This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File:                     T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier:          PMsSJWqqcpxs2QhrKeWIsfWbzx29wujTfgDqVGM98dI=
Subject key identifier:   07:60:C6:2A:41:30:56:AE:1F:74:BA:54:DF:62:AE:AF:5A:C2:DA:38
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer:       /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial:       019B3A915C13308D2D4AFE3B867021067083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number:          1555
Signing time:             Sat 20 Dec 2025 07:02:43 +0000
Manifest this update:     Sat 20 Dec 2025 07:02:43 +0000
Manifest next update:     Sun 21 Dec 2025 07:02:43 +0000
Files and hashes:         1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
                          2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: u663hFzlpQj41v/sBP3XtMmH0fT33Cz8Bac6VtPZdwo=)
                          3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:91:5c:13:30:8d:2d:4a:fe:3b:86:70:21:06:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
        Validity
            Not Before: Dec 20 07:02:43 2025 GMT
            Not After : Dec 21 07:02:43 2025 GMT
        Subject: CN=0760c62a413056ae1f74ba54df62aeaf5ac2da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:42:7f:6e:16:b4:5f:c3:88:ef:e4:f7:3f:
                    e0:a7:cc:cf:6f:ec:aa:cd:96:be:d3:7a:1d:72:da:
                    36:a3:55:bc:53:80:de:bc:e0:44:86:9b:b7:f3:cd:
                    8b:53:4a:f3:23:b9:73:14:ef:e0:cf:bc:df:3b:2a:
                    5a:4a:3a:f1:89:b0:e1:05:46:51:cc:bc:88:f8:8e:
                    4b:5d:3d:cb:45:06:1c:cb:55:c0:b0:cc:71:52:47:
                    3c:0c:84:81:58:cb:bf:42:d3:3d:d2:dd:1c:9b:4f:
                    c1:db:99:43:ef:a3:77:88:4c:54:13:7d:cf:4a:95:
                    b6:04:fa:d0:c0:92:6f:c8:af:09:50:92:d7:6e:db:
                    e1:df:a3:77:b2:c7:54:9a:f0:74:c2:a5:32:a3:c3:
                    21:15:2e:1d:3c:d8:41:0e:6f:64:fb:e4:60:f2:c8:
                    b0:ea:5b:d7:47:01:01:ce:2a:65:d9:88:ba:52:e0:
                    7d:f6:69:fa:24:98:a0:8a:83:d7:8c:88:62:26:9d:
                    61:df:f3:80:a9:5c:85:25:27:35:11:3d:64:28:76:
                    3f:ef:22:59:df:d8:bc:69:55:f6:2e:5b:cf:2a:83:
                    f1:00:4a:a1:50:71:8f:3d:59:e6:a7:a6:54:1f:b5:
                    d7:80:88:28:f4:97:4d:45:83:d2:39:3a:46:99:2c:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:60:C6:2A:41:30:56:AE:1F:74:BA:54:DF:62:AE:AF:5A:C2:DA:38
            X509v3 Authority Key Identifier:
                keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:69:f2:d4:a9:bb:56:e0:50:ba:9c:1d:3a:bf:43:25:dd:
         74:ae:d5:0d:80:44:bf:62:e3:90:ad:c4:d5:48:1e:a1:9c:9d:
         86:0b:58:13:a6:d2:b1:8a:aa:f6:ab:fa:5a:3c:86:9a:86:f8:
         5d:0a:e7:d1:1c:92:c5:36:05:4b:d3:f7:4f:14:84:b2:d5:48:
         f7:79:48:d8:00:81:90:0c:0a:68:04:cf:b5:da:4d:84:cb:56:
         b6:8a:63:af:87:f7:ae:48:ff:41:60:7c:53:8a:0b:b2:65:28:
         84:34:b2:06:06:b4:17:c7:34:bf:fe:78:be:18:7d:5c:a5:b5:
         33:c3:ac:a5:56:b0:0a:4d:94:da:73:f5:46:a4:ae:d2:31:60:
         d1:78:c8:ef:f3:e9:47:09:bc:a3:1e:fa:b9:ba:eb:22:10:10:
         bb:7c:76:a0:d7:e2:9b:0c:f9:bb:ea:3e:68:f4:6d:e2:30:ac:
         5b:52:7e:7f:93:30:40:58:c1:98:f6:c3:c9:f3:f8:0f:2a:83:
         fc:3f:ef:82:55:34:1e:a1:dd:a5:de:3d:01:a0:82:44:5f:9d:
         bb:c7:d0:36:ff:77:bd:62:f1:b2:cb:87:6a:4a:08:95:98:23:
         c3:9c:74:c2:00:81:9a:e9:0c:76:35:46:de:41:ef:33:ae:6f:
         2d:a0:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:30:24 2025 by rpki-client