This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          Yv/n7d2hESVnrTGd8kBTpj+rL90QT7bodKXm8ieDwDE=
Subject key identifier:   62:82:AE:5A:57:4A:C9:5F:40:5F:00:FE:80:8B:F5:33:88:F3:60:DF
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019B3720711959D8F39AD295EDF95379CEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1244
Signing time:             Fri 19 Dec 2025 15:00:31 +0000
Manifest this update:     Fri 19 Dec 2025 15:00:31 +0000
Manifest next update:     Sat 20 Dec 2025 15:00:31 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 87zgjjCTe3uH/nm5HUKsqW9NzeHTuIyKp1jZ0582rbs=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:20:71:19:59:d8:f3:9a:d2:95:ed:f9:53:79:ce:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Dec 19 15:00:31 2025 GMT
            Not After : Dec 20 15:00:31 2025 GMT
        Subject: CN=6282ae5a574ac95f405f00fe808bf53388f360df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:30:bb:ab:2e:f3:7a:30:21:e8:86:ee:aa:
                    d8:bf:38:ec:22:f0:96:4b:a4:96:43:66:3a:b8:05:
                    f9:bb:fb:28:9d:e1:16:64:4f:46:d4:cf:cf:dc:e6:
                    6f:eb:6c:6c:ae:a2:b2:16:b7:5a:aa:ca:12:7e:25:
                    5b:27:e7:eb:8f:9f:74:09:9f:eb:3b:63:31:27:a9:
                    75:e0:d6:46:d1:3e:88:7b:08:75:50:f0:12:c9:8f:
                    3e:4c:08:46:0f:62:80:bf:29:d8:53:c1:3c:06:09:
                    c0:ba:e6:a3:fc:8e:f0:49:a1:40:e7:57:48:6c:33:
                    17:1e:23:e5:72:8a:60:b8:17:92:70:23:1f:e9:d6:
                    c9:5a:0f:71:a3:90:5c:c3:5e:8b:bd:3d:49:88:1f:
                    bb:62:d9:16:08:32:f3:b7:50:4a:3c:38:ee:02:33:
                    7b:35:0d:bf:f4:4e:12:a2:79:74:13:18:33:ef:78:
                    0f:a0:7a:9e:7f:93:3b:08:a3:a1:9b:52:40:83:2f:
                    14:a4:7e:78:f4:2f:3b:b5:27:29:b5:fc:b9:af:7b:
                    03:55:f2:47:44:b5:9e:9b:b9:d3:19:90:1c:c2:0c:
                    9f:ea:84:ee:bf:bf:e5:e7:5f:b9:1b:d5:a4:e2:e8:
                    48:1a:83:08:03:d7:ff:bb:11:c9:b2:4b:b1:2b:cc:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:AE:5A:57:4A:C9:5F:40:5F:00:FE:80:8B:F5:33:88:F3:60:DF
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:62:9c:b7:fc:9c:6d:55:c5:b4:89:7d:fe:44:a8:bf:e4:3f:
         fd:6e:d5:dc:c0:4c:36:86:b8:7c:dd:02:e6:19:87:37:e6:d8:
         e5:58:12:2e:2c:ba:b9:fd:4d:81:d8:38:11:cb:09:4e:3a:41:
         b4:f8:f8:2e:98:92:b4:48:d4:c1:76:1b:f5:a2:33:be:95:c2:
         19:02:9d:58:71:07:bc:88:b0:32:33:84:10:fe:cc:0a:c1:49:
         d9:7d:47:29:bb:03:0b:0d:80:b7:be:66:4e:1c:73:fd:49:44:
         90:04:6e:73:09:c5:e7:5e:e9:c0:8b:91:bf:d7:18:16:cb:7e:
         07:de:df:e9:ff:71:ac:5d:9b:d2:a5:67:22:d6:0a:82:da:f1:
         3c:1c:38:f9:18:21:f5:15:e4:33:0e:b2:42:67:9a:74:5f:6d:
         f8:c3:70:35:f3:4c:22:61:d7:ae:79:e5:c2:5a:12:a8:83:5a:
         8f:02:59:28:91:ae:c9:08:c1:09:cf:73:5c:82:ab:2d:a9:08:
         cf:c8:eb:cc:68:b6:9a:e3:04:9e:8d:d2:ec:ed:6d:32:59:a1:
         f9:ad:e6:84:a6:72:b9:d8:e0:7e:48:0e:08:f4:29:88:b6:4b:
         25:9a:3f:9e:b7:07:b9:0d:b6:54:38:58:f7:1b:43:2d:24:18:
         61:60:dd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:57:30 2025 by rpki-client