This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          fwAB5OUd8vOhc7kBf/S7PpV0WjoTx1hk6H9dh7H8mss=
Subject key identifier:   9B:C1:81:73:6D:4B:25:B3:60:63:17:27:AF:EA:72:26:8F:12:10:B4
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       019B397D2172B8E7B5038033B1B8074C746E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          12A2
Signing time:             Sat 20 Dec 2025 02:01:00 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:00 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:00 +0000
Files and hashes:         1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
                          2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
                          3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: /1tfCZTbYhQ4MXcubmRjFDjus1ViRDV9ASr2Cbsbu2U=)
                          4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:21:72:b8:e7:b5:03:80:33:b1:b8:07:4c:74:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Dec 20 02:01:00 2025 GMT
            Not After : Dec 21 02:01:00 2025 GMT
        Subject: CN=9bc181736d4b25b360631727afea72268f1210b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:06:89:10:20:8a:cf:56:ba:b7:ba:a4:52:
                    7d:a0:fc:e5:a6:95:20:91:01:23:cf:1b:32:11:d8:
                    45:5e:7f:ac:34:e1:a8:06:fc:cb:88:ef:84:ea:1a:
                    90:1b:c6:d0:19:dd:1f:41:61:62:6c:82:ae:b0:74:
                    6c:11:77:83:01:db:60:d3:c1:6a:11:eb:fe:3f:7a:
                    03:45:45:34:de:d7:f0:41:01:01:eb:d0:a8:19:49:
                    1d:2c:d5:32:22:4a:b8:c1:95:93:8f:9d:20:31:3b:
                    c9:dc:bd:ca:82:99:c9:e0:06:ec:76:cc:7a:99:80:
                    08:fe:a9:cb:b3:c0:7c:d8:1e:a3:5e:11:ed:97:df:
                    02:b6:f8:84:b0:ba:03:72:a2:fb:fc:cb:c3:44:5e:
                    d9:47:18:d5:29:bc:12:2a:54:f8:58:72:cb:8c:c4:
                    f5:c8:54:9f:c5:3d:be:99:de:c2:fa:98:65:41:fc:
                    30:db:34:e4:19:d7:e5:ef:1c:c3:32:24:ed:94:60:
                    76:a0:20:5b:b1:91:77:78:1d:1f:d7:d6:c1:ae:66:
                    d1:47:ba:74:0e:86:30:c9:10:e1:f8:62:fb:d9:09:
                    ec:cd:0a:59:e9:22:5b:28:f7:d5:f2:34:4d:49:b1:
                    df:77:5a:f2:43:9e:99:6d:ae:ee:03:e5:ce:45:2f:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:81:73:6D:4B:25:B3:60:63:17:27:AF:EA:72:26:8F:12:10:B4
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:b0:fe:ba:f0:bb:a0:44:c7:ff:87:07:6f:b6:7e:88:a1:
         68:dd:4d:66:45:ce:2c:97:9d:52:37:97:b6:0a:ff:d3:07:62:
         88:5f:3b:2b:82:b4:0b:d8:0d:fc:0c:58:a5:5a:88:13:02:6c:
         48:6e:fb:f1:fa:3d:72:5f:7e:b5:9a:56:af:49:03:b9:8e:a7:
         ad:17:c5:c3:c4:18:a9:6e:28:c7:49:82:3d:40:13:2f:98:e3:
         d6:cb:8f:32:c8:02:d9:39:cc:d6:51:6d:fe:d7:ef:b9:47:17:
         db:7d:14:d6:08:54:8f:cd:8e:db:b5:c2:fc:30:3d:3c:b6:30:
         f3:ec:7f:ad:cf:17:a9:6d:91:89:66:d5:31:1a:13:a4:2c:dd:
         af:cf:b5:eb:d5:cb:92:83:a1:77:ba:ec:c6:77:83:53:02:1a:
         99:77:e3:45:af:d4:55:b0:88:7a:8d:43:4c:9b:e1:6a:66:73:
         07:80:3f:22:b2:78:e1:32:72:2c:e3:b1:da:35:29:fb:8d:55:
         43:31:b4:89:d5:dd:60:2e:e2:1f:81:bc:46:c5:ab:f9:63:77:
         c1:60:21:fd:61:d7:7f:29:88:42:1f:3f:95:00:9f:46:ab:13:
         cb:86:5d:ef:5c:63:1f:8f:dc:2b:60:71:2a:c3:56:0d:5e:1b:
         62:ed:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:05:56 2025 by rpki-client