This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File:                     auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier:          HSTmhWRxczVl3h4fDNVHzSfYG5vwpp/WLEcSorzx+zs=
Subject key identifier:   58:34:FB:4E:C8:6E:14:CC:6F:5E:B9:B3:A1:3C:BE:84:4C:DC:81:A7
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       019B484B57280E60D75484A6C2F415D11E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number:          1242
Signing time:             Mon 22 Dec 2025 23:00:55 +0000
Manifest this update:     Mon 22 Dec 2025 23:00:55 +0000
Manifest next update:     Tue 23 Dec 2025 23:00:55 +0000
Files and hashes:         1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: TPOPPmv+TkNNh/UHR40ovjC5qg1K/hPZf8Snt3wHRkU=)
                          2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
                          3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:48:4b:57:28:0e:60:d7:54:84:a6:c2:f4:15:d1:1e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Dec 22 23:00:55 2025 GMT
            Not After : Dec 23 23:00:55 2025 GMT
        Subject: CN=5834fb4ec86e14cc6f5eb9b3a13cbe844cdc81a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:4c:8d:6c:a9:13:26:65:56:7b:98:d1:1a:
                    01:3c:f7:a6:29:94:cb:01:f4:08:a5:11:7a:36:4d:
                    6d:5d:71:8e:cd:c1:bf:a4:dd:16:91:4d:a3:1d:99:
                    b1:f9:5e:88:3f:fc:ec:5b:9a:d5:18:37:7d:3b:a5:
                    43:29:e4:48:25:54:78:53:86:c1:a3:fe:5a:9a:b2:
                    ea:d7:02:6d:5c:d0:d9:6e:94:87:8b:1d:52:76:7a:
                    91:e5:62:c1:4f:f6:57:2a:14:b2:b7:22:36:ea:9c:
                    4a:11:aa:7c:91:75:bc:b4:f8:22:79:5a:9f:0b:7c:
                    67:5e:43:4a:ab:71:a0:16:f9:58:11:94:89:f9:b4:
                    22:ba:ca:60:63:de:c9:84:cb:9b:79:ba:e3:70:a5:
                    e6:7b:0f:76:b2:de:8c:62:4b:75:62:45:e6:a4:f9:
                    e6:be:22:0b:c5:4c:91:27:7e:f4:92:62:aa:e7:85:
                    5c:4d:81:a0:b9:17:fc:58:1f:66:08:96:a1:e5:82:
                    dd:15:2c:d4:14:4d:6f:c0:e1:e6:16:f0:6b:13:b9:
                    e8:e4:a4:55:b2:84:5e:e7:51:72:07:c3:2b:d3:2c:
                    3b:5b:ab:e4:be:4d:e8:ab:12:97:e1:76:1e:8d:5d:
                    69:c7:02:2a:3d:5c:42:ca:89:db:6e:1f:56:11:fc:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:FB:4E:C8:6E:14:CC:6F:5E:B9:B3:A1:3C:BE:84:4C:DC:81:A7
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:79:63:ee:6c:9b:dc:4c:e5:81:bd:64:31:7d:bc:c3:13:
         c0:fc:9f:da:b3:cd:e7:2f:32:0e:85:ed:05:a2:52:0c:96:ae:
         07:29:12:af:00:dc:ea:69:00:3b:ea:74:f9:46:4f:1b:1b:69:
         cf:4b:f7:9f:52:72:fa:6a:e7:ed:3a:d5:b1:84:6e:11:58:47:
         9e:f8:cf:9f:f5:c7:0d:9b:6a:b3:79:cf:c2:d8:3a:5c:f1:dd:
         33:27:54:c9:7c:77:59:42:cb:96:9a:c9:c5:77:f5:04:6f:dd:
         2d:bb:84:20:87:44:ee:d6:b9:16:7e:3f:89:b1:e4:d8:68:2a:
         3b:78:12:60:3a:2c:96:b3:39:ea:00:d7:43:b1:be:3d:31:95:
         fe:2a:dc:dd:d3:f0:51:5e:af:62:f6:71:af:bb:cc:0a:49:d3:
         2d:0e:25:1c:6a:86:b1:a4:19:84:f9:4f:d0:5a:a6:4e:15:97:
         f9:66:d7:35:18:bc:98:69:bc:bd:81:f7:07:c5:86:bb:90:e3:
         7d:34:5b:73:4b:08:fb:37:2f:ec:b6:fb:bd:42:a7:ae:85:2f:
         86:87:9b:33:90:59:63:b0:3d:0f:2a:60:27:78:fc:92:da:50:
         93:ce:f3:ad:fb:1b:ba:a1:20:d4:4d:f3:30:cb:bf:65:3f:ee:
         b4:87:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:07:37 2025 by rpki-client