This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File:                     tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier:          x1yywFkr3LcyUqWXmx+TGF6+Mhe3Y/2lWNBRUZjygM8=
Subject key identifier:   E9:AB:DB:B2:9B:18:EC:F6:5F:03:45:74:B0:5C:52:07:EA:4B:9F:F5
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer:       /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial:       019B3AFDAEBC80BBE9387EC9E73B67376B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number:          150A
Signing time:             Sat 20 Dec 2025 09:01:02 +0000
Manifest this update:     Sat 20 Dec 2025 09:01:02 +0000
Manifest next update:     Sun 21 Dec 2025 09:01:02 +0000
Files and hashes:         1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
                          2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
                          3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: rTkWM78pbWTYIu04kHb4cPXWJf1yRq1y2sY4yDrgn+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:fd:ae:bc:80:bb:e9:38:7e:c9:e7:3b:67:37:6b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
        Validity
            Not Before: Dec 20 09:01:02 2025 GMT
            Not After : Dec 21 09:01:02 2025 GMT
        Subject: CN=e9abdbb29b18ecf65f034574b05c5207ea4b9ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:63:c4:17:3d:99:1c:6a:7e:ae:56:8a:b8:
                    94:f5:e9:96:47:d3:5e:81:c9:b7:eb:ac:26:92:97:
                    c4:ff:bc:69:cb:57:67:64:0c:c6:77:f5:02:d9:98:
                    44:26:af:52:e6:b6:44:a6:97:b7:5e:7a:84:35:2f:
                    7d:21:e3:43:17:c4:39:c9:00:42:c0:96:ae:29:f9:
                    21:ea:5c:1f:b0:09:af:ce:bf:65:61:33:1c:69:ff:
                    e4:7a:79:90:15:84:c9:c9:96:c2:72:ec:ca:08:63:
                    ec:e1:13:4b:9b:24:ba:c1:ff:9f:08:57:25:6e:4d:
                    9c:d2:89:c9:bc:1c:ed:aa:26:63:79:5d:04:ad:a3:
                    e8:df:53:5b:0d:c0:e1:a4:b8:26:0a:b1:c1:e9:ab:
                    8f:51:f7:0f:4c:60:a0:b4:40:9b:db:42:7d:4a:5f:
                    81:b8:1f:1d:7a:fd:1a:d3:c1:7c:f7:18:68:37:8b:
                    e1:b7:11:a7:23:8a:37:35:de:03:81:b4:bf:4f:c0:
                    70:da:f6:59:3b:b4:e8:4e:66:34:a0:3c:6d:63:78:
                    4e:71:35:84:28:c9:35:95:5a:af:c3:57:fa:2c:3b:
                    6a:22:a3:3b:69:f1:71:e4:6d:5d:2d:d9:d0:68:ae:
                    17:c0:06:24:ca:d7:db:da:93:5e:13:39:3a:56:90:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:DB:B2:9B:18:EC:F6:5F:03:45:74:B0:5C:52:07:EA:4B:9F:F5
            X509v3 Authority Key Identifier:
                keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:f8:c3:46:bf:39:cd:d5:17:aa:69:2c:fa:8a:44:f7:50:
         99:2f:1d:a8:a9:38:bc:b7:f3:f6:35:d3:22:a3:c7:90:31:15:
         87:75:43:4e:0a:9d:3b:a6:36:2b:f7:21:ff:8e:7e:32:52:f4:
         68:b6:bb:53:3f:50:2f:ec:b6:8e:79:7b:bd:5c:a7:cd:7c:a2:
         f3:c2:9b:d3:88:e4:19:30:67:b4:af:dd:81:8d:cc:eb:3d:ce:
         fa:45:07:00:35:30:30:05:bc:b6:b4:46:44:60:87:d2:c5:6f:
         a5:6d:01:89:7c:81:94:cb:47:c5:5a:b3:32:98:00:18:b3:3e:
         15:e7:38:27:d0:b0:b1:b9:5d:e3:12:7c:fe:c1:8e:5d:70:da:
         23:e5:af:f3:45:62:27:f9:34:d8:be:f5:13:8a:2a:8d:52:a1:
         13:6f:40:7e:ab:45:91:b8:75:de:a8:b5:42:39:db:49:89:ec:
         30:6e:a9:b5:8f:85:5d:2f:13:4a:d1:39:ec:e4:79:f4:02:5e:
         bf:18:c2:2e:d6:c9:56:7c:a3:f4:4c:c2:24:ed:4b:63:59:3c:
         39:4e:76:d2:2a:c5:23:42:00:4c:d2:b3:1a:6c:ef:11:3f:1f:
         99:f9:f5:4d:21:3f:3d:d7:07:36:47:07:20:1a:e0:ed:8c:d9:
         0a:09:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:16:55 2025 by rpki-client