This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File:                     Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier:          xYqzhaBV5EJDeI9LZEZg0+DkUxjzU+FUs1Pht9qbt2Q=
Subject key identifier:   89:5F:98:E7:41:E9:C1:E9:DA:B1:47:6C:67:21:58:89:55:21:28:95
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer:       /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial:       019B38D84747286E54738AB63C645BB5AE66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number:          09C4
Signing time:             Fri 19 Dec 2025 23:00:56 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:56 +0000
Manifest next update:     Sat 20 Dec 2025 23:00:56 +0000
Files and hashes:         1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: +G7r7L27eB3NtalekgZMSlAJO+86e4xS00slXHtrzps=)
                          2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:47:47:28:6e:54:73:8a:b6:3c:64:5b:b5:ae:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
        Validity
            Not Before: Dec 19 23:00:56 2025 GMT
            Not After : Dec 20 23:00:56 2025 GMT
        Subject: CN=895f98e741e9c1e9dab1476c6721588955212895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:0c:34:9a:33:51:61:96:8d:d4:8d:b4:26:
                    89:fa:f7:89:67:2e:1b:8f:c7:5f:ed:18:52:18:92:
                    26:eb:55:c2:59:62:09:e2:65:af:1a:bd:ec:67:d3:
                    43:d0:ed:66:9f:32:64:89:37:46:25:e3:36:f0:cb:
                    6d:90:8a:19:85:8e:78:3b:9c:f0:c6:a0:28:65:0d:
                    60:8f:3f:99:e3:71:4a:79:2f:4e:ef:02:97:7c:a2:
                    d5:f7:1c:f5:6b:98:3e:b1:03:ac:27:40:b0:36:bd:
                    c7:dd:e6:8c:24:13:12:ed:e6:8a:c5:98:1b:65:84:
                    3f:67:5b:8f:15:dd:36:dd:23:dd:6c:bf:60:59:f3:
                    69:f0:c1:da:02:e0:d0:6f:34:4e:53:5b:4d:4d:74:
                    c8:c4:f6:79:e6:3c:e6:b7:12:7e:bc:2d:a7:b3:a9:
                    a4:55:90:82:af:4b:2b:9f:13:a2:c0:be:bf:9e:a2:
                    01:86:c2:d0:04:d7:2e:c4:ec:52:7b:68:da:3a:1c:
                    a7:76:aa:9f:4a:07:5a:68:0f:f3:82:a7:db:ad:c1:
                    32:7b:90:e6:43:fc:e3:5e:e2:da:df:55:bd:43:3c:
                    78:83:59:1b:64:eb:0a:56:64:9e:94:21:91:1f:21:
                    6c:13:1e:6b:58:65:b7:53:f1:3d:cd:59:b5:9d:6f:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5F:98:E7:41:E9:C1:E9:DA:B1:47:6C:67:21:58:89:55:21:28:95
            X509v3 Authority Key Identifier:
                keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:40:33:b7:45:44:7c:63:96:98:7f:c8:07:3a:e7:2f:5e:
         7e:07:90:79:20:3e:b2:0b:55:a1:81:d8:01:8c:84:04:dd:f1:
         af:3e:15:a4:d8:86:58:da:17:5e:b4:fc:72:e5:72:a0:14:3e:
         63:27:8c:93:25:e5:cf:6b:9e:72:7e:f8:1c:25:53:6a:c9:82:
         f3:9d:16:9d:a2:19:07:84:b1:2e:f7:f9:d7:98:fe:31:93:b7:
         45:4e:85:8f:71:d9:df:1f:e9:f4:74:ed:6e:fd:72:82:c3:da:
         52:58:ea:df:86:5c:94:2e:5a:97:5c:f6:11:39:17:f8:eb:98:
         c4:a3:91:9c:4a:ad:c3:92:d2:09:5e:26:2f:7a:fb:41:47:bc:
         3b:2c:20:39:a4:80:41:33:2b:90:11:c7:c3:a6:a7:8b:bd:3b:
         81:87:a4:a4:a1:1e:70:69:ab:75:4f:e4:11:4a:39:d5:3f:ef:
         ea:ef:ff:6c:83:22:a7:60:31:b3:59:11:10:7c:64:63:44:c1:
         ef:ce:5d:8a:87:58:b6:1d:5b:13:c7:ee:9e:79:fa:b4:86:31:
         6a:07:84:e1:a3:26:8b:4d:d8:55:fc:20:27:7f:35:14:67:da:
         d2:04:94:ac:fd:a7:82:21:67:20:f4:8b:d5:0f:85:72:f4:ea:
         d6:55:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:41:38 2025 by rpki-client