This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File:                     D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier:          oOfl9NFn5rU49xT9FKAyt/1ZKeZ3+ef9MHnLuujuBv8=
Subject key identifier:   E0:87:FA:9C:40:5E:C0:EB:CB:BB:65:C2:A8:32:72:CA:A8:99:0F:DC
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer:       /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial:       019B44384014D3D071D866E7F13AD36EE359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number:          06A4
Signing time:             Mon 22 Dec 2025 04:01:35 +0000
Manifest this update:     Mon 22 Dec 2025 04:01:35 +0000
Manifest next update:     Tue 23 Dec 2025 04:01:35 +0000
Files and hashes:         1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
                          2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: WiGMPjs6q+OtXB1q8qQiZ6mipOtHTtf5zP2bqLCytb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:38:40:14:d3:d0:71:d8:66:e7:f1:3a:d3:6e:e3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
        Validity
            Not Before: Dec 22 04:01:35 2025 GMT
            Not After : Dec 23 04:01:35 2025 GMT
        Subject: CN=e087fa9c405ec0ebcbbb65c2a83272caa8990fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:16:16:8e:0a:88:0d:53:d0:42:7c:75:88:
                    96:b1:f5:e4:9d:1d:2d:92:f6:9a:b7:21:e0:bd:ba:
                    79:85:9f:af:5b:1c:bf:de:a0:a4:a9:91:70:e9:dc:
                    20:df:88:34:2a:31:69:8f:59:b3:9d:75:61:5c:b1:
                    09:b0:0a:f2:0d:1c:4b:d6:39:21:38:df:2c:c6:78:
                    68:ad:89:91:3b:ca:c3:6a:7b:d9:ee:a2:34:98:80:
                    e1:3f:19:1e:b0:d2:4f:ab:b9:0b:82:0b:9d:76:88:
                    e5:56:9d:34:62:4c:30:48:40:ac:b2:59:91:53:97:
                    bb:7c:3c:4c:aa:03:03:44:63:3c:4e:51:b0:5d:3c:
                    64:4c:16:b6:b7:c4:ea:e1:28:29:ba:34:9c:18:b2:
                    53:e8:60:37:2e:4d:cd:2c:29:81:74:32:0b:bd:57:
                    c7:4d:00:41:8b:b5:fe:6b:45:f5:18:5e:53:f7:26:
                    3c:49:1f:3e:f1:46:ce:a5:43:45:60:0a:0b:1a:3c:
                    f0:6b:4d:15:f2:0f:83:b3:be:74:40:51:7d:97:f2:
                    64:88:c3:20:cd:79:f0:59:56:e3:12:e8:83:c5:bc:
                    d6:90:53:87:85:08:23:b7:c5:f0:98:67:54:8a:8a:
                    ff:bb:2b:0d:4e:f8:13:ac:07:0d:e3:48:f5:43:f0:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:FA:9C:40:5E:C0:EB:CB:BB:65:C2:A8:32:72:CA:A8:99:0F:DC
            X509v3 Authority Key Identifier:
                keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:2c:f3:7f:52:e9:45:a0:01:03:94:14:ce:80:3e:05:a1:
         1b:1e:92:b8:05:0f:9c:45:35:6c:ec:96:92:5b:fe:a6:2a:30:
         b5:0c:30:68:49:56:77:7c:88:c8:da:13:77:46:50:ce:80:46:
         ec:76:ba:8e:65:e8:fb:2f:0f:4a:1e:fa:61:39:1b:c3:6d:7f:
         21:6a:5c:ef:9b:57:a7:20:e5:c1:ff:7b:96:b3:7e:3f:a7:a5:
         84:22:05:03:2c:0a:93:82:54:7b:a1:5e:1d:2e:1a:f8:f6:ad:
         82:28:b6:58:a8:73:0a:09:76:75:0f:6a:48:98:c1:35:1c:76:
         82:eb:93:27:a5:6c:5a:04:09:49:12:7b:a4:a9:56:a4:cc:2c:
         7b:31:ea:91:fb:d9:6a:89:42:cd:5e:c1:81:d9:9d:34:6c:73:
         64:93:55:b7:c4:ec:a8:18:c1:2f:1b:27:e1:24:b2:e6:2e:d2:
         43:a2:12:18:77:ee:33:73:bd:9a:3e:b2:af:d8:72:3c:96:1f:
         1f:81:e4:0c:e8:88:37:d7:1c:2e:4f:7a:fc:9f:56:e3:68:80:
         1a:ad:dd:45:37:44:72:d0:ae:09:36:a7:cb:fd:75:97:42:9f:
         cd:e7:8d:2b:08:a3:9b:63:aa:ca:6a:22:6c:58:cf:70:ff:b5:
         fc:f5:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:47:16 2025 by rpki-client