This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File:                     73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier:          YG9T7bDw2KVafA/HmaZ66VMVcRHcD3v+SCxqOwD++SU=
Subject key identifier:   56:AB:93:D1:BF:F7:9F:8E:8B:F1:94:55:D8:F9:64:16:4B:AE:59:97
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer:       /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial:       019B6D6A47E1BA2919183FAAF82CB126FEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number:          17A3
Signing time:             Tue 30 Dec 2025 04:00:40 +0000
Manifest this update:     Tue 30 Dec 2025 04:00:40 +0000
Manifest next update:     Wed 31 Dec 2025 04:00:40 +0000
Files and hashes:         1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
                          2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: cq9WC7y+bwDHlG82YnwIMkqDVq6BwnI6Ou6vpauE+Ic=)
                          3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:6a:47:e1:ba:29:19:18:3f:aa:f8:2c:b1:26:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
        Validity
            Not Before: Dec 30 04:00:40 2025 GMT
            Not After : Dec 31 04:00:40 2025 GMT
        Subject: CN=56ab93d1bff79f8e8bf19455d8f964164bae5997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:f1:5d:f9:ca:00:87:f5:d0:d0:54:b8:3f:
                    29:b4:33:60:79:e3:4e:88:d6:ba:da:59:22:12:57:
                    85:15:f2:1b:81:65:cb:00:95:df:9f:29:f2:de:a5:
                    cf:03:f4:89:ca:2a:c5:c5:41:2e:9a:36:ac:ff:ad:
                    f0:86:36:93:05:d4:86:bb:f0:11:1a:32:20:ee:ca:
                    9c:21:bb:5e:cf:47:73:3a:47:03:59:13:a9:66:df:
                    85:0a:71:1c:fc:e1:49:ae:d6:a9:d8:cf:38:85:b5:
                    69:1e:88:d6:59:58:0d:e6:a3:38:97:1a:e4:6f:24:
                    44:b8:ea:df:3e:e4:de:f8:a5:a2:4a:02:c3:93:4a:
                    d0:26:67:a2:0f:0b:6e:0b:55:25:34:a5:db:df:60:
                    94:d3:21:0f:a9:e3:ef:e0:3f:f2:06:0c:e2:13:76:
                    f3:b6:d8:2d:16:c0:04:bb:27:d1:7b:c6:0d:b5:e4:
                    9a:94:dd:f2:ea:3b:1c:25:5d:00:f4:87:28:b0:1c:
                    bb:0f:e4:4c:82:bd:3e:16:22:88:54:75:6c:5e:74:
                    30:a8:e6:07:29:1a:18:c1:d2:bb:08:09:f3:51:dc:
                    e1:79:90:d8:13:82:86:cc:51:b7:81:87:33:51:41:
                    7d:80:7b:c0:a4:bb:0c:3b:57:ff:27:28:49:48:30:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:93:D1:BF:F7:9F:8E:8B:F1:94:55:D8:F9:64:16:4B:AE:59:97
            X509v3 Authority Key Identifier:
                keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:73:6d:84:86:89:44:3e:2f:96:09:3c:f9:fb:7a:d9:18:
         39:6d:88:d0:b7:d9:b5:bc:0c:cf:d9:f7:69:dc:f4:19:19:2c:
         92:3a:58:ae:73:a8:92:62:ce:86:57:ee:4f:2b:00:b2:bb:57:
         95:66:b5:f6:29:1a:da:c4:93:07:8f:16:b7:8c:3b:87:60:11:
         70:24:b2:29:b6:24:82:4b:ac:9e:48:44:47:da:56:ca:11:15:
         08:63:45:d0:f4:9d:b0:cd:0a:89:41:34:cc:1f:49:1b:b8:87:
         6f:a0:dc:a0:78:87:d8:43:e3:8d:60:9c:e1:56:aa:a2:6e:9e:
         c6:8f:a3:9e:2e:af:58:a7:26:3c:10:a0:5b:d7:46:a5:64:57:
         f7:12:7a:ce:fb:8b:71:07:45:80:d3:09:c1:a4:cf:9e:a8:cb:
         1a:99:c6:c1:ec:29:b4:4a:ec:51:68:e0:27:a4:45:14:63:fe:
         f0:cc:23:e7:8a:cf:d6:fc:a0:c1:d6:31:51:b0:f4:93:e3:27:
         ae:0a:8d:1a:53:3e:fe:83:1b:14:46:aa:6e:58:de:e0:56:c0:
         1d:cf:5c:31:d6:43:46:d7:13:2d:44:05:b2:3d:8b:3c:b3:0b:
         3f:6a:b1:da:a1:7e:c7:c8:4a:bb:df:00:a6:e4:1d:ea:43:f9:
         4e:02:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:32:47 2025 by rpki-client