This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File:                     TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier:          uWMLC0rkURA7OBLAlyNGkVQHI4MuYIQPjk1/NrTuvZo=
Subject key identifier:   0F:6C:B5:FB:39:CA:8B:22:8B:E8:DC:F9:C5:8B:4B:CC:84:42:3E:99
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer:       /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial:       019B2A7878A4F5E734C1065F48583D7D5BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number:          0918
Signing time:             Wed 17 Dec 2025 04:01:36 +0000
Manifest this update:     Wed 17 Dec 2025 04:01:36 +0000
Manifest next update:     Thu 18 Dec 2025 04:01:36 +0000
Files and hashes:         1: ABn8P8ur6kX7bClq82flMqvErqM.asa (hash: RFlfK21yrghS19JPEbu5rJ0FdRlXS6JFOq5iELrrCi0=)
                          2: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: Z4QupEqGMemGfdzuAgJNaX7uANW/5mcMU6FaqmKQmI0=)
                          3: eaPs4hBLMn8_uYbwGtb-aHFlTMw.roa (hash: J6ydyveQsR9vsUeW4Dd9AR32+AJgGbJK7r7hogwsc4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:78:78:a4:f5:e7:34:c1:06:5f:48:58:3d:7d:5b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
        Validity
            Not Before: Dec 17 04:01:36 2025 GMT
            Not After : Dec 18 04:01:36 2025 GMT
        Subject: CN=0f6cb5fb39ca8b228be8dcf9c58b4bcc84423e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:6c:38:f7:55:bb:2d:7f:1b:03:b7:1e:7b:
                    37:99:a3:7f:d7:9e:95:39:72:ee:68:a4:7c:3f:71:
                    ff:3c:aa:cc:0b:0f:4c:26:e3:30:d9:d6:6d:df:8a:
                    12:b5:89:e3:bb:eb:9f:80:0f:ff:23:b2:5e:a5:59:
                    ef:07:34:b7:75:32:19:0e:01:83:2a:48:19:e1:36:
                    35:ff:ab:58:f7:62:28:84:04:c7:c6:9c:4c:f1:37:
                    c2:06:11:21:33:11:6d:89:07:be:4f:dd:06:c2:2b:
                    1e:dc:48:14:5f:21:9c:63:a7:2e:8d:21:a2:7c:87:
                    a1:cd:af:fd:9e:bf:a7:47:f2:16:03:47:fe:78:19:
                    d5:77:42:31:64:a4:7f:d4:d2:8d:ee:ca:1b:d4:f3:
                    71:24:f0:ea:6f:6b:bb:a7:55:e5:a2:8d:57:2b:14:
                    83:a9:dc:f6:34:23:83:1e:7a:df:cb:4a:12:1e:12:
                    cc:86:d8:86:ce:e0:18:62:8a:da:71:25:bb:ea:db:
                    dc:b7:5c:74:b0:a8:5c:ff:eb:44:09:4f:2a:e7:1c:
                    5b:27:8b:e8:07:75:8f:f2:7e:67:aa:16:3c:f4:a1:
                    fd:4d:b7:71:6e:56:62:0c:87:64:71:54:bf:af:46:
                    97:c9:03:a9:b2:7f:de:fb:bb:36:07:20:1f:6e:46:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6C:B5:FB:39:CA:8B:22:8B:E8:DC:F9:C5:8B:4B:CC:84:42:3E:99
            X509v3 Authority Key Identifier:
                keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:67:9a:f8:b9:e2:1c:63:3e:76:d3:50:32:fa:fc:63:c2:66:
         35:69:63:d0:e9:99:14:77:86:b1:dd:8c:c6:2e:20:1b:76:47:
         ed:8c:fc:c2:f6:b7:b0:0e:ae:7f:ac:ce:d2:35:80:4f:03:84:
         a2:8c:e4:a4:f6:3c:9b:6f:1f:ae:20:d1:8a:e1:19:50:6c:34:
         59:6b:55:60:4d:b6:18:8b:e1:26:a5:65:16:04:83:3f:f7:72:
         ad:3f:d2:71:17:17:3a:11:3c:f0:da:17:38:4d:ff:6f:a2:17:
         e2:b4:0e:2d:ac:0b:9e:d6:7c:cf:71:e0:e6:e0:37:10:9d:66:
         1f:33:39:ad:be:fd:d3:a1:ba:38:ae:a9:46:b8:c0:12:27:73:
         74:ee:16:c5:d1:c1:d7:2c:40:c7:76:b2:19:c1:2f:55:06:79:
         30:a3:33:9b:63:66:b5:e9:13:ea:cb:cb:29:10:3c:9b:6e:61:
         b1:bb:93:62:41:65:10:11:23:2f:12:d0:40:8e:9a:f8:dd:05:
         57:5c:1b:92:05:5f:67:60:14:8c:38:fb:8e:83:e7:2a:d8:0b:
         5a:57:fc:93:05:4d:07:61:ef:e4:08:e6:a0:6b:bc:21:57:23:
         83:59:11:8d:23:a3:c9:8c:60:31:5a:af:ba:5c:24:1b:89:f5:
         bd:b4:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 08:17:41 2025 by rpki-client