This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File:                     N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier:          DNx/EfuFBU9vk4namoMwhJzmDv8ND8jm9Gjc4MbUea8=
Subject key identifier:   F1:5B:FB:75:EE:F6:F4:50:F3:DD:34:C6:AD:A0:04:AC:D1:8B:5E:23
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer:       /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial:       019B390F739F6152B0DF4C294708026139B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number:          14D2
Signing time:             Sat 20 Dec 2025 00:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 00:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 00:01:12 +0000
Files and hashes:         1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
                          2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: 6YBqDEIh6sEcFpF8jJLsUilRskG1sLF2d+r2xcQz220=)
                          3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:0f:73:9f:61:52:b0:df:4c:29:47:08:02:61:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
        Validity
            Not Before: Dec 20 00:01:12 2025 GMT
            Not After : Dec 21 00:01:12 2025 GMT
        Subject: CN=f15bfb75eef6f450f3dd34c6ada004acd18b5e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:98:b5:28:ce:84:d0:30:1c:dd:87:67:0f:
                    32:dc:89:a1:69:1d:82:c9:55:29:b8:8d:fe:be:b2:
                    1f:9f:1b:97:8c:84:a1:41:f8:16:5d:3d:bf:57:5d:
                    7c:15:e9:dd:54:a7:7f:b4:f7:a7:ff:e6:62:ae:a5:
                    15:ab:b4:a9:fb:06:09:04:6b:53:23:76:a0:71:40:
                    b5:f1:be:1d:e5:75:8f:41:1a:b9:c8:eb:53:34:17:
                    47:d7:ce:1f:7f:e4:40:08:ea:eb:8f:b9:e7:44:7d:
                    43:d5:ba:ba:f0:e8:a2:e9:28:d0:17:bd:8f:72:a2:
                    21:84:92:19:e9:2d:c4:fd:2a:7d:26:9f:cc:27:a1:
                    74:ea:3d:e3:05:4a:46:49:60:d8:8b:0c:fe:fc:fd:
                    a5:7e:c2:96:8a:b1:07:cc:0f:f9:4d:56:86:74:78:
                    98:f8:77:a4:31:9d:97:c5:79:c5:22:9d:43:82:56:
                    9b:3c:45:8c:11:f4:73:79:e1:6a:62:62:1e:36:24:
                    dc:db:82:10:aa:60:b8:bc:1a:77:06:29:25:05:db:
                    01:e8:ba:97:0f:ea:9e:ce:66:78:dc:72:f4:0e:82:
                    17:c2:d8:28:04:2f:aa:d3:0a:27:b0:71:01:c0:cd:
                    ba:6a:f1:94:aa:e0:7f:61:1c:18:b2:f9:df:71:27:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:FB:75:EE:F6:F4:50:F3:DD:34:C6:AD:A0:04:AC:D1:8B:5E:23
            X509v3 Authority Key Identifier:
                keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:16:cf:15:e3:c3:68:88:b7:67:7d:08:cd:e5:7b:87:9d:
         ce:99:fb:71:91:e3:ee:64:3a:21:eb:c0:c3:3e:df:01:43:d8:
         3a:a9:a1:3d:77:92:a1:50:21:b9:28:6c:d6:7e:7f:7d:33:34:
         32:90:c3:1b:5e:94:d8:0d:79:2f:bd:50:56:fd:4b:b4:06:9c:
         a4:b9:f5:08:28:42:17:ce:04:12:d9:3a:84:e9:16:4e:7f:08:
         5b:90:d4:e7:eb:a8:6b:36:cc:c0:ec:4e:a0:e5:f1:04:37:9e:
         ef:38:58:36:cf:b9:fb:21:c3:8f:e7:50:1c:c6:a7:55:79:62:
         35:8e:dc:7a:8b:96:63:9f:2f:66:21:35:cd:71:5d:4b:c3:ca:
         49:6c:a2:1c:0d:2c:83:8e:89:fc:12:23:08:f3:45:13:74:85:
         d2:18:a7:ff:cc:e4:54:f6:c8:53:fb:b7:0f:75:ed:da:cc:f1:
         e1:8a:c4:63:ae:ac:d6:13:b9:2a:9e:34:17:f1:3a:3e:46:dd:
         37:50:47:70:81:1f:77:3b:72:34:62:2c:63:6f:df:76:bc:5e:
         80:e8:4e:e4:d9:43:30:e3:aa:ed:5e:68:01:0c:1e:b5:82:cc:
         2e:81:fe:e0:2f:1e:b5:5c:5c:d1:48:85:16:b6:ad:ed:70:6e:
         ff:6c:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:20:35 2025 by rpki-client