This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File:                     tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier:          8lmXlreAWncqJlVmV3gwis9gVojJN9jYONhLGNhGPX0=
Subject key identifier:   71:45:EC:9C:7A:C5:57:DC:9D:92:CF:D2:87:22:16:93:CE:BD:8D:2E
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer:       /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial:       019B153A295F9AE94DDD6C3C5FC344961774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number:          14DB
Signing time:             Sat 13 Dec 2025 01:01:31 +0000
Manifest this update:     Sat 13 Dec 2025 01:01:31 +0000
Manifest next update:     Sun 14 Dec 2025 01:01:31 +0000
Files and hashes:         1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
                          2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: RqDxjjAMsbku9bTZPa63iYraBKrlo7A4BeFeqDFkd9E=)
                          3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:15:3a:29:5f:9a:e9:4d:dd:6c:3c:5f:c3:44:96:17:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
        Validity
            Not Before: Dec 13 01:01:31 2025 GMT
            Not After : Dec 14 01:01:31 2025 GMT
        Subject: CN=7145ec9c7ac557dc9d92cfd287221693cebd8d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:3d:2f:2b:85:ca:30:ae:73:c5:d4:77:b6:
                    20:c3:4c:e3:b5:8b:f1:6b:8d:15:00:d3:c8:05:5b:
                    5a:7e:11:14:cc:66:97:c6:11:c4:a5:60:6a:c5:6f:
                    85:a0:61:77:ab:b1:ce:4a:9f:a4:33:3a:19:4b:96:
                    30:e3:47:f7:02:92:11:07:16:03:9a:50:97:14:25:
                    1e:04:5c:70:92:12:11:58:b5:4f:1c:21:b4:82:5c:
                    6e:30:32:71:90:cd:d1:a5:d8:ba:dc:5f:a1:2b:51:
                    c7:fb:14:c2:2f:9a:d4:61:6d:87:aa:9e:7e:14:30:
                    d1:5b:02:1a:bd:91:c8:65:51:59:66:41:61:0e:0e:
                    8f:fb:89:87:c0:cc:9e:3e:b9:9b:87:56:5d:79:03:
                    6f:66:9f:e5:41:a2:43:fb:9e:fd:72:47:24:27:14:
                    d6:0e:d9:26:4e:8e:c5:c0:06:47:55:b8:63:47:de:
                    bf:c4:0c:51:44:7e:cb:d5:d6:f5:c5:a2:5d:d8:b6:
                    1d:b4:28:75:72:d1:70:03:7e:54:85:c7:ef:81:81:
                    c5:4d:b3:62:47:d6:81:61:b4:d9:23:9a:04:8b:44:
                    6a:84:2d:de:0b:58:89:ef:d8:ba:3b:e2:f6:dd:a7:
                    18:83:88:60:db:b4:bd:44:a0:90:25:a2:a0:eb:45:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:45:EC:9C:7A:C5:57:DC:9D:92:CF:D2:87:22:16:93:CE:BD:8D:2E
            X509v3 Authority Key Identifier:
                keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:2c:b4:95:51:80:91:3b:6d:a6:e6:ea:6c:5e:d0:b6:59:
         50:10:6b:2a:0b:32:40:28:27:df:e7:d7:aa:ca:6f:14:51:d6:
         9c:bd:75:b4:39:e7:a9:10:83:b7:6d:c9:ca:eb:d6:ce:77:76:
         c4:fb:62:51:e4:ff:b2:f5:8b:46:9b:7d:24:08:e0:75:e5:fb:
         ab:7a:33:e6:71:59:02:4c:34:4f:3a:f6:ee:31:e5:67:ad:fa:
         7f:68:26:4b:0b:3c:92:34:04:e7:39:ea:9c:d8:8f:38:af:65:
         7b:45:c0:7f:51:45:93:d7:f1:a2:1f:93:b9:72:2b:48:bc:eb:
         2a:56:b9:ee:23:19:8d:c2:8a:c0:e8:c7:ff:2f:81:44:b7:da:
         bd:bb:e7:9e:0c:29:3f:bc:86:36:eb:5c:83:be:08:fb:1f:ba:
         98:8c:14:c2:d7:03:69:5f:8a:76:ea:6b:0e:9e:ee:5e:70:3e:
         84:9b:30:52:a1:ac:be:8f:d6:16:40:44:7f:59:27:81:5b:cd:
         1d:2d:e8:2f:0b:73:77:d1:d5:5e:c3:bb:9c:d1:58:33:0c:32:
         ac:b7:93:be:a8:16:87:7d:84:8c:f9:5d:47:96:10:a8:23:42:
         a7:3d:3a:74:15:3a:1b:e3:33:93:c2:ab:1c:fe:e5:d6:82:bd:
         de:d9:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 10:44:06 2025 by rpki-client