This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
File:                     c-9Luv3HPlPAmdTVLpye_6g3m08.mft (raw, json)
Hash identifier:          Bd4DZ7vePCM0UICKhN6FSbECBqAwUz0qNzv+BGKlSVg=
Subject key identifier:   BE:A1:3C:B8:F8:FF:81:65:9E:80:05:69:D9:21:74:02:90:34:F1:F6
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Certificate issuer:       /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial:       019B706B15B04EBD5C6A70AC04B684B292BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
Manifest number:          13C7
Signing time:             Tue 30 Dec 2025 18:00:24 +0000
Manifest this update:     Tue 30 Dec 2025 18:00:24 +0000
Manifest next update:     Wed 31 Dec 2025 18:00:24 +0000
Files and hashes:         1: 9pCer8puLnj5hC-8qZh7MHueqPs.roa (hash: IUzgUbYlTvAtwHST9A9dU/nYKg0FWPtCZLzU6KzN7aI=)
                          2: c-9Luv3HPlPAmdTVLpye_6g3m08.crl (hash: //fIUsphFe0WYD0UjqO764ASXvyWmvSxUS8nOJfF+ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:6b:15:b0:4e:bd:5c:6a:70:ac:04:b6:84:b2:92:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
        Validity
            Not Before: Dec 30 18:00:24 2025 GMT
            Not After : Dec 31 18:00:24 2025 GMT
        Subject: CN=bea13cb8f8ff81659e800569d92174029034f1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:e2:e6:f3:3c:91:79:9b:97:4b:48:5d:99:
                    e1:91:82:3c:66:0e:b0:04:46:f2:bf:a4:85:68:35:
                    c3:83:96:c2:8d:2a:8a:86:49:72:1e:f2:2b:6a:f2:
                    ce:3a:d4:85:78:d0:ab:a3:39:54:1f:f2:5a:08:8a:
                    c7:e8:07:bc:49:8d:cd:be:d1:99:18:e8:a1:f8:a3:
                    19:c1:a1:40:ab:f1:05:31:13:06:de:8f:f4:4c:ea:
                    a8:ee:9a:f9:61:a7:55:75:0e:cd:70:a1:a9:24:f3:
                    a9:37:f1:b2:81:66:31:6b:01:e7:30:7c:74:48:2d:
                    2f:9b:0f:78:0a:0e:b5:f9:6d:98:74:6e:27:be:54:
                    26:76:ba:73:f2:ab:69:d7:b6:0d:35:f0:dd:32:3d:
                    39:dc:26:24:78:46:b0:84:bf:fc:53:be:3a:00:b3:
                    d8:24:d2:46:26:4d:bc:4b:c4:df:3e:3a:83:f2:31:
                    92:12:8c:ff:45:74:67:96:21:a1:7a:dc:40:d4:c7:
                    28:31:28:7a:b5:6e:1d:65:12:4c:16:cc:13:99:ba:
                    2b:ea:b1:e4:8f:58:8d:a5:6c:f9:b5:73:78:93:a2:
                    da:a9:56:b9:a1:b7:55:ef:d6:7e:5c:2f:80:c1:9f:
                    74:2b:00:b4:d5:0a:0d:a1:08:29:70:73:b1:25:6e:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A1:3C:B8:F8:FF:81:65:9E:80:05:69:D9:21:74:02:90:34:F1:F6
            X509v3 Authority Key Identifier:
                keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:91:3f:56:f8:8f:dc:ce:ec:4c:f3:e2:77:19:af:38:c9:
         86:44:97:4d:4b:78:a3:47:ed:3a:2a:51:e1:32:7f:27:32:19:
         da:31:88:e4:d0:d2:13:be:8f:6e:fd:23:b0:6a:ee:29:b9:21:
         26:17:ac:16:aa:d0:bd:3d:0b:58:97:2d:8e:59:50:b6:8b:04:
         2f:06:f6:d7:ae:a0:19:04:b8:4d:50:07:9e:a5:b5:56:f8:78:
         5f:86:f9:9e:25:4e:aa:80:be:0e:ea:40:de:0e:b9:e6:c7:f0:
         c1:f8:63:12:0f:85:0a:13:39:67:48:7e:18:f1:e8:43:7f:65:
         33:c6:ac:92:98:50:2e:35:fe:f1:ed:17:38:ad:09:bd:89:49:
         ed:55:7d:38:43:9b:77:5d:12:17:52:14:e4:80:b5:9a:5e:ef:
         89:3c:88:99:03:93:32:24:4f:8f:0c:86:c5:2b:e5:de:b8:53:
         d1:7d:45:3e:8c:2a:f2:6c:a0:4b:53:43:62:a2:5a:14:a3:71:
         4d:1d:59:77:17:56:34:4b:44:55:13:93:97:dc:11:ed:53:67:
         53:1c:f5:00:82:47:3e:da:ce:62:2f:5f:e7:c9:67:c3:39:4c:
         71:1f:52:5d:ac:8f:0c:36:11:fc:57:d7:41:91:28:9b:73:0a:
         28:ed:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:09:19 2025 by rpki-client