This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File:                     TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier:          b719wsm1AafgSjYK2uBW9v2lZA3lc0c9CdnYksnvVqw=
Subject key identifier:   7B:8F:19:73:1F:1E:64:E5:B4:AE:CD:DA:F2:C2:37:F7:27:AC:0B:E8
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer:       /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial:       019B1ACD7E61040EB4D8D55C37FD616899EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number:          16CF
Signing time:             Sun 14 Dec 2025 03:00:33 +0000
Manifest this update:     Sun 14 Dec 2025 03:00:33 +0000
Manifest next update:     Mon 15 Dec 2025 03:00:33 +0000
Files and hashes:         1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: uBR1Cy3riE6eD3Y9QGPQW8+ofdV5DfRVNBessIMqmNA=)
                          2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:cd:7e:61:04:0e:b4:d8:d5:5c:37:fd:61:68:99:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
        Validity
            Not Before: Dec 14 03:00:33 2025 GMT
            Not After : Dec 15 03:00:33 2025 GMT
        Subject: CN=7b8f19731f1e64e5b4aecddaf2c237f727ac0be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:b8:f2:e1:99:3a:01:6f:5f:a4:05:6e:73:
                    05:c1:1f:ec:80:4a:a6:55:af:94:a2:5b:86:58:64:
                    be:2a:1d:44:80:5e:18:e5:47:6e:c1:92:3f:4c:1f:
                    95:27:b8:05:c7:b3:cc:3f:9b:38:e4:e9:1d:86:8b:
                    88:d4:3b:3b:7f:7d:b7:d0:77:de:fd:e6:76:b3:13:
                    c4:db:92:91:97:a1:cc:03:9f:9c:9d:70:95:0b:ec:
                    2d:a6:d4:91:88:04:46:77:3f:43:93:35:e3:4e:10:
                    39:3e:5e:c0:11:6e:34:dc:9c:fc:2d:76:54:bd:ec:
                    cd:20:b4:7a:01:4b:d3:b4:7e:bd:6b:fa:1b:db:4b:
                    53:cc:9b:22:7f:d5:6b:c9:90:36:d0:a4:4b:2d:fe:
                    89:be:d5:5e:e0:b4:15:3a:0b:e9:79:5d:69:85:18:
                    38:a3:eb:e9:7d:a9:74:11:89:0d:65:ce:54:08:55:
                    d0:50:10:e0:71:a0:98:59:2a:95:3c:34:27:00:b3:
                    5e:31:5f:95:ec:07:c1:b5:54:bf:ba:54:21:57:75:
                    5d:53:65:bd:68:a4:f8:76:b8:4d:b3:b9:96:69:8f:
                    5a:bd:3d:52:af:10:13:f2:f0:9b:df:c7:ee:77:47:
                    4d:ae:61:1d:dd:22:f3:4d:3f:a1:34:26:f5:9f:68:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8F:19:73:1F:1E:64:E5:B4:AE:CD:DA:F2:C2:37:F7:27:AC:0B:E8
            X509v3 Authority Key Identifier:
                keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:1e:95:3c:a6:2a:db:15:01:f7:24:3f:28:2f:5a:1c:cc:
         81:e0:c2:c8:f7:03:1e:fa:68:2e:f7:79:7a:23:fd:3a:6e:7f:
         80:6d:aa:6c:6b:ce:51:bc:e7:bd:fc:44:60:3c:e5:58:92:e6:
         69:47:37:8d:49:9a:40:10:6d:79:30:c0:7b:55:80:4c:c5:55:
         5f:94:2c:07:2c:c4:17:a3:d9:e7:8d:49:fd:94:1d:5a:53:84:
         21:37:46:32:7e:0c:84:62:96:ff:f1:d2:36:0e:da:f2:c9:31:
         2b:81:c5:8d:1d:7b:5f:07:88:39:11:f9:b1:0d:79:b5:69:77:
         9b:e6:78:fd:58:5b:74:34:30:69:e9:e1:ed:c0:40:c2:34:fe:
         4e:be:dc:82:70:06:a6:45:60:86:f6:b4:ec:9a:30:ee:9b:28:
         0f:21:1d:9c:dd:e4:02:3d:16:88:22:78:e1:ee:1b:65:5e:9d:
         1d:3c:9e:54:7a:c2:3d:e7:9d:4a:34:a2:f6:6a:35:67:3c:00:
         ad:48:cb:71:b8:bf:c6:24:00:73:c1:e9:12:1a:29:a1:22:a0:
         8a:67:95:3b:d6:3a:5b:75:85:01:a0:ab:62:61:db:ee:ec:51:
         3c:9f:ec:5e:1e:d5:fd:13:66:4b:50:04:1e:04:29:a3:4c:ed:
         dd:cf:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:39 2025 by rpki-client