This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File:                     RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier:          uU7kxncCCwCUSzvlgG0YhlKps7Jk6RaKy6wCTz/1vFY=
Subject key identifier:   6E:5A:E6:CD:33:31:4F:80:89:23:C8:13:EC:DC:12:E6:6A:CB:87:EA
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer:       /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial:       019B4EF28BF0C410A57FE4EE21AC9F793533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number:          1219
Signing time:             Wed 24 Dec 2025 06:01:16 +0000
Manifest this update:     Wed 24 Dec 2025 06:01:16 +0000
Manifest next update:     Thu 25 Dec 2025 06:01:16 +0000
Files and hashes:         1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
                          2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
                          3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: 3hfrDLgamW9dS1ZnSyLJl3Z80jd4ZjDvYYIHRrgZwtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4e:f2:8b:f0:c4:10:a5:7f:e4:ee:21:ac:9f:79:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
        Validity
            Not Before: Dec 24 06:01:16 2025 GMT
            Not After : Dec 25 06:01:16 2025 GMT
        Subject: CN=6e5ae6cd33314f808923c813ecdc12e66acb87ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:53:aa:c2:6e:76:f6:9c:a2:f5:6f:aa:85:
                    0a:e0:8c:59:38:4b:30:88:fb:58:e2:7f:3b:78:cb:
                    85:18:6b:b5:d7:03:44:4e:7d:ed:54:df:60:ec:6d:
                    bb:09:67:3a:12:28:35:d9:11:16:58:fd:2b:f8:5b:
                    0d:2f:50:9d:d8:66:49:8f:9f:25:a6:4a:63:8b:50:
                    42:e3:04:8d:88:8d:d0:da:4a:9a:94:bd:02:46:8d:
                    bd:eb:9c:61:26:31:48:23:ea:38:3d:0c:2c:1b:26:
                    d3:52:5a:cb:c7:c9:91:8c:83:1c:92:d2:56:a8:09:
                    7c:cc:ce:fa:fd:2d:6a:8a:51:d3:80:84:ad:a6:d8:
                    e3:4e:2c:4b:67:9b:1e:fe:c5:2b:ae:e0:6a:e1:30:
                    eb:76:78:97:1f:5a:5b:b9:bc:69:8e:90:fc:23:0f:
                    7d:ba:ec:cc:a6:d0:42:58:d1:8e:2e:29:ce:f6:b7:
                    33:4d:7f:56:20:4f:d8:da:f3:ec:b3:2f:6e:03:b3:
                    32:06:27:a8:2b:c0:b0:63:50:ff:26:d7:40:03:db:
                    0d:00:dc:8f:fa:db:6a:b6:5e:31:e6:1b:79:11:cc:
                    ba:e3:40:1e:12:70:0d:7c:f0:bd:b7:a1:53:c2:1b:
                    57:8f:67:b5:73:b2:e1:b0:c7:10:bd:31:3c:37:3e:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:E6:CD:33:31:4F:80:89:23:C8:13:EC:DC:12:E6:6A:CB:87:EA
            X509v3 Authority Key Identifier:
                keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:76:31:8b:62:9b:15:1d:e3:32:13:8d:29:68:2b:a5:28:4e:
         92:63:73:b3:37:10:fc:2a:7a:a7:4c:a5:ee:ce:76:9f:26:01:
         9c:d4:c5:67:c3:ca:aa:60:d2:25:f2:08:d8:f4:bb:49:2a:ab:
         88:bf:b0:89:06:2f:0f:fb:f3:7a:55:c5:22:27:51:10:2d:f4:
         0f:5f:04:a6:0f:32:b8:d5:4c:a0:3e:33:ed:0e:57:c6:46:7c:
         26:69:69:ea:4d:6f:cd:5f:0f:4c:bc:8b:3c:fe:65:7c:31:90:
         15:3d:46:d7:26:fa:12:89:96:0b:47:b9:c5:f8:25:ab:0d:2a:
         9b:1f:2a:24:73:83:2b:35:17:94:c2:25:04:aa:60:42:6d:f5:
         ea:8b:da:9f:0b:e1:f4:14:f9:9c:33:75:eb:cf:ef:ab:95:75:
         eb:0b:60:5c:51:0c:a7:b8:e4:88:85:56:bc:96:c4:c6:d2:39:
         c1:13:b3:03:76:99:f1:11:df:b7:9a:eb:01:a3:f2:1b:b2:b8:
         b2:c7:36:80:bd:1a:f9:69:b7:5f:83:a8:c5:5f:81:61:d5:2f:
         33:ee:72:c2:33:48:39:d3:d3:1e:ce:b8:d1:54:8b:34:4e:f1:
         b8:86:3a:d4:26:57:6c:21:22:3d:6c:a5:51:bd:e1:ba:44:3f:
         cf:45:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:55:40 2025 by rpki-client