This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          UG7IJ+4CkwKQUc0LnuEUlGgFmjBHAt4uW9uYeTvvoc8=
Subject key identifier:   BE:76:04:82:57:3D:E7:50:B0:A3:DE:BB:E4:67:5C:6C:1B:89:82:67
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       019B1013D1F219DBECF042E9E2883ADEA3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          0DA4
Signing time:             Fri 12 Dec 2025 01:01:32 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:32 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:32 +0000
Files and hashes:         1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: kOC1KusiiaKHoIvgxBX5Y0sgdGB4zX3/uqDWc2Psng0=)
                          2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
                          3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:d1:f2:19:db:ec:f0:42:e9:e2:88:3a:de:a3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Dec 12 01:01:32 2025 GMT
            Not After : Dec 13 01:01:32 2025 GMT
        Subject: CN=be760482573de750b0a3debbe4675c6c1b898267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:17:fa:38:b4:6c:85:f9:0c:0b:4b:ab:68:
                    b1:fc:60:37:f5:8e:79:78:3b:24:a1:70:bf:82:57:
                    32:54:47:1e:5a:f9:d3:ad:16:d0:e9:db:76:46:35:
                    ff:7e:12:63:28:68:2b:ba:59:3c:f6:64:89:02:24:
                    73:7a:c0:af:70:80:0d:2a:cf:3a:d9:72:fb:ee:e0:
                    91:0f:45:6e:ae:f6:d8:72:8c:aa:6d:b6:e4:9c:b9:
                    16:db:cc:94:5e:5c:1f:c0:e3:97:52:17:52:42:12:
                    13:ef:3a:e3:d6:49:e2:05:b2:a9:bb:4c:6a:de:d5:
                    ea:47:41:45:1c:8c:36:f0:89:11:5a:0d:42:85:4b:
                    4d:1c:4d:c4:97:04:d5:5b:9b:fd:3e:b1:1d:f6:90:
                    7b:d3:e4:88:f3:3a:20:86:8f:c7:46:3d:9f:aa:27:
                    06:fa:c5:aa:e3:44:89:9a:41:eb:e5:a2:be:1a:43:
                    6d:38:95:8d:76:68:7a:a3:ed:32:c9:f3:43:40:8b:
                    bd:b9:83:90:c8:8d:4f:b2:7f:ce:cf:d9:e4:a1:61:
                    9e:c5:fb:97:ff:0e:af:c2:5e:03:71:55:9a:65:72:
                    02:72:0f:22:09:6a:67:ed:16:c5:55:23:f8:27:dd:
                    5b:76:fa:db:d3:5a:8e:e6:5b:a0:c1:a7:c9:50:af:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:04:82:57:3D:E7:50:B0:A3:DE:BB:E4:67:5C:6C:1B:89:82:67
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:f2:e5:ab:8a:30:0e:2b:79:b1:ca:f2:a8:54:b1:2b:ba:
         99:fc:98:ab:2b:6a:52:de:86:5d:73:2a:4a:8a:05:28:66:45:
         0a:22:79:55:f6:e3:6b:e4:ad:39:ed:3a:66:82:d4:b2:b1:84:
         61:34:d0:85:f4:f4:d8:0a:60:ec:13:75:8e:dc:9b:63:ba:15:
         8b:a1:d3:d5:64:d7:ec:84:dc:6e:56:ca:3f:6d:20:4d:20:d5:
         09:63:2e:2a:74:9a:0d:59:8f:06:54:c6:83:38:d5:37:a6:00:
         31:ef:29:9f:79:c4:96:e1:21:91:e6:d4:23:42:6e:1a:54:fe:
         9a:a2:4b:69:6e:38:5f:16:e1:f4:a1:05:10:4e:95:77:d8:2a:
         2a:05:96:c4:a9:b0:65:06:f0:a6:aa:7b:c3:e8:ff:0a:b9:f9:
         47:cf:fd:5e:c6:bd:89:ac:be:c6:58:e0:d5:a9:62:02:bb:47:
         0b:93:5e:8a:f4:f0:75:09:42:87:ec:49:a7:19:7a:df:07:2b:
         79:7c:cb:c7:11:d2:81:6c:50:fa:76:96:af:0d:ac:d5:3f:63:
         14:97:e9:f8:bd:cf:f7:e6:04:9e:0d:71:5b:fc:76:91:6c:8d:
         30:3b:db:d3:1b:8e:64:eb:82:91:f0:9f:b1:2e:d1:f4:10:8a:
         97:30:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 06:39:02 2025 by rpki-client