This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          deSqJaDTdD3UaOADzFXn3xEEu7+BWVOaKOU7uxj3Ydo=
Subject key identifier:   4A:A7:F7:B5:1D:13:9C:80:66:26:AA:61:42:D0:E5:71:90:2C:5C:77
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       019B3DFE8155EA200C6536CF71E01ECEC2BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0A14
Signing time:             Sat 20 Dec 2025 23:00:47 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:47 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:47 +0000
Files and hashes:         1: 3wIhCEw3GWmZT7mdirKx25Pph28.roa (hash: r+Bw53VwkmYw54+5M14miJP/kk33s3+eanOkc4CeEtQ=)
                          2: E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa (hash: gowTRbLyNdf/42ayzy0sQQZU9KBkEVzXjFvCn/3IDtc=)
                          3: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: 48Kexkqpzy0kNv6sIdrip4ZMv6NKf1KnI6DpHPXALRs=)
                          4: rjR8lGZevB88cWBoZrBIto3MeHA.roa (hash: rMHaEQRl7caXSgxty5dwGL/wlOcGLl25XAlQeBFASec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:81:55:ea:20:0c:65:36:cf:71:e0:1e:ce:c2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Dec 20 23:00:47 2025 GMT
            Not After : Dec 21 23:00:47 2025 GMT
        Subject: CN=4aa7f7b51d139c806626aa6142d0e571902c5c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:c9:79:ae:5f:73:a1:fe:84:3e:35:3b:8b:
                    87:36:4e:b4:7c:f2:bc:99:00:46:91:25:51:e4:65:
                    e6:8a:3e:28:93:f4:24:69:fb:76:76:8d:a9:60:a7:
                    2e:46:94:f5:4a:f7:4d:96:6d:4e:b7:79:a9:c7:cc:
                    4e:3f:09:cf:e0:52:8f:21:f4:b1:1b:d7:61:ff:95:
                    34:c5:83:d8:88:35:be:f4:3a:8d:c7:41:5c:e0:d2:
                    42:26:68:97:5f:a6:d7:51:4c:de:65:dc:c3:68:0e:
                    91:74:f8:c8:c4:f4:35:be:9c:6a:e0:2a:f6:d6:16:
                    57:24:f0:90:8c:34:d0:49:cd:a8:d8:43:d5:90:97:
                    80:89:45:57:79:de:8e:4a:79:00:2b:31:78:af:0b:
                    92:8b:5b:2f:0c:bd:5f:14:58:83:99:e5:4e:a2:e5:
                    a9:ff:52:9d:ab:27:48:a3:ca:09:5c:ac:21:11:1c:
                    5d:43:5e:b2:ee:4c:21:0d:f6:e0:13:65:ac:59:55:
                    e2:f0:91:b0:a6:87:58:49:43:94:2d:28:27:de:ee:
                    fa:f7:b8:d5:ba:28:ee:53:f2:39:ce:b0:f7:d4:a3:
                    11:ae:2f:a2:3b:14:c7:3c:d4:c7:f3:e8:43:1c:b0:
                    a9:bd:31:78:96:96:f1:b0:3d:f4:5e:87:f0:09:29:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A7:F7:B5:1D:13:9C:80:66:26:AA:61:42:D0:E5:71:90:2C:5C:77
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:bc:f5:94:b4:0c:0f:41:6a:ea:85:05:e9:ad:77:8c:1b:47:
         42:1f:29:ba:64:e6:e5:a5:5a:fe:3a:de:91:23:68:c5:90:58:
         56:8b:f2:d6:d1:02:f9:b2:07:50:d8:fc:0f:7d:80:1d:26:00:
         62:79:45:1b:76:b6:b9:b3:fe:54:b1:7c:3a:fa:39:2d:44:5d:
         03:d4:3f:62:52:eb:02:41:63:c5:6c:96:fe:4b:0a:58:50:89:
         3d:2a:d2:80:2f:b5:bf:d6:2c:24:3e:22:34:a8:cc:7f:85:e3:
         03:b8:7f:5d:1a:53:5d:34:a4:e1:47:66:1b:9d:29:57:c1:84:
         cb:34:c3:9a:04:53:32:73:08:43:97:b0:f2:85:ac:8f:82:1c:
         2c:9c:a4:52:91:86:a0:0d:0e:04:48:ef:e8:48:04:46:7b:0a:
         63:da:0a:d2:ba:ff:4d:72:c5:e0:a8:64:59:15:a2:f3:69:15:
         79:82:cb:f7:34:0a:d9:37:e6:03:e4:47:d0:4a:98:d5:42:04:
         11:29:32:95:d4:5c:9b:d4:c6:5a:38:c9:4b:ac:7f:f9:6a:3f:
         d0:c9:90:2f:f0:b1:02:23:46:04:9f:ed:6d:41:3b:b3:4c:14:
         16:0c:cf:af:15:98:35:ab:ee:2d:c0:7a:16:94:17:ae:e8:3b:
         83:49:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:49:19 2025 by rpki-client