This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
File:                     rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft (raw, json)
Hash identifier:          BlMuCESJO7f5VM8fAhnqlQK3pGRaaDUctpgNM25sfDQ=
Subject key identifier:   CF:3F:B0:AA:16:F4:07:55:ED:72:46:17:D2:0B:28:E4:A0:EA:22:DD
Authority key identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23
Certificate issuer:       /CN=ac5d4cea41585a0a368401699280ac1b6bb73223
Certificate serial:       019B59E466FE6DB88D6078056E1CCC739924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
Manifest number:          4F
Signing time:             Fri 26 Dec 2025 09:01:39 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:39 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:39 +0000
Files and hashes:         1: 6MlxoV-asBHiGksnX5lFDncVeWA.roa (hash: qK+f09eYC4V3D6iCsXNB5SC9DsNYYR44YaLV6kpwvqk=)
                          2: AzEsRWCvBiHpqfFTvRErWOBYIZc.roa (hash: vJXv/xJSbjhCpSaxfq/1xi0XVWjOr4ZUd1h2IPsQrP8=)
                          3: rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl (hash: oW2Y0puOcps+/8/9jNVdueyycE8Hw5MNuanhjHtGUCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:66:fe:6d:b8:8d:60:78:05:6e:1c:cc:73:99:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5d4cea41585a0a368401699280ac1b6bb73223
        Validity
            Not Before: Dec 26 09:01:39 2025 GMT
            Not After : Dec 27 09:01:39 2025 GMT
        Subject: CN=cf3fb0aa16f40755ed724617d20b28e4a0ea22dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:f5:4d:24:3b:38:2a:9d:0d:21:4b:0f:c2:
                    71:13:f1:ff:e0:98:3a:42:7a:bf:7d:bc:73:c9:bd:
                    c1:48:5b:5c:28:16:b4:c4:1d:c9:37:94:86:94:99:
                    62:bb:d3:be:51:54:8d:03:12:df:af:b6:7b:6b:10:
                    2a:15:85:38:04:a1:b6:35:4f:88:3c:a3:64:e6:44:
                    91:51:ae:81:ba:18:11:a8:c1:63:1d:2a:14:3b:58:
                    81:fb:83:bf:e7:9d:09:22:86:ee:f3:c8:71:73:e0:
                    a8:4a:05:13:57:a1:d0:f1:2c:66:b6:a5:2f:fd:72:
                    58:c1:6c:da:f3:ad:33:d9:e5:be:5b:e1:0f:9a:e9:
                    66:3d:1d:4a:3f:a4:17:34:b4:92:10:1e:ad:71:fb:
                    0e:2a:ba:b7:26:36:f9:f3:4a:3e:01:f8:ca:a9:4a:
                    d7:9e:cb:db:ec:37:6e:a1:1d:94:8f:31:55:09:b3:
                    65:e4:70:4f:b6:47:b8:13:29:e0:d2:8a:9d:bb:b5:
                    6d:11:e7:96:d6:53:d4:f9:a9:b3:e8:67:95:eb:12:
                    73:c3:86:7f:c3:bb:3d:c6:4b:dd:47:84:bb:f4:e4:
                    15:de:02:0e:94:21:c5:56:06:ae:9b:fb:d9:04:78:
                    e0:b2:7b:78:91:9c:5c:67:f2:66:34:e3:4e:ee:b9:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3F:B0:AA:16:F4:07:55:ED:72:46:17:D2:0B:28:E4:A0:EA:22:DD
            X509v3 Authority Key Identifier:
                keyid:AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:02:02:4c:d1:7a:fd:6f:08:01:e4:f6:fe:70:70:d9:be:49:
         d9:ee:3d:75:75:7b:8f:6a:2c:50:37:e8:38:98:bb:57:a6:4c:
         56:c5:7a:e6:06:2e:03:04:b5:7b:a8:03:9f:67:42:19:93:04:
         8e:a4:41:59:5c:07:e0:74:39:53:ba:d7:68:80:e5:d3:84:df:
         2c:48:38:af:8e:fc:c7:3b:26:0c:95:c9:9d:4e:47:c5:5e:fa:
         f2:85:fb:43:0d:c0:e8:16:32:3c:1b:d8:f1:ed:52:9e:61:84:
         6d:13:d1:c0:6a:d1:3e:6e:b6:72:77:f0:fc:94:52:82:b0:41:
         46:05:a4:b9:6e:83:eb:29:9b:37:63:49:4c:8b:ca:56:a8:17:
         5e:88:6e:98:bc:a5:99:81:ff:c3:a6:93:3b:c9:2b:8e:fd:54:
         9a:98:af:ac:0f:11:30:f0:47:76:ec:d9:f8:5e:1a:9d:5f:69:
         cf:e7:21:ba:62:34:38:c6:82:32:77:24:f3:a2:c9:21:2e:46:
         69:05:5e:a7:18:76:65:2c:a4:65:f8:38:a9:9b:32:92:b5:02:
         6b:56:22:2a:c8:cf:db:92:4d:84:bf:6f:ce:67:b5:82:62:44:
         24:2c:76:e6:0f:b2:79:3e:bc:9e:2d:f2:e4:b8:0f:f2:fa:7d:
         ab:82:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:14 2025 by rpki-client