This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File:                     tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier:          HO7bzEivHX9pElmTwSoqHZ6eMIeuzGLC7UzAi6eVr70=
Subject key identifier:   67:FA:4F:39:7B:1B:5D:C9:03:0B:34:83:62:6E:D5:3A:31:CC:FE:B1
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer:       /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial:       019B59ACA7C87EC5362E98878907DAAA4E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number:          0F14
Signing time:             Fri 26 Dec 2025 08:00:45 +0000
Manifest this update:     Fri 26 Dec 2025 08:00:45 +0000
Manifest next update:     Sat 27 Dec 2025 08:00:45 +0000
Files and hashes:         1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
                          2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: Zwnq2K5lIy/zNsk/hme6RMVRB2HCKTRcLoU41F/65Yg=)
                          3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ac:a7:c8:7e:c5:36:2e:98:87:89:07:da:aa:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
        Validity
            Not Before: Dec 26 08:00:45 2025 GMT
            Not After : Dec 27 08:00:45 2025 GMT
        Subject: CN=67fa4f397b1b5dc9030b3483626ed53a31ccfeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:e0:a4:6d:c2:a0:0a:50:f2:8d:7b:47:82:
                    e5:94:46:65:48:87:16:89:23:74:e6:91:ed:e7:94:
                    3c:a4:62:f7:d6:ac:18:92:dd:52:91:e1:55:34:6c:
                    c4:6b:68:f4:8e:5f:01:bc:b5:e3:2c:54:21:38:d5:
                    a6:f9:7f:22:48:68:da:5d:6f:fc:9e:81:31:32:bd:
                    7b:e9:a7:93:53:98:96:b3:12:56:06:94:f7:75:3a:
                    fa:fd:f5:c1:6a:6c:e4:88:d5:7b:8f:db:f4:e5:75:
                    e6:fe:01:fa:5b:dd:d9:58:70:a0:0d:ae:62:0a:89:
                    7f:f4:e7:a4:bb:11:e0:f2:fa:e8:9f:8b:db:f5:bc:
                    6e:45:39:d3:31:bf:17:66:7d:6c:61:ae:9c:27:b1:
                    be:ae:f1:fa:d2:56:ea:64:86:d5:42:c4:b9:5b:d9:
                    42:d2:47:d2:99:c8:f3:a1:be:cb:fe:b8:b9:3e:1e:
                    0e:37:4f:a9:5d:cd:e4:74:6e:47:a4:24:2e:25:12:
                    8c:fb:67:c3:16:0e:16:aa:4d:a9:e4:a8:a0:6f:4b:
                    9b:b0:e2:23:04:7e:c1:ad:86:82:d6:b5:a5:85:dc:
                    e6:95:de:25:db:40:0a:22:13:cf:4f:f2:bb:c8:da:
                    30:58:8e:61:17:f7:0e:09:f2:ec:1e:73:96:50:7f:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FA:4F:39:7B:1B:5D:C9:03:0B:34:83:62:6E:D5:3A:31:CC:FE:B1
            X509v3 Authority Key Identifier:
                keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:68:60:85:a4:e3:a1:5e:45:44:1c:99:9d:fc:7c:24:88:
         94:65:83:34:d6:73:7e:e6:bb:7c:cd:05:67:d1:db:e5:a4:03:
         d5:f9:19:d6:0c:ea:de:aa:58:fe:80:6d:77:f0:65:26:d1:c7:
         dd:7a:a6:65:aa:f4:85:15:ea:35:2d:f0:80:96:5e:56:c7:f0:
         89:4a:b6:b0:40:4d:b0:65:39:c5:fd:a5:72:4b:86:11:e9:70:
         b9:24:97:62:c6:4d:45:1e:94:a4:7e:ff:41:27:cf:db:6e:8b:
         51:d2:10:1f:ec:f2:20:72:3a:53:4f:3a:f6:33:3e:63:58:73:
         66:13:0e:45:ee:ef:c7:13:96:08:df:74:64:af:80:98:5a:80:
         a4:4b:e9:cf:4b:50:ea:85:cd:9b:03:7a:f5:62:44:58:72:aa:
         4f:f3:52:fb:d4:64:d0:12:29:72:d1:f7:d8:d0:a6:eb:97:b8:
         09:8a:a3:ab:fb:2e:83:4b:c1:77:f7:58:23:e4:83:7b:0c:57:
         e1:d0:ef:d6:26:dd:0a:05:e6:94:0d:52:e1:48:42:1a:f5:23:
         f5:97:59:12:16:96:a1:4c:73:cf:f3:59:64:0e:d5:f8:ba:f2:
         9f:dc:96:21:b7:f4:06:ff:42:e7:d6:69:ad:6a:7e:22:d9:41:
         55:0b:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:43:25 2025 by rpki-client