7e:79:fd:f4:91:29:8e:e7:
         78:e5:c5:cf:bd:87:6d:02:d7:b4:47:34:b6:19:26:70:49:6b:
         d7:7f:ee:d8:ca:d8:e4:49:91:30:12:4d:30:3d:70:b4:cd:aa:
         7a:24:18:80:93:c2:6c:f6:8d:3a:53:d7:38:86:a0:73:bc:f3:
         3c:e3:37:b4:c9:2e:47:7d:43:45:d2:4b:60:9f:5f:b2:58:fe:
         19:44:7e:8e:69:bd:27:eb:df:b8:f4:d9:13:dc:16:5a:59:45:
         42:38:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:19:32 2025 by rpki-client