This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier:          UJ0CQtWlyKUx2Q1OoGidWtUK/Uw+Ggj0q4j5mnCnMSM=
Subject key identifier:   62:71:8F:FC:0E:F5:E4:6D:FD:8C:38:FD:00:D0:8B:54:D0:45:2B:AD
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer:       /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial:       019B5976478F163F2F1848E28B8FDDCB93F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number:          0EE3
Signing time:             Fri 26 Dec 2025 07:01:22 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:22 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:22 +0000
Files and hashes:         1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: hbukS9bYTvd0n6alWM5O9zhvzm/QEAYC3JETlSBjCXQ=)
                          2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
                          3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
                          4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
                          5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:47:8f:16:3f:2f:18:48:e2:8b:8f:dd:cb:93:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
        Validity
            Not Before: Dec 26 07:01:22 2025 GMT
            Not After : Dec 27 07:01:22 2025 GMT
        Subject: CN=62718ffc0ef5e46dfd8c38fd00d08b54d0452bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:a5:a1:c4:0f:67:d4:3b:e6:d4:a3:f6:80:
                    16:11:c8:26:58:ab:4b:2d:a6:66:77:53:ca:5c:0c:
                    22:86:9e:04:b2:3d:b9:b9:17:b5:82:fd:a6:3a:8a:
                    6d:be:3e:b6:1c:89:67:49:20:19:fc:bd:4c:9b:9c:
                    8c:a8:57:a2:b8:6c:37:af:29:31:7e:54:81:ac:92:
                    84:3a:20:f8:91:cd:1a:8f:2e:16:8e:a1:60:64:e1:
                    e6:fb:d5:37:75:07:38:d9:08:16:3a:80:59:fd:23:
                    1b:43:bb:05:26:7f:0a:07:71:d3:18:ef:00:8e:5c:
                    07:aa:d9:f3:26:af:ac:eb:e9:02:e8:3b:1f:df:cd:
                    c9:a3:33:49:62:c2:38:06:c4:f0:b7:ad:e0:c0:7a:
                    0e:9b:d1:f7:f6:07:fa:71:64:2d:ba:cd:ec:01:d4:
                    8e:56:81:38:35:75:e3:9f:60:00:a9:d7:a3:3e:68:
                    68:5b:07:5d:96:00:24:5e:df:cd:12:90:4a:97:bb:
                    19:03:73:54:e3:8e:62:3a:09:74:c3:d2:21:ed:65:
                    91:6d:40:c5:f1:07:a7:63:6d:c0:1e:2f:9f:aa:f5:
                    db:ae:22:4a:89:78:b5:74:c5:b6:c8:25:84:e2:a6:
                    41:6c:f9:e8:7a:20:eb:b9:8a:82:a0:07:87:83:09:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:8F:FC:0E:F5:E4:6D:FD:8C:38:FD:00:D0:8B:54:D0:45:2B:AD
            X509v3 Authority Key Identifier:
                keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:51:4c:4b:43:1c:68:cf:6d:f1:4f:ef:c4:a7:02:93:09:11:
         ee:f3:36:28:35:d7:b7:1e:4c:5f:da:6c:f2:7c:51:df:7c:78:
         47:6b:cc:41:c0:b1:30:7a:ce:74:56:c4:7a:c0:66:61:c8:8e:
         f9:32:d5:0f:9f:2a:d3:f5:6c:fe:1b:8c:14:e7:c5:cd:0e:3c:
         88:f0:64:cd:69:a0:be:b3:1f:36:75:b5:2a:20:5e:7f:f7:e4:
         c2:a8:67:d8:2a:06:57:97:82:e2:f1:c9:8b:5f:5c:82:10:50:
         d1:1a:da:53:f6:d0:42:13:c5:77:f3:e4:56:4a:8b:ec:e9:bb:
         b3:9d:35:5b:9f:83:8b:89:47:a3:74:91:fa:3e:2b:6b:6d:ce:
         5a:32:cf:1c:7e:b3:ff:31:ae:df:a2:38:e3:88:9c:3b:ec:5a:
         27:01:a3:09:03:51:70:16:2b:a1:78:ab:14:a9:1e:ce:d9:99:
         ac:a1:b7:0b:d1:fa:34:e6:de:7c:4e:19:5a:b0:fe:41:af:80:
         39:f2:c6:38:2e:b2:ef:de:7b:29:18:7e:96:da:fe:7f:ea:56:
         8c:dd:84:84:62:70:64:e2:63:67:2c:b0:2c:16:93:a2:1e:ce:
         d5:9b:1c:27:01:f1:db:c9:c1:29:f8:79:e8:3a:a0:56:64:b5:
         3f:95:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:46:29 2025 by rpki-client