This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File:                     1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier:          nAgVeCVT+g8Mhm5RQjUNEmbtVd7ZFYID2IpQg0pun3s=
Subject key identifier:   22:A0:EF:E5:EE:B5:BD:F3:18:81:BB:9B:30:93:ED:C7:37:DF:4D:49
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer:       /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial:       019B58D196D647FF4682BE8A1D3CDC745E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number:          12BE
Signing time:             Fri 26 Dec 2025 04:01:29 +0000
Manifest this update:     Fri 26 Dec 2025 04:01:29 +0000
Manifest next update:     Sat 27 Dec 2025 04:01:29 +0000
Files and hashes:         1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: Ec+l5uLFP29njhP8BaOGhwFiiFvvUIZ2AtMofH19eiE=)
                          2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:d1:96:d6:47:ff:46:82:be:8a:1d:3c:dc:74:5e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
        Validity
            Not Before: Dec 26 04:01:29 2025 GMT
            Not After : Dec 27 04:01:29 2025 GMT
        Subject: CN=22a0efe5eeb5bdf31881bb9b3093edc737df4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:4c:1e:e8:58:51:95:89:91:76:14:96:bd:
                    fe:bb:65:2d:17:ae:7c:fc:fc:32:4d:23:bd:8a:df:
                    0c:e6:42:8d:59:33:d5:36:e6:5a:97:e4:7d:0c:89:
                    27:41:58:2b:0e:05:28:a5:eb:f0:e7:1f:05:93:8d:
                    5a:9b:dd:43:91:4d:da:8b:36:24:0c:1a:d3:25:55:
                    8a:27:81:2f:1d:5f:6b:a0:4a:7e:30:3b:78:70:72:
                    7d:9c:f9:bf:91:7e:ae:a5:55:a8:20:41:72:20:41:
                    fa:09:50:de:c7:b0:7e:96:0b:5c:50:0c:69:7b:3f:
                    3a:cb:1c:a6:ab:9b:97:5f:c6:b6:32:95:66:82:04:
                    18:68:9b:a2:61:30:ca:c0:05:74:dc:de:0c:b6:5f:
                    a0:21:3d:16:ec:48:c7:aa:05:75:4c:fa:1d:16:4c:
                    c1:25:ed:97:5d:8d:74:59:93:93:f1:21:fa:58:1b:
                    a9:9b:3d:c0:e6:39:a6:76:e3:0a:b7:cb:72:cb:73:
                    12:09:2f:3d:18:41:cb:f9:59:d1:79:24:4f:95:a2:
                    7b:96:78:80:d8:34:05:b2:37:e4:aa:e7:c8:bc:50:
                    01:16:fd:74:c0:c4:28:19:a4:78:42:08:ab:eb:ce:
                    1f:19:4c:2b:78:7b:3c:04:95:a2:ec:64:be:03:20:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A0:EF:E5:EE:B5:BD:F3:18:81:BB:9B:30:93:ED:C7:37:DF:4D:49
            X509v3 Authority Key Identifier:
                keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:13:8a:fd:bf:80:dd:af:39:76:43:6b:7f:bf:96:5e:66:
         26:9f:dd:a0:fc:20:83:bc:d2:fc:77:1c:f4:36:c0:3d:4b:9f:
         55:a3:6c:b0:66:ac:4d:88:9a:59:8d:78:bb:b6:f2:ae:27:63:
         4b:31:4c:da:49:ca:7a:1e:a6:21:78:6b:3c:c9:b9:11:7f:a4:
         f3:ad:c6:8b:20:fc:92:45:c5:4a:ad:f2:ea:46:0c:67:01:1d:
         8c:0d:23:5a:42:a8:8f:ea:39:12:5e:f9:18:2c:f6:f4:93:ac:
         8a:82:24:5e:5b:fc:f1:3f:0d:0a:e0:12:61:62:f4:75:3d:02:
         f3:8b:f8:f2:79:cf:86:0d:e4:a0:c6:5b:c5:e9:43:a6:5c:fa:
         68:1d:87:1b:00:71:54:8e:79:60:31:1f:cf:3c:19:15:ac:c9:
         5a:6d:5d:cd:6d:8e:b8:a7:aa:2a:31:88:fb:44:26:a5:b4:12:
         8b:36:c9:f4:c6:cb:77:b0:b9:7f:87:16:67:48:f9:49:3a:76:
         80:f4:86:57:1c:6e:be:43:c6:d4:ee:5b:e8:ea:e9:32:24:3b:
         b9:23:e3:fd:aa:6b:07:5b:9f:16:66:05:20:16:f7:f3:1b:db:
         50:04:af:c8:8d:12:ea:1b:09:0c:31:c2:e4:51:e3:b4:b9:a4:
         67:ec:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:02 2025 by rpki-client