This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          6DV1oh/BTPEPnzJe5roqOoqFU5yoFmN9JoFjlMGWXxg=
Subject key identifier:   6E:EA:D7:C2:FC:28:29:67:95:55:6D:A6:82:A2:C7:CA:D3:3C:55:13
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       019B40C8A8A3F6494D92DAD5AD72F79B5294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          07DA
Signing time:             Sun 21 Dec 2025 12:00:50 +0000
Manifest this update:     Sun 21 Dec 2025 12:00:50 +0000
Manifest next update:     Mon 22 Dec 2025 12:00:50 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: op2TdKTUMaWHR8K8F5bn9DB21G3sM3GgXev5jIOd7Zg=)
                          2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
                          3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:c8:a8:a3:f6:49:4d:92:da:d5:ad:72:f7:9b:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Dec 21 12:00:50 2025 GMT
            Not After : Dec 22 12:00:50 2025 GMT
        Subject: CN=6eead7c2fc28296795556da682a2c7cad33c5513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:6d:d3:e2:b9:28:bd:ba:54:fe:c4:ff:ca:
                    bc:23:4e:db:72:23:40:75:0f:b2:e6:de:5d:72:85:
                    dd:43:ee:9a:8d:b3:17:e6:dc:da:5b:ee:ec:7c:f5:
                    d1:7e:d4:22:f9:37:8f:ad:64:19:0d:d0:51:62:ed:
                    70:ce:8e:e7:ce:61:03:17:24:38:4b:fd:33:cf:d8:
                    95:b0:67:49:ef:8a:8e:dd:2a:08:d6:a8:ee:88:a4:
                    ea:37:ca:21:20:7f:8e:03:82:f1:8b:f3:b7:0d:dc:
                    c0:09:04:98:b1:09:33:1c:f2:e7:22:c5:4a:cc:47:
                    fc:f7:ab:73:c3:bb:13:16:9f:c8:ed:70:5c:0c:17:
                    40:29:07:58:5e:2f:13:73:74:8d:dc:74:d1:41:6c:
                    a6:9e:35:f2:85:2c:7a:6d:24:51:ba:b1:18:9c:bb:
                    70:fd:d8:4d:b8:e6:15:50:eb:fd:03:e1:df:a5:b7:
                    34:d9:35:82:74:26:9b:ea:5e:93:9d:b4:da:e7:b7:
                    c8:17:78:8c:d1:33:26:97:79:30:f7:de:09:6b:0e:
                    bb:b9:22:bc:4a:46:df:6e:57:a4:73:0a:c5:c3:68:
                    51:f9:6c:e8:61:19:5c:c4:f9:6c:d4:fb:d7:56:85:
                    d5:d0:42:60:cf:13:55:23:03:13:b6:5a:95:fa:6e:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:D7:C2:FC:28:29:67:95:55:6D:A6:82:A2:C7:CA:D3:3C:55:13
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:97:f2:04:0e:0c:af:3e:8d:16:32:98:39:19:9a:fb:df:
         48:80:d8:8e:f6:e5:e7:2b:1f:1c:4b:ec:72:14:be:cb:e5:e3:
         a5:85:51:40:8f:7b:b7:49:35:37:53:c6:81:06:ff:53:ed:f1:
         a5:ab:31:bf:ee:fa:f3:13:4c:f2:b1:ba:57:8e:92:f3:5d:d5:
         c0:6b:02:92:39:50:29:71:56:89:4b:f2:6a:7e:24:5b:d2:86:
         e8:3e:0e:35:b1:f6:8c:75:12:90:17:aa:3b:87:fb:d6:47:28:
         a7:aa:db:4f:29:b2:18:71:42:bf:ae:0f:42:08:16:6d:7b:c0:
         bd:b6:54:56:ba:58:3b:47:9a:79:ef:7e:4a:73:8a:90:8f:31:
         97:f2:1a:02:93:87:51:e1:a9:77:0c:19:44:75:e8:91:db:47:
         26:c9:4d:d4:9a:b8:11:54:5b:d5:1f:a6:0a:d4:54:b9:53:e8:
         d8:03:80:67:ef:44:d8:b8:5b:45:8b:96:d2:4e:ca:20:8a:60:
         2e:24:21:29:cd:6e:a1:83:9e:2a:80:b4:f6:23:8e:9e:14:dc:
         9e:19:ba:f7:d7:ee:fd:4c:d6:1e:5d:a1:a2:f7:df:85:5e:19:
         80:00:75:1f:5a:a4:2f:e0:3f:63:b7:8f:08:aa:98:f3:50:98:
         3c:1b:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:42:54 2025 by rpki-client