This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File:                     Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier:          1y303/QyLDcPYn7SMDS0qbcZ4qVQZb/pB85okb0FHaI=
Subject key identifier:   0D:0A:64:E6:00:1C:85:AD:21:63:E6:92:C8:49:DE:65:B7:0F:14:1B
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer:       /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial:       019B3D22DFD01F5EF2E659EA8E505A615006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number:          1400
Signing time:             Sat 20 Dec 2025 19:00:54 +0000
Manifest this update:     Sat 20 Dec 2025 19:00:54 +0000
Manifest next update:     Sun 21 Dec 2025 19:00:54 +0000
Files and hashes:         1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
                          2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: C4FJ538X7ZINjxIslytIOuB3TUSbDNlraHuf5ES7gs4=)
                          3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:22:df:d0:1f:5e:f2:e6:59:ea:8e:50:5a:61:50:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
        Validity
            Not Before: Dec 20 19:00:54 2025 GMT
            Not After : Dec 21 19:00:54 2025 GMT
        Subject: CN=0d0a64e6001c85ad2163e692c849de65b70f141b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:11:f7:10:94:69:3b:e0:3c:7e:32:0f:0e:f3:
                    65:ac:1a:d6:41:b5:b7:fc:60:2e:36:f9:30:71:f5:
                    dd:22:86:2f:d6:91:79:fd:92:88:df:ee:a0:71:5d:
                    99:48:5a:60:9a:70:fe:9d:61:56:48:c2:d0:27:85:
                    12:e7:3f:3d:a4:9d:c2:e7:44:02:71:ae:3e:ad:7a:
                    99:ea:29:12:e5:56:25:c0:34:25:53:c6:32:ac:16:
                    b7:ff:c5:50:73:4d:64:4f:70:0a:59:06:83:0c:d4:
                    ee:fd:a3:cb:9e:e5:8f:35:a8:18:01:f2:c0:4f:3c:
                    7b:c7:7a:83:5c:e1:70:40:38:f6:52:b1:da:be:b9:
                    79:92:75:aa:c2:3a:41:f3:3e:b6:69:54:81:3e:ba:
                    c1:fc:26:58:d0:11:48:f5:fe:a6:91:98:38:2f:f2:
                    c8:56:94:87:09:39:09:8a:69:1b:4c:f8:b4:8e:43:
                    81:cd:29:04:39:32:2f:a2:77:28:c5:b1:ab:53:f4:
                    63:47:27:d3:25:49:e8:b3:58:08:5f:50:3e:25:ba:
                    c4:54:50:ca:44:f6:4a:a6:f3:c0:2e:6c:7e:f6:19:
                    9b:fd:7a:fd:17:d2:9f:21:99:67:41:18:31:22:70:
                    8e:15:61:11:98:88:a0:26:1e:73:d6:bd:96:30:cb:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:64:E6:00:1C:85:AD:21:63:E6:92:C8:49:DE:65:B7:0F:14:1B
            X509v3 Authority Key Identifier:
                keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:1a:e2:6c:4f:88:8c:a8:94:71:18:35:67:78:d0:57:e0:
         07:16:c8:e7:24:87:4b:9d:c0:6b:09:bf:b9:f1:9a:25:82:88:
         5a:95:c0:1e:a0:69:b9:2a:38:aa:6a:02:fc:9f:10:a1:de:ea:
         b1:5c:d3:9f:79:b7:ca:61:d8:34:fa:52:34:7a:2c:f2:2b:2a:
         0f:15:4a:a0:7f:70:57:b7:69:c9:df:bb:bf:82:bc:e4:b9:27:
         c3:a0:09:84:7f:19:f4:6f:7e:c7:7a:d4:44:3a:90:d6:4c:d4:
         74:06:97:0e:7a:fd:6d:7a:b1:41:c7:11:32:d3:eb:85:b6:59:
         0e:d0:6a:21:a3:fc:f9:bf:00:e9:20:41:5a:b1:26:f6:14:47:
         a8:db:1b:3e:12:fe:4b:67:e1:f0:73:4d:2d:d2:43:10:ac:6c:
         44:aa:ea:f5:fb:f2:00:7a:05:b0:ca:5f:79:90:34:99:f6:1b:
         1b:bf:22:76:46:ca:35:30:cc:f1:3d:ef:37:72:bb:32:29:bc:
         b6:dd:fb:38:93:48:a2:64:06:6d:40:9d:1d:67:0c:64:ea:9c:
         4c:4f:d0:6c:0b:de:02:44:8c:9b:16:6f:5e:2e:a8:c5:28:fc:
         9d:16:89:81:bd:30:df:68:1a:b3:1a:7e:68:cb:56:d4:a2:32:
         95:ab:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:07:32 2025 by rpki-client