This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File:                     Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier:          LZjYaR2qz2c/ES4yBYUC0RlxYwvbJeP3353mDUMPrY8=
Subject key identifier:   C3:1E:31:F2:CB:D9:EA:A9:94:53:B9:90:CE:E2:EA:52:76:BC:C7:95
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer:       /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial:       019B65B0BD9D556DA660DB070FEC8646E1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number:          1415
Signing time:             Sun 28 Dec 2025 16:00:40 +0000
Manifest this update:     Sun 28 Dec 2025 16:00:40 +0000
Manifest next update:     Mon 29 Dec 2025 16:00:40 +0000
Files and hashes:         1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
                          2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: XBRgIF19drAIgI+X6BYdcVKem70Iqik7gCYWrsl3x3k=)
                          3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:65:b0:bd:9d:55:6d:a6:60:db:07:0f:ec:86:46:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
        Validity
            Not Before: Dec 28 16:00:40 2025 GMT
            Not After : Dec 29 16:00:40 2025 GMT
        Subject: CN=c31e31f2cbd9eaa99453b990cee2ea5276bcc795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:06:4c:e0:63:c8:c4:6e:f9:09:77:f3:ae:
                    3e:1d:98:c5:35:af:2d:40:8b:50:96:4c:63:bc:57:
                    48:b4:02:0c:e9:f6:90:07:4e:f2:20:d5:92:3b:ee:
                    46:64:e3:7b:7e:5f:fe:7c:f6:c5:75:a6:4c:fe:68:
                    e8:89:48:99:76:4b:f2:fa:3e:5b:ac:db:c3:b5:0e:
                    f9:1b:ab:f7:88:87:55:7a:78:15:f5:b5:28:3a:a9:
                    64:3f:f5:09:c2:f4:3a:11:6c:54:8b:57:a1:9d:6b:
                    31:bf:1b:bf:76:4e:8f:47:4e:3b:b6:29:f7:a2:ef:
                    4a:30:7c:04:28:a1:72:26:b7:fc:f7:da:2a:33:3f:
                    33:14:bd:58:b0:0d:5b:1b:e5:e4:4a:62:b5:17:88:
                    de:36:9e:5a:89:e1:8c:c8:e7:68:d4:2d:b7:f3:12:
                    26:b6:8c:3f:fd:75:13:14:80:d7:f4:09:a4:b3:a6:
                    d5:ee:e3:60:d5:05:40:15:f9:8f:57:b9:0f:0e:35:
                    a4:69:6f:6e:6d:6d:89:bc:0b:59:e5:14:10:21:d7:
                    b5:a4:9d:1f:27:5f:f5:7f:5f:2b:a1:1f:8a:51:b9:
                    53:6e:3d:cd:1b:0a:71:6f:b3:83:85:7b:d5:83:0e:
                    a3:26:6c:56:a6:18:61:92:6d:82:5e:7b:13:a1:2f:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:31:F2:CB:D9:EA:A9:94:53:B9:90:CE:E2:EA:52:76:BC:C7:95
            X509v3 Authority Key Identifier:
                keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:fc:f5:fb:f7:8b:5c:03:56:c7:c3:74:bd:11:1d:45:3f:8a:
         79:05:51:8f:20:d6:40:b6:74:e2:4a:ed:ed:de:3a:f6:68:43:
         c4:f9:2e:38:e0:d9:aa:ed:e4:07:78:c5:54:fd:bc:e9:a6:6a:
         e9:2e:92:46:dc:6f:13:c3:d3:2e:8a:10:52:da:0e:5b:75:6d:
         d3:a4:77:19:d9:87:58:25:e8:5a:5f:ac:f6:b9:7c:0d:e5:c8:
         3c:79:6c:44:2c:13:93:92:55:e1:47:f0:03:97:42:e2:a4:10:
         8e:b0:f1:a1:94:1f:f3:8a:54:b2:af:2d:ef:28:6a:51:c8:97:
         41:fb:19:93:27:4f:c0:19:f3:c3:47:db:02:36:f7:64:11:8e:
         c6:24:ac:bb:bd:a1:c1:f9:8d:38:b6:ec:9d:fe:99:3a:9d:1d:
         43:29:4e:29:e1:db:78:11:2c:0c:85:e3:80:b3:02:b6:40:63:
         59:b3:76:2a:65:da:34:b9:14:b8:50:6f:ad:f4:8c:fc:f7:92:
         bd:0a:c5:3c:4d:15:41:ac:7c:f7:30:0b:9f:61:81:c9:d6:7c:
         10:ca:cf:e8:b5:4f:81:80:0c:f6:21:cc:7c:43:24:bd:f3:1e:
         eb:d4:d1:d6:0f:bb:3d:29:38:2e:a4:26:e6:88:db:1b:1b:ee:
         bf:5b:b9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:52:51 2025 by rpki-client