This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
File:                     TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json)
Hash identifier:          s4OuWBcwaFqPDkoG+9V3JxrnGPr1TlMiEL7NV35POL0=
Subject key identifier:   78:74:A4:6B:B6:96:25:7B:A6:21:E1:DD:21:79:CF:48:73:04:90:48
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       019B386A14375A89438B20E5BD5F4E1BA23D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
Manifest number:          16CC
Signing time:             Fri 19 Dec 2025 21:00:34 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:34 +0000
Manifest next update:     Sat 20 Dec 2025 21:00:34 +0000
Files and hashes:         1: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=)
                          2: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=)
                          3: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=)
                          4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=)
                          5: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=)
                          6: R27Ys4tdk1dsua9Wj3x9dydBecY.roa (hash: UIHAnpmWiQo69KuTG5bm0hSlODVuPvHPX466b96XgAY=)
                          7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: jumM9vvMylJsumJtL6zsEH5n8Bbvp2TypeVaoDwuZOs=)
                          8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=)
                          9: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=)
                          10: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=)
                          11: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=)
                          12: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:6a:14:37:5a:89:43:8b:20:e5:bd:5f:4e:1b:a2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: Dec 19 21:00:34 2025 GMT
            Not After : Dec 20 21:00:34 2025 GMT
        Subject: CN=7874a46bb696257ba621e1dd2179cf4873049048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:9e:98:05:0d:90:7f:50:c1:f1:83:0f:c8:
                    ce:af:96:a9:35:f4:48:db:00:2a:1b:c7:66:e4:ea:
                    9b:57:d9:13:23:bf:95:cc:55:d5:85:92:20:a5:c2:
                    2d:af:1d:09:bf:8b:e7:5c:0b:9f:7e:1a:42:57:ed:
                    76:83:ef:b6:1d:45:0a:f5:d7:4d:1d:97:98:83:13:
                    c9:0b:62:dd:17:52:1f:59:b2:72:a9:5f:b8:bd:2f:
                    74:3f:cd:fb:db:65:db:3b:19:3d:d2:e7:0c:c0:78:
                    ea:2f:95:a2:25:83:5d:23:38:13:ae:d7:d0:98:2b:
                    3c:07:d0:92:03:4f:e2:ff:0e:00:d3:43:32:8b:24:
                    9c:5f:e6:fd:46:45:55:16:18:79:7d:13:5a:0d:bb:
                    19:8f:c9:fe:85:01:b8:39:1a:1b:ce:42:17:3f:4d:
                    8b:20:52:03:d6:89:c0:d4:63:33:ad:e6:ef:ef:ee:
                    b7:37:36:0b:98:e2:47:98:c5:eb:78:69:89:02:ef:
                    b2:c3:e3:c7:25:dd:e9:88:87:5a:f0:fc:74:97:a2:
                    b6:98:99:89:56:f1:be:a1:49:8d:ae:ac:64:70:85:
                    22:44:52:fc:55:4a:ae:ef:27:35:64:7a:2e:07:e4:
                    7c:d2:53:a9:24:73:62:39:ce:74:61:37:9f:bc:14:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:A4:6B:B6:96:25:7B:A6:21:E1:DD:21:79:CF:48:73:04:90:48
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:32:13:b7:30:1c:01:08:b3:de:27:9b:f4:55:fa:51:e3:bd:
         aa:23:4a:61:5b:48:29:c4:11:6e:14:7d:5b:22:f2:9d:d3:64:
         58:a9:1c:d4:6a:44:40:f3:45:24:71:05:d4:a3:e5:96:ed:77:
         55:c9:44:39:74:b0:cb:b3:a0:7c:69:7a:d9:07:3f:4e:33:79:
         a0:2d:1a:38:e4:4b:04:b0:6b:d6:32:8a:05:b8:dd:4c:4d:26:
         6f:56:36:a8:52:d2:f6:77:3e:80:39:1e:ea:be:9a:18:55:3b:
         2e:3a:52:9a:4d:11:71:71:bc:c5:cc:ec:9f:0a:e9:7b:89:ef:
         22:aa:ea:88:40:8d:ef:0a:8c:64:d2:2e:37:37:65:9e:a4:c6:
         bf:86:11:28:b4:19:95:53:75:a5:c7:a4:cd:0a:84:af:1a:fa:
         66:e0:43:f3:d9:a1:92:aa:3b:d9:88:29:68:5a:5f:bd:da:5b:
         69:86:2b:51:65:53:9d:cd:ee:cf:3a:c4:bf:5d:95:91:8c:53:
         f8:d9:af:37:59:19:24:11:a2:76:70:38:a4:e7:29:95:86:6f:
         17:01:9c:ed:d2:63:b3:c5:f7:36:6c:e9:a9:7d:e3:4e:1d:72:
         a2:c6:ef:cd:a6:56:ff:b9:f2:59:70:fd:df:28:d5:49:4a:06:
         0e:0d:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:43:26 2025 by rpki-client