This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          UtA9Moz+eosF5ax0tG86Rf8XmuoRiiRuHm+avZMDFfc=
Subject key identifier:   01:E9:FA:EE:18:64:0C:BF:09:41:50:B9:DB:8A:8D:8E:61:1E:EE:D4
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       019B3F483073411673B60E668713660506D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          143A
Signing time:             Sun 21 Dec 2025 05:00:54 +0000
Manifest this update:     Sun 21 Dec 2025 05:00:54 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:54 +0000
Files and hashes:         1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=)
                          2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=)
                          3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=)
                          4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=)
                          5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: xO8nAy5Oi7Aks7H7A2NsFXxg7/1EKdYeLD5CMDLgjKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:48:30:73:41:16:73:b6:0e:66:87:13:66:05:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Dec 21 05:00:54 2025 GMT
            Not After : Dec 22 05:00:54 2025 GMT
        Subject: CN=01e9faee18640cbf094150b9db8a8d8e611eeed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:d8:c6:2b:8f:fc:15:f0:ed:41:bc:d3:90:
                    e8:36:df:d2:4d:53:59:7a:c6:94:3e:ad:9b:71:be:
                    1f:a4:98:68:87:cc:ac:95:d0:2f:29:c7:72:de:10:
                    5a:c2:32:18:07:d8:ec:02:13:57:09:99:a4:6a:b3:
                    b8:13:a0:20:1f:cf:61:b7:1e:eb:72:fa:7b:51:39:
                    f3:61:37:c7:ad:95:72:27:d5:b5:8d:08:12:ea:d7:
                    e7:53:3b:f4:ae:93:17:a5:54:48:0d:b8:d1:60:3c:
                    ca:48:d0:68:75:34:27:bd:63:1f:41:9f:cf:24:1b:
                    5f:31:9c:80:de:3d:a1:f0:1e:47:ec:72:62:20:93:
                    52:59:47:0c:68:e5:0c:63:ce:e7:49:9d:a4:14:52:
                    ec:b0:58:63:4d:0e:b5:01:da:0a:0d:17:ae:60:59:
                    84:00:96:7c:24:59:84:42:12:e6:1a:8e:58:5c:1e:
                    56:89:57:d7:de:ee:a5:56:fe:ad:51:42:6b:33:dd:
                    dc:da:03:71:df:cd:f9:4e:7c:02:8f:da:9e:06:d9:
                    f9:36:c5:4b:23:ae:d9:a6:ee:79:a0:a2:5d:2f:15:
                    d9:87:db:4d:0c:63:f2:ec:f2:27:f2:1c:33:d6:65:
                    d6:bf:8e:16:23:e1:fd:3f:ac:90:82:d9:c4:f0:a5:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E9:FA:EE:18:64:0C:BF:09:41:50:B9:DB:8A:8D:8E:61:1E:EE:D4
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:65:9a:f1:c3:ae:5d:f0:03:78:af:9a:2b:27:0e:52:e9:
         35:35:90:e5:6f:2f:2a:65:55:a4:06:70:c8:86:3d:f7:27:fa:
         d5:6a:65:06:ca:da:57:6c:a1:7d:09:fc:eb:73:66:90:94:40:
         43:48:99:37:f3:80:93:3a:4d:11:84:ee:e9:9c:34:24:ea:3d:
         1d:b5:3a:3d:2d:7a:ec:5c:2b:22:03:fb:37:4d:cc:50:e2:30:
         ee:85:0d:b5:b3:20:da:6f:c5:48:7a:5c:2f:49:92:8f:5f:ef:
         22:af:f2:e6:21:b5:4f:2a:8c:14:c8:a3:ef:be:2b:53:a1:7b:
         6f:ff:af:e6:0f:ae:2b:f6:c1:01:a0:8a:79:9a:4d:4e:0f:4c:
         cf:2c:05:6d:5e:63:33:3b:c5:13:0a:82:56:cd:55:4e:07:c9:
         f0:15:f3:e4:54:ac:1b:6a:3c:35:4e:e1:86:e0:49:07:91:fc:
         61:25:43:5e:4e:c1:65:31:a7:2b:01:c2:df:8e:4f:8c:71:52:
         0c:09:b1:80:a5:97:60:c9:46:31:85:c5:53:9e:be:95:b3:64:
         b9:96:32:69:b8:4b:b1:1a:dc:c5:51:9e:fc:af:19:9a:b4:d9:
         8f:bb:b8:25:45:a8:df:7e:d8:f6:fa:a9:ec:96:ce:dd:7d:78:
         73:fa:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:54:48 2025 by rpki-client