This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File:                     3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier:          brZSPlrvUlLAjJhKzGJ3I6XczgPj3L8Wd63kk6uM16Y=
Subject key identifier:   9D:BF:CF:B2:82:98:7A:32:11:2A:A8:3A:8F:A7:24:C8:46:13:FD:D4
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       019B3E6CA2044319B56EF0B6023A6E01901A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number:          145F
Signing time:             Sun 21 Dec 2025 01:01:05 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:05 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:05 +0000
Files and hashes:         1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: bF6rWbLiN5VMjQis2hrcwzJrB1n/Gk+wiLGiFwBcvqQ=)
                          2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6c:a2:04:43:19:b5:6e:f0:b6:02:3a:6e:01:90:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Dec 21 01:01:05 2025 GMT
            Not After : Dec 22 01:01:05 2025 GMT
        Subject: CN=9dbfcfb282987a32112aa83a8fa724c84613fdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:21:a0:1f:64:3d:e1:9d:fe:83:fc:64:77:
                    79:4f:c1:b4:e9:7e:cd:c7:99:21:7a:a2:90:6d:24:
                    6f:01:5f:d8:ec:b1:9c:86:ea:df:8c:5e:e8:46:76:
                    aa:d2:4f:cd:14:ea:ee:05:ca:db:ae:42:aa:58:cf:
                    79:57:30:7d:38:88:c7:c5:bb:3b:36:f2:82:d5:2c:
                    bb:88:d6:a4:b7:a4:e9:c5:d4:36:04:8c:45:61:c3:
                    e3:88:67:f8:a5:61:9c:74:4b:5c:7d:de:ed:b7:2a:
                    21:04:cf:8c:3d:83:4d:39:fa:1e:7a:36:35:b8:d3:
                    b1:96:13:c3:93:61:d7:41:f8:7f:2f:96:e2:c3:8d:
                    f3:6e:ff:46:d2:f7:e4:81:8e:20:7d:4d:aa:be:a3:
                    f3:d5:03:26:ee:f7:52:c4:0c:a6:00:eb:a5:8a:46:
                    36:f7:d3:bc:43:53:d3:92:ff:03:16:06:6f:f7:07:
                    8d:dd:bd:98:5f:b0:f7:bb:4f:28:a2:68:9a:a4:d1:
                    de:0f:60:81:bf:7b:3e:d5:2e:ea:9c:54:97:a5:bf:
                    e4:72:21:f2:87:e9:1e:fa:80:58:18:3a:78:a4:b1:
                    29:67:0c:58:9c:f8:71:e9:51:93:c7:19:ca:9c:ae:
                    77:f2:77:b8:69:e6:e2:39:2f:c4:b0:4d:c6:2f:56:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:CF:B2:82:98:7A:32:11:2A:A8:3A:8F:A7:24:C8:46:13:FD:D4
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:f5:4a:93:e2:9c:52:cb:1c:da:a1:e1:6e:cd:61:2c:fd:
         db:fc:34:30:96:de:da:9f:95:3c:5d:a6:e7:d1:4d:ff:f7:0b:
         2a:5f:38:8c:0d:35:70:e0:95:95:ca:fb:54:9d:98:d1:d4:12:
         bb:89:96:e3:f7:8b:7c:a2:e6:f3:e6:94:e9:3e:6e:f1:f9:de:
         d4:db:ef:c2:83:99:22:32:04:f0:1a:42:a3:52:a0:65:e2:5c:
         f6:4a:bd:6c:4d:ae:7e:1f:18:9f:60:06:2d:cd:7c:3e:42:7d:
         70:7c:2c:7f:15:5c:be:96:a2:4c:93:1b:fd:fa:b5:c6:58:18:
         e0:f9:ab:e0:33:8e:55:95:8e:e7:3f:88:49:5f:0e:eb:54:e2:
         16:74:e9:94:90:ba:41:75:61:17:11:83:b5:75:ff:35:fb:df:
         d7:97:67:cd:a1:ba:dc:cb:9c:4b:92:b6:85:6f:85:9a:0c:c2:
         73:28:24:f7:db:4e:6e:10:0d:fc:c5:10:73:c5:e8:3f:b3:b2:
         04:43:4c:f5:96:46:f9:eb:4c:47:28:5f:b8:65:4c:53:70:26:
         7c:61:04:f9:0a:a0:5e:a7:0f:ba:7b:23:ea:9c:ab:3e:c8:be:
         42:1c:fb:83:35:29:a9:f1:80:e7:6d:ef:94:eb:5b:c7:f8:47:
         00:dc:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:52:52 2025 by rpki-client