This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          Se4TUpVVFqUrO1vcp9PLB0kmmrnK82n1AVWuFaLGuW8=
Subject key identifier:   DB:2A:A0:D7:98:AF:B3:81:60:05:32:07:70:2C:1A:29:09:F5:0E:7D
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       019B10EF9427429070CE0294B00E9FDC4EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          14C3
Signing time:             Fri 12 Dec 2025 05:01:35 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:35 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:35 +0000
Files and hashes:         1: 7FOJ9WC3T7pHyWWCuyPjcheMLEQ.roa (hash: nKrGLaOlKefy6/k/jC1QdJsWJ/jAJ+vYp4Lo3APL+Ec=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: lRWWIymKZ4qQj49QY7R01E3Y0tah8NBaRNokjywak2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:94:27:42:90:70:ce:02:94:b0:0e:9f:dc:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Dec 12 05:01:35 2025 GMT
            Not After : Dec 13 05:01:35 2025 GMT
        Subject: CN=db2aa0d798afb38160053207702c1a2909f50e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:5e:e6:c9:0e:09:10:d0:d3:5d:ba:af:a2:
                    dd:f4:6b:96:db:e8:9d:a8:40:e2:6e:73:45:ce:87:
                    a6:19:71:5e:61:9b:f4:6c:bb:d0:eb:3f:f3:8e:85:
                    9d:ce:8c:00:fc:9e:e0:41:32:e5:91:13:2f:9f:df:
                    a6:e7:e7:e6:01:69:b9:ff:b5:49:38:e3:7b:ff:a9:
                    af:c9:69:65:1b:43:9e:30:55:85:07:41:b9:c8:7a:
                    ee:86:a6:ca:dd:72:2a:b5:23:f3:82:1b:4c:11:a4:
                    ad:4b:66:71:75:06:7c:51:a7:9d:00:cc:8a:0a:3d:
                    10:11:8d:96:0d:b5:1d:26:3b:92:74:5c:41:08:a7:
                    5a:2e:b7:8c:b0:2c:6f:81:2c:9b:cb:0a:93:34:c2:
                    d0:b9:34:27:76:66:ca:3c:3e:f8:b9:8e:89:de:e0:
                    25:bf:38:ee:a4:2c:6e:9f:1a:f3:c8:a5:08:4b:a7:
                    c5:7a:3e:f3:bd:a8:ae:24:89:30:1f:1d:da:98:cd:
                    3e:c6:78:8b:f2:c9:11:84:cf:bb:ab:af:88:ca:6d:
                    3a:5f:16:14:ae:16:93:38:db:98:ff:77:ec:0f:e5:
                    85:65:ef:b8:84:94:ba:bf:d5:df:08:b9:f2:17:6e:
                    30:b3:e2:cf:7a:6a:32:d7:8c:20:76:7b:51:cf:b3:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:A0:D7:98:AF:B3:81:60:05:32:07:70:2C:1A:29:09:F5:0E:7D
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:5f:37:96:2f:fc:7a:c8:2e:a0:d7:f2:d1:24:88:e5:7c:
         34:04:60:9c:1e:7b:c1:ca:e7:79:9b:75:5f:92:a5:e3:6c:ef:
         b3:cc:54:1a:5c:92:e8:5a:e9:ce:33:f9:10:44:30:76:bd:4c:
         18:3c:fb:a3:a4:01:d0:2e:34:84:b8:bb:23:99:02:da:83:f4:
         76:7a:8f:f3:3f:05:f0:23:10:03:8c:96:b1:46:7e:4a:46:aa:
         c7:db:0c:61:3b:2b:df:56:cb:83:67:80:75:de:22:2d:ee:64:
         78:5b:dd:40:ba:d7:3e:2c:82:a7:02:54:d0:51:16:0f:ca:d8:
         c3:4e:5e:5f:8e:10:12:f8:b4:76:9c:de:0d:8b:be:36:03:d4:
         c7:9f:5d:ab:80:1c:d7:1b:51:5b:3f:13:db:bd:95:66:45:00:
         64:94:47:ee:df:c4:98:fb:42:86:96:2f:fb:7c:8c:3a:99:47:
         5e:4d:13:de:4a:8a:e0:8d:4f:b6:15:a5:ae:fb:c6:ef:65:0f:
         0e:75:73:b2:63:04:30:0c:4d:85:cb:b8:22:8c:e0:ef:88:98:
         92:82:6f:06:a4:cf:3d:c2:13:bc:b8:a6:7b:d3:6c:c5:4f:8a:
         29:f7:e9:97:b4:79:4a:66:e9:77:71:7c:db:4a:43:d4:ef:f8:
         68:84:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 06:39:01 2025 by rpki-client