This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
File:                     amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft (raw, json)
Hash identifier:          SqsFfqvsDLoEyWEnrsrWoniaZMeKIvsH19qX0w5JlAI=
Subject key identifier:   D2:69:3B:A9:B0:32:D5:75:90:DB:0C:B9:74:52:BD:99:27:F2:F0:A7
Authority key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3
Certificate issuer:       /CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
Certificate serial:       019B3EA342F8BA2E8C840B382409B657DE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
Manifest number:          FC
Signing time:             Sun 21 Dec 2025 02:00:45 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:45 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:45 +0000
Files and hashes:         1: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl (hash: SnZkt1pdajARfDl9Xtx5BvINTivVNkExAI1SNFeO/u4=)
                          2: qS9lbWxycbZu6RoyXldJwuJR6TM.roa (hash: qx382/Be7wHuXq5Yjg5wuqIZocz2BMbKerwk1urC5hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:42:f8:ba:2e:8c:84:0b:38:24:09:b6:57:de:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
        Validity
            Not Before: Dec 21 02:00:45 2025 GMT
            Not After : Dec 22 02:00:45 2025 GMT
        Subject: CN=d2693ba9b032d57590db0cb97452bd9927f2f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:76:f5:19:57:c1:1a:a2:c5:ca:7d:84:c1:
                    71:91:44:41:0a:19:6b:eb:6a:bf:d9:d8:36:3e:08:
                    04:f5:d9:58:8b:ac:d8:b5:10:16:c2:1b:74:d1:20:
                    f8:ec:f1:4d:07:ab:d3:41:14:75:55:1f:2f:06:87:
                    59:d2:cd:90:9d:bd:a6:9e:39:39:15:c1:36:c8:6c:
                    04:7f:ba:84:43:f6:17:67:8a:93:d5:98:4f:ce:ef:
                    f5:2c:cf:b2:ec:ec:d8:3e:ec:2c:aa:8b:76:68:03:
                    59:78:c5:c9:69:42:47:d7:22:b9:34:81:58:6d:72:
                    67:13:c0:25:6e:2e:cd:37:68:e8:a6:67:20:50:70:
                    7a:fd:35:7d:61:d3:09:f7:fc:0f:51:7e:41:77:44:
                    5e:32:ef:e9:1b:2e:8e:1c:74:ec:54:de:ef:51:c6:
                    31:6d:a7:44:0e:80:61:0b:8b:31:3d:f1:ca:9b:6f:
                    e5:ee:0a:81:d2:6c:74:9f:03:a3:ea:17:c1:b9:2e:
                    99:c0:8c:fc:7d:0b:90:3b:03:e3:a5:71:12:64:d1:
                    eb:36:23:52:eb:53:e4:cb:ea:40:76:1c:d2:be:2a:
                    c6:16:f1:c2:af:f2:75:cd:93:d0:fd:93:a0:3f:b7:
                    85:66:02:33:4e:cd:e2:69:5d:90:5b:e3:55:f5:2d:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:3B:A9:B0:32:D5:75:90:DB:0C:B9:74:52:BD:99:27:F2:F0:A7
            X509v3 Authority Key Identifier:
                keyid:6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:94:cb:8b:3b:e2:06:15:69:6e:3f:09:a6:e0:a0:95:cd:
         62:39:7a:80:b8:64:29:4e:86:4d:40:d1:88:c3:a6:29:6f:ff:
         15:0a:21:ba:60:6b:67:74:18:13:80:ba:bf:4a:65:32:ed:a5:
         22:d3:0f:20:06:7c:33:9d:d0:5b:19:52:4d:47:aa:52:36:c1:
         dd:d0:99:c7:84:87:e8:d1:f2:be:6c:a8:41:87:24:0c:78:13:
         b1:93:6b:82:12:b3:b8:58:12:1a:81:a7:31:12:aa:50:aa:d5:
         34:7c:56:6e:61:83:f7:f4:b7:0a:44:bf:8f:1d:d8:3f:ae:da:
         4d:98:3d:0f:45:e7:6f:d8:38:61:19:e3:c8:c8:5d:ec:cf:d8:
         fc:e2:e4:86:e1:86:54:3e:b9:ac:0a:e4:ad:0e:d3:c2:1d:b5:
         96:b2:d7:05:46:c4:db:ac:48:9b:a1:be:52:d1:83:ac:c7:f7:
         36:51:db:18:99:f1:10:a2:12:29:be:e6:97:fd:39:12:b7:c4:
         7e:0b:ca:72:48:18:17:d5:e2:fc:f1:bf:18:66:90:c6:44:e4:
         ff:a5:75:6d:ca:f4:58:39:fd:4e:0c:84:11:e5:c0:c9:a7:91:
         e5:e5:70:82:c1:38:20:77:4c:7a:65:9d:ed:30:64:84:44:ee:
         53:ed:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:47:17 2025 by rpki-client