This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          SZQz2K7CRDKRuUb2vihYHn7Ftwd2BQ/4VQppYLCz1wk=
Subject key identifier:   6E:F9:1C:65:A1:9B:D2:DB:B4:B4:88:8A:30:D5:DB:01:C9:68:85:41
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       019B2BF86AC61702F71A25DCA8E54DF5769A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          14A4
Signing time:             Wed 17 Dec 2025 11:00:58 +0000
Manifest this update:     Wed 17 Dec 2025 11:00:58 +0000
Manifest next update:     Thu 18 Dec 2025 11:00:58 +0000
Files and hashes:         1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
                          2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
                          3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
                          4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: AX5+/a+mvXDd5XgvWkNaomo7Nfs/3+5aGrgGdH7piy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:f8:6a:c6:17:02:f7:1a:25:dc:a8:e5:4d:f5:76:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Dec 17 11:00:58 2025 GMT
            Not After : Dec 18 11:00:58 2025 GMT
        Subject: CN=6ef91c65a19bd2dbb4b4888a30d5db01c9688541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:9a:80:6b:f1:6f:4a:71:c5:16:73:f0:f1:
                    7f:43:ce:8d:40:fd:64:98:d1:b5:7a:33:d1:1e:31:
                    34:9a:19:8d:0e:df:1a:19:5c:ac:b4:f1:ee:93:fc:
                    89:25:86:42:77:3a:ae:af:59:ac:2f:d0:c1:9d:88:
                    e9:05:e5:c0:62:7d:e9:51:04:b7:10:d1:5d:2f:2d:
                    1c:c0:88:e2:9a:76:5d:af:8e:cd:61:5a:e8:ba:52:
                    e7:24:6a:e8:57:98:fa:7f:1b:a0:8b:15:3a:16:f5:
                    e1:e8:ab:4c:74:68:13:54:51:92:8a:91:80:d9:36:
                    4d:e1:de:b9:46:e0:88:61:03:b8:69:32:d2:da:4e:
                    74:5b:1f:0a:d2:3a:5a:cc:4d:59:b3:9b:d5:d9:48:
                    22:f8:36:38:d7:2b:c8:ff:f6:5a:e9:df:a7:32:0d:
                    77:a5:e3:84:6c:81:f8:0a:f5:8b:30:50:1a:1d:04:
                    d8:8b:32:a7:ed:a1:c5:4a:19:a1:78:9a:40:89:0d:
                    3e:c1:62:18:b0:51:92:20:12:a2:68:17:59:b5:fa:
                    e1:b9:01:d4:e2:21:8b:ac:18:17:b4:aa:41:c8:78:
                    50:6a:a7:0e:b1:3a:bf:78:49:2d:9b:f4:29:69:9e:
                    10:c9:e2:c9:c0:b7:65:8b:41:fb:92:64:29:47:7e:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:1C:65:A1:9B:D2:DB:B4:B4:88:8A:30:D5:DB:01:C9:68:85:41
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:15:e1:07:62:84:84:b5:6f:56:bd:93:6e:50:a9:f6:de:b4:
         cb:f4:b6:04:9a:88:b8:02:90:f7:70:1d:52:bf:cb:d2:42:c0:
         b5:2e:3f:13:76:43:c0:12:11:42:42:8b:b9:4a:c4:82:b5:ad:
         30:70:cb:f7:3e:64:fb:51:65:5f:f5:da:62:73:7e:ad:f2:7a:
         64:45:92:61:4a:f8:82:bc:06:0b:bd:e7:5e:aa:42:28:70:b5:
         2e:91:27:be:03:a8:14:fd:9a:18:dc:e0:d6:e7:54:a9:54:c0:
         32:79:46:cf:3b:3a:73:0e:8d:19:2e:49:47:18:5f:68:4c:8e:
         fd:61:d2:ee:fb:5f:c2:b2:0f:15:10:bb:03:85:57:5b:58:47:
         cc:6a:9d:ad:c6:38:2a:19:f0:b0:af:01:70:53:22:da:92:87:
         03:e0:4d:ea:80:4c:a5:18:f1:77:64:c0:68:34:74:3b:6a:f1:
         d3:9a:c1:40:8a:3e:99:ad:04:64:f0:80:07:f2:53:25:5f:d3:
         b4:5f:f3:5e:00:c8:8e:16:ec:0a:18:54:c7:ec:43:1d:1c:01:
         30:9c:47:0b:fe:a0:e3:53:88:15:b3:c8:22:ff:a2:90:be:a6:
         ed:3e:a5:24:62:05:5d:76:0c:9e:d4:ab:43:a8:89:d9:be:78:
         86:65:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:08:39 2025 by rpki-client