This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File:                     TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier:          IU4YIeQ9+WxrnObEx1A8o7Cu5Q0fQomyXgrPi8fVHeM=
Subject key identifier:   8C:ED:18:B7:BD:B1:98:33:44:48:F7:FB:8F:07:C7:8A:67:5A:1A:44
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer:       /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial:       019B386A091DBC7033E55712DAA5C1EF31DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number:          0ECB
Signing time:             Fri 19 Dec 2025 21:00:31 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:31 +0000
Manifest next update:     Sat 20 Dec 2025 21:00:31 +0000
Files and hashes:         1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
                          2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: 1FPyEC5tF+LNWRr2MYwLkVFthRGizbSuRo3wRZ/2JQ4=)
                          3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:6a:09:1d:bc:70:33:e5:57:12:da:a5:c1:ef:31:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
        Validity
            Not Before: Dec 19 21:00:31 2025 GMT
            Not After : Dec 20 21:00:31 2025 GMT
        Subject: CN=8ced18b7bdb198334448f7fb8f07c78a675a1a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:6f:c1:b2:16:1a:1b:04:a7:52:24:e9:11:
                    56:2c:da:38:3a:d4:47:d4:86:e1:f5:a4:d6:b0:37:
                    4f:22:81:cb:63:c8:40:ec:80:61:61:d0:22:74:45:
                    94:19:ed:bc:58:57:17:90:21:40:99:75:3a:66:6b:
                    00:23:e7:66:b9:0b:10:47:17:93:36:eb:46:99:a6:
                    b1:fe:97:53:d2:10:2e:e7:22:90:1b:46:65:4f:8f:
                    c8:69:80:f2:dd:07:cd:a5:09:67:ad:e8:ba:ab:ab:
                    65:5e:0f:bb:a8:2a:f9:f0:89:dd:f6:bc:26:a0:ab:
                    59:34:84:c3:bf:a0:c5:c1:03:ab:13:70:b4:43:23:
                    81:34:ae:98:79:db:b4:9d:db:9a:bd:b5:76:45:1b:
                    56:f3:44:3c:4c:0e:94:73:b6:69:5d:51:30:0b:bc:
                    72:01:4e:46:9a:bc:9e:9f:64:98:80:27:bb:b9:30:
                    5a:61:6c:79:10:25:ca:ab:04:8e:68:93:48:15:85:
                    32:69:da:54:76:be:22:a9:0b:ee:9d:f6:c7:f8:96:
                    b2:fb:ba:3f:8f:ee:3a:b5:6e:87:5f:25:e0:61:ba:
                    5d:44:2d:e2:fb:e6:ac:9e:56:4a:1a:92:b9:95:42:
                    de:72:e3:67:1b:55:f4:b1:3c:6c:bd:24:f0:65:d3:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:18:B7:BD:B1:98:33:44:48:F7:FB:8F:07:C7:8A:67:5A:1A:44
            X509v3 Authority Key Identifier:
                keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:32:26:9a:7a:45:6a:c1:67:fd:b4:0d:3a:1e:3c:a9:1d:
         4a:0b:7a:85:c8:b9:7d:f7:b6:f8:84:d2:1c:91:44:70:dc:e8:
         da:56:c9:d2:1e:11:75:eb:e0:d6:6a:2e:2c:a5:99:39:6b:19:
         4e:66:93:5f:d1:03:7b:9f:45:a2:b6:6e:4d:ee:6d:45:a5:69:
         7b:44:36:f8:6a:5e:5c:2d:9a:e2:59:82:1e:6d:f9:54:a1:a4:
         5d:e6:1c:59:64:88:3e:f9:70:bf:28:ba:87:d8:e3:cd:a8:5a:
         7c:bd:54:3e:3a:34:08:63:0e:cb:e8:86:84:1d:71:55:bc:c9:
         1e:02:14:dd:fd:e4:54:8f:0b:fd:fc:22:4d:d2:77:8f:71:ee:
         2f:2d:7d:90:95:da:a9:59:14:1a:b8:06:64:c9:49:b7:a2:ff:
         f5:73:fe:d4:01:cc:82:d1:42:61:1d:36:60:21:7a:25:e8:d1:
         ac:cc:bf:cc:ff:9a:f8:9e:30:95:05:60:e7:17:b2:f7:e9:1c:
         0f:bc:85:15:77:d3:75:1d:67:f1:fe:1e:6d:fa:39:e7:33:91:
         03:92:e2:e7:39:49:7d:32:b5:5d:d6:e9:6f:33:f7:0a:ca:80:
         00:7b:44:e6:d4:ba:c9:20:b3:cb:c9:23:c9:1b:c7:ff:1a:4e:
         f3:88:6d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4agkdvHAz5VcS2qXB7zHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw
OTJlOWUwHhcNMjUxMjE5MjEwMDMxWhcNMjUxMjIwMjEwMDMxWjAzMTEwLwYDVQQD
Eyg4Y2VkMThiN2JkYjE5ODMzNDQ0OGY3ZmI4ZjA3Yzc4YTY3NWExYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWFvwbIWGhsEp1Ik6RFWLNo4OtRH
1Ibh9aTWsDdPIoHLY8hA7IBhYdAidEWUGe28WFcXkCFAmXU6ZmsAI+dmuQsQRxeT
NutGmaax/pdT0hAu5yKQG0ZlT4/IaYDy3QfNpQlnrei6q6tlXg+7qCr58Ind9rwm
oKtZNITDv6DFwQOrE3C0QyOBNK6Yedu0nduavbV2RRtW80Q8TA6Uc7ZpXVEwC7xy
AU5Gmryen2SYgCe7uTBaYWx5ECXKqwSOaJNIFYUyadpUdr4iqQvunfbH+Jay+7o/
j+46tW6HXyXgYbpdRC3i++asnlZKGpK5lULecuNnG1X0sTxsvSTwZdMnXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIztGLe9sZgzREj3+48Hx4pnWhpEMB8GA1UdIwQY
MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt
YzFmZjA1NmZjNzZmLzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm
LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNgyJpp6
RWrBZ/20DToePKkdSgt6hci5ffe2+ITSHJFEcNzo2lbJ0h4Rdevg1mouLKWZOWsZ
TmaTX9EDe59ForZuTe5tRaVpe0Q2+GpeXC2a4lmCHm35VKGkXeYcWWSIPvlwvyi6
h9jjzahafL1UPjo0CGMOy+iGhB1xVbzJHgIU3f3kVI8L/fwiTdJ3j3HuLy19kJXa
qVkUGrgGZMlJt6L/9XP+1AHMgtFCYR02YCF6JejRrMy/zP+a+J4wlQVg5xey9+kc
D7yFFXfTdR1n8f4ebfo55zORA5Li5zlJfTK1XdbpbzP3CsqAAHtE5tS6ySCzy8kj
yRvH/xpO84htwg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:12 2025 by rpki-client