This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File:                     TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier:          QJV434rYhUh6Y9z2Nse5sAYPuAPRj0oQPpQiJN0plA0=
Subject key identifier:   A4:C5:6C:C0:41:78:BB:16:6B:0A:39:4D:DB:3C:61:87:42:1F:FD:D1
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer:       /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial:       019B36B4858A526D929E4828392D90839447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number:          1473
Signing time:             Fri 19 Dec 2025 13:02:38 +0000
Manifest this update:     Fri 19 Dec 2025 13:02:38 +0000
Manifest next update:     Sat 20 Dec 2025 13:02:38 +0000
Files and hashes:         1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
                          2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: Yenbrr9Zt/WoHA49RiMDCwmYAtZusCtLjXT82YWCnHM=)
                          3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b4:85:8a:52:6d:92:9e:48:28:39:2d:90:83:94:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
        Validity
            Not Before: Dec 19 13:02:38 2025 GMT
            Not After : Dec 20 13:02:38 2025 GMT
        Subject: CN=a4c56cc04178bb166b0a394ddb3c6187421ffdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:22:c5:26:4d:35:a7:f9:2e:19:84:19:3a:
                    31:99:70:10:83:68:75:c1:78:28:01:c9:1f:d0:31:
                    c2:2c:51:a3:f4:59:f0:ae:6e:2c:a5:f5:98:4e:03:
                    63:77:a9:5a:69:ec:3d:83:9e:a6:ef:10:62:8e:ba:
                    a8:21:e9:3a:9b:3f:a0:27:2e:77:12:17:1a:1c:25:
                    d5:18:e9:7c:6e:d6:34:b5:f0:6f:8a:06:de:12:61:
                    e0:d0:52:da:0e:2a:12:4a:da:a5:f4:ec:0e:20:2d:
                    05:e8:88:7b:62:c3:3c:f9:98:54:4c:21:0a:0c:37:
                    a4:46:b3:c4:cf:55:c3:62:8a:33:1c:f3:e3:f5:10:
                    76:1f:2d:f6:97:6f:bc:a4:5f:5a:5a:bb:a2:80:8e:
                    61:6e:8c:4b:e0:86:35:b1:f7:b7:87:10:2c:ff:85:
                    ae:26:77:ac:4a:25:28:e5:56:fe:72:fc:a0:c7:27:
                    c7:ea:82:2d:ed:5e:0b:e4:8e:4f:22:9b:89:e3:53:
                    97:e7:94:5c:ca:b6:d7:7f:80:54:3a:12:e1:87:de:
                    0c:22:01:fd:a9:5e:84:a2:8e:a2:2d:ca:4c:0a:b8:
                    0b:d9:44:a7:7e:65:7b:57:b1:e8:1b:43:dc:26:38:
                    6d:67:05:36:20:ff:13:7d:a3:89:c8:6a:10:25:14:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C5:6C:C0:41:78:BB:16:6B:0A:39:4D:DB:3C:61:87:42:1F:FD:D1
            X509v3 Authority Key Identifier:
                keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b2:d2:83:74:1f:95:6d:7d:c8:75:9c:61:89:dc:cd:96:46:
         a4:d3:03:d9:45:1c:5d:47:ce:8c:bf:28:4b:c4:56:fd:2e:3f:
         61:af:22:6d:f9:eb:29:15:2e:16:57:da:82:bb:18:fc:7b:77:
         13:ba:60:63:6e:f0:7b:6d:09:0c:db:b6:b9:eb:be:2a:fa:f2:
         76:c2:e5:63:80:b7:ef:0d:47:00:bb:bf:68:9f:a3:e2:f5:74:
         6f:d1:7f:db:5a:00:96:b1:18:3e:b6:9c:07:69:a9:90:12:c8:
         e6:2b:2b:9a:5d:fb:23:96:c7:f5:e2:69:cd:b1:29:a2:43:aa:
         19:57:f2:a7:bf:82:c3:ed:49:10:68:2e:fd:ec:70:e7:24:83:
         df:2b:df:66:4f:67:50:4b:41:4a:34:eb:9c:06:9a:0e:67:35:
         3a:62:84:9a:cc:9b:ac:78:ed:ee:de:90:0e:89:78:5b:f2:22:
         51:ca:5e:7f:bc:06:92:ae:dc:fc:cc:ce:9f:7f:91:ab:b8:c7:
         bf:c7:75:70:85:34:9d:22:89:1a:42:ff:b5:b7:02:e9:a2:1c:
         66:1b:89:36:c1:55:85:10:59:e6:3d:7d:3d:f7:7e:0f:55:30:
         7b:ce:c5:71:a1:31:bf:3b:80:c9:70:32:af:13:61:34:de:6e:
         7f:5e:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:49:57 2025 by rpki-client