This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File:                     tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier:          0BVd5eXjXw9AYcEg62N+TnVy1K4lfx84LGylH4UvpXM=
Subject key identifier:   24:20:09:EE:7B:A5:30:F5:D2:13:2D:3B:12:63:A8:09:56:C3:88:13
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer:       /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial:       019B16159AD43F39B1CA0A17DE97A846438D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number:          1789
Signing time:             Sat 13 Dec 2025 05:01:13 +0000
Manifest this update:     Sat 13 Dec 2025 05:01:13 +0000
Manifest next update:     Sun 14 Dec 2025 05:01:13 +0000
Files and hashes:         1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=)
                          2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=)
                          3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=)
                          4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=)
                          5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=)
                          6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=)
                          7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=)
                          8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=)
                          9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=)
                          10: sAE-Hl68vnhnSeOEkdOvbCITI3s.roa (hash: +zv5NFL3GNnw57mEaHIY7DHrB2enuzSZniAXWNA14go=)
                          11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: wav1y6/h6in1q7ISyhynZZxk9LHfwp4DGNXwzt9H0gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:16:15:9a:d4:3f:39:b1:ca:0a:17:de:97:a8:46:43:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
        Validity
            Not Before: Dec 13 05:01:13 2025 GMT
            Not After : Dec 14 05:01:13 2025 GMT
        Subject: CN=242009ee7ba530f5d2132d3b1263a80956c38813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:cb:5e:70:bb:4f:3d:5d:53:46:be:85:d3:
                    c6:68:ec:b0:1a:ee:bb:eb:c2:f8:25:33:a8:46:bc:
                    99:ae:4f:4d:56:73:be:01:29:de:f1:cc:9b:65:72:
                    4f:23:d4:77:3b:d7:f0:99:19:f8:41:a6:2a:a7:cb:
                    60:d1:4d:9d:70:ef:95:65:15:2a:e0:89:b1:f4:1f:
                    d7:1c:1e:67:44:d2:26:f5:04:9c:f7:3c:80:21:2d:
                    61:c5:ef:55:4f:f3:f5:52:35:f7:dc:d1:33:56:2f:
                    9b:38:77:5f:72:2c:18:2e:4e:1d:64:8f:db:5c:e5:
                    7d:21:a7:33:c1:bb:7b:5f:14:29:6f:2e:d4:a7:f2:
                    4f:44:21:8f:09:54:aa:ef:a0:dd:af:13:d8:11:75:
                    1d:2d:f3:92:7d:d1:d7:d4:53:e5:cd:3f:4b:2c:3c:
                    2d:f5:5b:76:68:b4:9f:90:a7:de:1e:d0:6f:fd:5e:
                    61:2d:6d:c2:1b:7c:2d:59:f3:62:96:1b:ac:d0:fe:
                    d1:95:f7:4b:96:35:73:db:9a:e8:fe:10:71:00:d6:
                    3e:a2:70:b0:b1:5a:a4:ad:48:ff:ea:9b:2f:f9:c2:
                    e5:cf:40:1f:03:a0:1b:f6:46:1a:9a:08:d5:5e:47:
                    8f:95:7f:3d:17:48:3e:3c:34:a3:e0:83:0f:6d:f6:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:09:EE:7B:A5:30:F5:D2:13:2D:3B:12:63:A8:09:56:C3:88:13
            X509v3 Authority Key Identifier:
                keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:06:6d:08:96:2b:90:a9:ee:a9:56:3c:09:11:c9:51:92:38:
         22:54:20:20:8f:77:3d:44:29:37:97:a3:5f:1b:c9:02:d5:5e:
         a9:8f:81:66:73:23:97:e8:dd:bd:47:13:f9:80:f5:82:a6:46:
         a1:32:a8:bd:88:87:ec:ec:8e:73:5f:27:c2:31:7d:fe:9a:05:
         ef:44:ae:cb:07:d6:97:58:4d:07:28:dc:27:f0:fa:3c:b5:30:
         40:b8:36:26:c9:dd:dd:12:b7:d0:b2:26:35:d0:49:8d:24:5c:
         18:e0:76:12:a3:eb:0c:51:72:d8:f7:5a:41:c4:e8:d6:8a:e5:
         11:c7:5e:9a:7f:7a:32:af:8c:61:b5:5b:b4:7b:32:8c:36:5e:
         7a:eb:a6:8c:22:09:42:a7:24:2f:1d:64:5b:10:3a:d3:ce:ad:
         3d:7c:5d:72:c0:ff:30:75:13:0f:11:2b:6e:a1:c6:75:9e:b6:
         3a:ed:7a:68:2d:d7:94:61:43:1f:a2:e0:56:50:8a:cd:a4:48:
         a0:00:1c:ba:4b:db:66:12:56:13:6b:36:75:92:a3:4e:7a:13:
         e8:ae:89:da:24:b7:83:31:7e:24:29:d5:30:0e:31:e3:f6:34:
         d5:96:98:4e:0a:fd:3d:8a:8c:82:ca:3b:6b:18:d7:40:09:8b:
         d7:86:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 15:03:13 2025 by rpki-client