This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File:                     1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier:          0X+MivNkAU0MRI1GiRfVkj/eI0JL4pOZHLVIfTCzbF8=
Subject key identifier:   E9:FB:74:D0:92:26:87:E2:9C:0C:19:49:8B:3D:DE:52:2E:5B:99:6F
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer:       /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial:       019B1E73AA2D7E74822EC9624AD199CB17D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number:          142F
Signing time:             Sun 14 Dec 2025 20:00:55 +0000
Manifest this update:     Sun 14 Dec 2025 20:00:55 +0000
Manifest next update:     Mon 15 Dec 2025 20:00:55 +0000
Files and hashes:         1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: wX1P/uc8ht+fDwzR6dSAWox1B4cMBMM8tFtyKUlzqVE=)
                          2: OwskQb4uWXAM3BST7CyJITEmG0A.roa (hash: kimIk4ViTfOZBO8RES3wd5ZfNkXzL5WJCpaQ5TXVjck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:73:aa:2d:7e:74:82:2e:c9:62:4a:d1:99:cb:17:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
        Validity
            Not Before: Dec 14 20:00:55 2025 GMT
            Not After : Dec 15 20:00:55 2025 GMT
        Subject: CN=e9fb74d0922687e29c0c19498b3dde522e5b996f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:f9:26:10:ea:58:95:d6:67:c5:27:ed:74:
                    83:71:f3:88:35:e6:c5:7e:2b:74:34:b1:fe:c0:df:
                    12:fd:77:e3:5f:9e:25:5f:aa:b4:81:a5:62:60:e5:
                    27:89:a4:f6:48:0e:ff:14:12:6f:b0:66:f5:2b:13:
                    72:c6:bb:6b:87:36:bf:54:d7:fb:5c:ab:ce:aa:e6:
                    aa:ac:e5:c0:bd:1a:81:af:03:b7:3b:b6:cd:59:d7:
                    f9:a3:a9:f5:12:ca:6c:39:db:0c:36:f5:ac:1d:dc:
                    21:b5:95:74:e1:4d:c7:4b:e4:36:8b:0f:f0:6d:c6:
                    2d:b3:9c:99:8b:59:34:ab:9c:9d:8d:35:b2:fa:fa:
                    fc:c0:37:16:ed:ed:73:fa:58:95:f9:0a:d7:21:ac:
                    52:f3:ee:84:f4:b2:4d:5a:15:65:6f:23:18:33:6f:
                    8f:7a:6e:3e:79:e0:70:22:f7:d4:98:98:f0:33:9e:
                    a5:d4:e0:d8:cf:8f:2e:23:0c:81:77:ca:c6:a4:89:
                    87:24:27:07:6c:3e:59:99:96:a5:1f:bd:95:6b:9c:
                    21:f1:83:8d:a4:f4:e0:95:60:98:06:20:60:9e:79:
                    69:8b:23:40:b1:34:fc:45:cb:8e:75:18:7b:43:03:
                    7b:28:2b:4f:ab:fa:2f:f8:0b:3f:72:c3:ec:6e:4e:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FB:74:D0:92:26:87:E2:9C:0C:19:49:8B:3D:DE:52:2E:5B:99:6F
            X509v3 Authority Key Identifier:
                keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:73:30:13:1f:a7:6f:4f:22:9b:7a:aa:e6:7c:47:a9:22:
         5b:e7:f9:68:fb:2d:b2:04:36:3a:5c:27:f4:da:1d:e2:4b:6b:
         d3:16:44:20:09:60:fb:da:a8:b6:e7:d2:1b:18:ac:a2:a7:c9:
         04:bb:fa:77:15:6c:09:18:f5:ce:e6:c8:52:69:4f:56:33:84:
         39:3d:7c:d0:12:f0:0e:d2:41:1b:fa:47:53:31:b7:d7:bd:59:
         66:ed:87:8c:39:8b:e3:86:da:b9:97:17:45:30:f2:f2:c0:48:
         2e:71:b0:39:ca:b0:6d:e4:ea:34:6a:b6:e1:8e:0f:65:21:ba:
         ba:54:9c:04:27:ee:4d:3b:0b:82:7c:8d:10:00:40:3f:7b:c0:
         97:c2:31:1a:67:53:a2:b1:a9:df:73:b1:7a:a6:a8:60:16:26:
         70:c8:0b:0e:76:11:94:cb:bd:39:95:26:57:25:82:37:d5:f0:
         9c:a6:ea:16:6a:17:eb:75:5f:d8:20:af:d5:76:4b:d0:68:3e:
         9d:94:5a:c9:5f:02:c6:76:76:57:ba:39:c1:c4:bb:e1:96:66:
         a9:66:73:98:70:be:cb:1d:bd:f7:95:33:cf:2f:75:08:72:da:
         ae:3c:d3:60:92:c3:ee:cc:53:f8:3a:84:0c:b9:33:5d:54:6c:
         c4:63:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:55:10 2025 by rpki-client