This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          ToATm0bQtsmQKE9eBArRLwCavjvJdZWbOsvlu4XES6U=
Subject key identifier:   50:5A:44:1B:61:6B:5D:7A:E7:35:E9:F5:4B:E1:30:33:B4:66:7A:FB
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       019B364587D0C2DBEDD576079AAB55DF60ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0E3B
Signing time:             Fri 19 Dec 2025 11:01:24 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:24 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:24 +0000
Files and hashes:         1: EZgthmV-Ra7gv9VxID_LxuQNZRk.roa (hash: /sMTXd+Qkuph99VXYlJb+JgMuVUgV39vMBsQNIId7R8=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: v6d3LaNEbpFcuNDCYey5fMcm47ukIZNGmzTN0ked8dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:87:d0:c2:db:ed:d5:76:07:9a:ab:55:df:60:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Dec 19 11:01:24 2025 GMT
            Not After : Dec 20 11:01:24 2025 GMT
        Subject: CN=505a441b616b5d7ae735e9f54be13033b4667afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:31:7d:35:78:a8:51:48:3f:30:a1:17:c0:
                    ac:e0:94:fe:1e:00:da:af:e4:4f:e4:95:1f:e9:55:
                    20:5b:37:cc:39:48:84:0e:0d:6f:c9:74:20:3a:e7:
                    92:81:f2:d3:c0:6d:52:6a:c3:9e:53:9d:aa:0c:43:
                    97:a2:1c:83:1b:f7:38:76:be:68:c4:41:12:6e:cc:
                    0a:02:31:cd:39:ad:45:8b:5c:32:3f:4f:d5:df:99:
                    9a:31:12:97:82:6a:1b:28:bc:81:c2:82:80:c8:ef:
                    de:bc:c1:96:66:2f:26:b9:96:14:67:ff:cd:63:2a:
                    7b:0b:5b:75:82:9c:11:1f:52:fc:2e:79:2f:d1:40:
                    17:fe:b2:8a:2b:ad:b2:e9:15:ba:52:0a:05:68:5a:
                    28:86:ad:d0:64:b7:10:c6:9b:d8:6f:25:cf:de:9a:
                    46:81:64:de:5d:af:38:8b:c8:8c:bc:85:42:4d:f8:
                    ce:56:30:73:a5:c0:d6:d0:e4:bd:74:78:d0:8a:df:
                    bd:65:ad:d0:d6:4f:3b:d5:52:57:4f:61:0b:4b:8e:
                    be:88:d6:55:46:30:af:f0:10:4a:ab:eb:1a:f7:a9:
                    0b:9f:97:eb:8d:d0:73:64:24:1b:b7:bf:bb:96:7f:
                    a8:5d:7c:4d:62:ff:bf:de:0e:9c:c1:11:e9:99:9c:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:44:1B:61:6B:5D:7A:E7:35:E9:F5:4B:E1:30:33:B4:66:7A:FB
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:00:fe:cb:9f:8d:ca:85:c5:52:c0:c9:03:8c:0c:44:44:
         6c:af:44:ad:16:43:8b:5f:13:89:e8:c9:69:72:46:28:be:92:
         5e:0d:97:25:9e:79:3e:4d:6a:65:e0:70:8b:76:5a:b1:64:4b:
         ab:e8:d5:05:bd:67:e6:43:e7:b9:dd:2d:c7:f5:38:5a:61:f8:
         96:84:42:f4:e9:3a:b0:05:ec:66:41:05:2a:b6:e8:45:a4:1b:
         d3:47:0b:f7:18:5b:f9:8b:ef:fb:9b:80:fd:9e:65:7f:06:f8:
         7a:d6:1c:af:27:5c:88:da:6b:89:b8:47:55:1c:6c:ab:58:33:
         65:3b:25:36:30:ae:28:80:6a:1a:76:52:dc:76:69:2d:e8:18:
         50:81:a6:7e:e1:fb:1b:58:8d:05:5b:96:7a:55:b6:0d:90:f0:
         3a:73:be:79:0d:64:c5:32:c0:f9:e6:f7:6d:49:17:85:70:d4:
         df:11:44:1f:47:a6:2f:71:5e:77:4d:b9:a2:28:11:b5:1b:00:
         51:67:d2:0f:e7:c3:84:08:e2:28:e7:e4:68:16:d7:b3:60:00:
         14:1c:6b:4a:8a:36:6c:4c:2b:0e:61:bb:ea:6c:be:e8:a7:48:
         15:5c:fd:54:eb:ad:97:7a:66:8b:cb:61:fa:a0:f1:54:44:cf:
         20:d3:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:21:57 2025 by rpki-client