This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          vC4W7LS3hTBXzMWCGMdNNY4QwV9Qg84li+qxM6qpn7Y=
Subject key identifier:   D7:4A:16:FF:D5:F8:30:EA:F5:71:9A:86:25:5A:D7:65:69:E0:A1:AD
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019B1871EAA5FF5FF8F68DE80B26C9CD6A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          06F4
Signing time:             Sat 13 Dec 2025 16:01:17 +0000
Manifest this update:     Sat 13 Dec 2025 16:01:17 +0000
Manifest next update:     Sun 14 Dec 2025 16:01:17 +0000
Files and hashes:         1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
                          2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: 7WJkrtv+l5C8xoDzVQAETVWq8OS7JOzxRiKGQNKtgnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:71:ea:a5:ff:5f:f8:f6:8d:e8:0b:26:c9:cd:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Dec 13 16:01:17 2025 GMT
            Not After : Dec 14 16:01:17 2025 GMT
        Subject: CN=d74a16ffd5f830eaf5719a86255ad76569e0a1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:96:45:bb:af:fd:f6:58:71:29:fe:d7:97:
                    f8:a7:f8:4d:d0:e5:5a:36:39:1d:c5:7d:34:9d:a2:
                    85:6d:f6:c1:2c:e3:51:8f:d8:65:5a:b1:26:c5:b2:
                    38:89:82:4c:1e:85:7c:21:fa:f0:da:b2:f3:97:44:
                    b4:59:33:0d:5e:5e:55:47:0f:b6:1f:b3:c2:a2:cd:
                    dc:52:9d:ce:99:53:f6:9a:4b:56:ef:52:12:64:9c:
                    2a:39:97:82:bb:1a:e9:2d:47:ed:1a:a1:8e:88:3a:
                    a4:11:c8:41:2c:43:13:17:b9:d3:41:8e:66:6a:e8:
                    49:15:6b:6e:0b:d5:5c:4b:07:e9:37:fe:a8:69:4f:
                    7f:ba:ae:21:9b:48:ad:e6:6b:21:28:65:05:17:ce:
                    07:cf:87:46:04:59:9e:be:8b:28:80:29:2b:ac:98:
                    a3:7b:7d:16:c2:dc:a0:64:3f:86:1e:c5:5a:0b:16:
                    17:b9:b1:a2:fc:15:9d:d0:5f:7b:af:87:94:c9:38:
                    80:71:3d:e2:1d:e2:08:bf:54:9d:5c:e0:cc:f2:88:
                    e9:eb:85:c4:64:b8:a7:75:12:f1:b3:d1:65:3b:5f:
                    f6:8a:d4:40:61:4e:31:4f:4d:11:4b:87:58:50:88:
                    e5:d4:f9:f8:56:5f:c4:8a:4c:66:98:7e:52:ae:40:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4A:16:FF:D5:F8:30:EA:F5:71:9A:86:25:5A:D7:65:69:E0:A1:AD
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:26:56:f8:c6:30:8f:08:86:5e:18:a6:13:eb:b1:11:9e:
         49:6c:e6:b2:f9:31:e2:56:ca:30:6d:59:a2:06:87:15:9d:c5:
         c3:0b:fc:c0:29:42:7a:cd:73:50:f9:c0:c9:e5:6b:b4:df:6d:
         bd:2c:c0:34:e1:ce:c2:34:e8:d3:e8:cb:e7:5c:f2:57:dc:55:
         17:75:48:fc:d3:7d:a5:02:ce:ed:de:05:b8:fe:e3:31:d2:8b:
         da:ef:3e:b4:b6:3c:3d:4e:c4:14:dd:c4:93:2a:c7:a7:64:e6:
         63:46:b3:71:54:fa:34:d5:7f:05:ab:40:74:d6:f4:09:f0:b4:
         82:13:ac:46:36:ef:67:bd:b1:f7:1e:c6:9b:de:d3:a8:5a:f9:
         e7:6f:b0:62:18:d4:27:3b:4e:a2:0e:6c:7e:8c:f0:1a:75:08:
         9c:ce:01:86:1c:33:93:b5:c3:e4:df:24:d3:79:87:44:dd:7a:
         b2:d2:1f:1a:89:7c:ef:25:c5:a0:08:a0:77:4a:36:35:1d:11:
         d6:07:6a:ac:48:a6:00:0a:47:93:71:01:e5:70:82:f3:5e:a8:
         15:5b:37:9c:0b:4d:10:02:eb:47:8c:8e:47:21:af:25:9f:c3:
         ea:20:ee:fb:9f:c6:96:39:11:62:5f:05:13:67:53:31:2a:2b:
         7a:2a:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:45:00 2025 by rpki-client