This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          GtNmTumJC4ZQZSBcg4YKAdzBBobdn6GWCe5+u+Qw3AM=
Subject key identifier:   59:4A:D7:C8:85:A0:67:66:06:22:07:D4:BF:7E:DC:E9:9A:E6:D6:57
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019AACF06C6C71722C6A84B6F1498CEF03C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          0248
Signing time:             Sat 22 Nov 2025 19:00:28 +0000
Manifest this update:     Sat 22 Nov 2025 19:00:28 +0000
Manifest next update:     Sun 23 Nov 2025 19:00:28 +0000
Files and hashes:         1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: SI8qTgPqQxJxKgQW7okwvCBkGOGCX9KSrijqmgUh1h4=)
                          2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
                          3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ac:f0:6c:6c:71:72:2c:6a:84:b6:f1:49:8c:ef:03:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Nov 22 19:00:28 2025 GMT
            Not After : Nov 23 19:00:28 2025 GMT
        Subject: CN=594ad7c885a06766062207d4bf7edce99ae6d657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:7b:cf:ed:f0:8e:80:05:2a:f0:2a:ca:34:
                    ed:36:a1:7e:03:cd:24:6d:0b:a7:14:b7:3e:96:79:
                    16:90:43:9e:26:02:3c:d4:46:d9:9b:cf:7a:97:71:
                    79:d8:c0:44:2d:39:93:4c:f9:d3:d7:02:b7:23:17:
                    27:5a:27:54:a2:93:3f:a3:0f:14:f1:71:07:bf:0f:
                    b1:65:b1:0f:45:cd:9a:21:65:22:48:d6:43:f2:bc:
                    e2:0b:ad:51:50:4d:2b:dc:0c:e7:70:48:5b:fe:0c:
                    5f:26:fb:13:f9:45:bc:db:84:c3:de:36:59:9b:25:
                    10:e0:3e:f0:c5:16:dc:75:52:7f:17:27:86:ef:43:
                    a0:34:08:88:de:7c:b4:b3:3f:9b:4b:d7:b5:3a:ea:
                    fc:96:20:50:c9:4a:a2:3e:a8:04:fe:fc:a2:d8:b1:
                    31:3a:94:16:02:11:f4:9e:b7:7a:7b:f3:98:81:39:
                    df:4c:b9:c4:b1:03:a8:22:f4:28:47:70:4e:db:8c:
                    e4:c8:f9:60:eb:ad:f4:d3:83:e2:9c:7d:23:6b:58:
                    50:ec:c8:bc:1d:49:bf:49:36:2c:c1:6c:36:4c:0a:
                    81:16:2e:c7:51:b5:1d:52:46:b1:1d:2f:38:32:29:
                    3a:7d:fc:91:ab:57:fb:cd:ad:21:80:71:eb:07:cd:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:D7:C8:85:A0:67:66:06:22:07:D4:BF:7E:DC:E9:9A:E6:D6:57
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:90:4b:23:81:87:23:d3:dd:df:c7:ea:89:98:b4:a7:1e:
         d5:38:ef:38:b8:73:a2:a1:91:5d:51:40:a4:a7:fb:5c:a8:3d:
         c9:6d:f0:fc:82:79:c6:4b:0e:b7:0b:8e:de:98:f1:10:82:50:
         e1:24:95:0e:bb:fa:7d:e0:85:70:05:69:e6:42:59:cc:1c:64:
         f4:15:32:8e:7d:52:2f:6e:15:61:a3:88:6c:90:ff:bc:3c:02:
         eb:dc:6e:eb:53:61:93:c5:13:37:d2:74:1c:02:0a:39:a3:1a:
         14:80:18:04:54:a5:01:a4:80:7b:9d:d6:af:c2:85:21:57:ee:
         79:09:fa:95:90:53:93:b9:74:da:6b:68:46:d9:69:07:4d:e2:
         ac:5a:aa:ab:f5:3d:de:bd:22:c1:df:88:48:39:e2:f5:55:78:
         e7:69:d1:75:bf:0c:0f:50:4a:59:5e:70:08:28:33:92:61:72:
         3a:73:3e:24:cc:1e:73:67:b9:be:44:28:30:1b:8d:48:e9:c8:
         c6:99:f5:1a:bd:cb:62:72:00:bf:63:c8:39:df:90:20:6a:42:
         80:28:c4:30:c9:c8:23:21:06:84:54:bd:ee:93:18:4b:f7:98:
         bc:34:fd:87:a1:8a:22:65:fc:9e:c4:e6:cc:c5:c3:52:a4:70:
         65:2b:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:52 2025 by rpki-client