This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
File:                     1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft (raw, json)
Hash identifier:          naZNdtrjJE63yJ1zD0/4TlzuxYmMA/u2uI964dhGBC4=
Subject key identifier:   E7:7F:82:78:BD:EB:A4:26:78:0D:AF:B4:3D:EB:F8:9C:6B:20:7E:A6
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Certificate issuer:       /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial:       019B3CEC4D7BB20AF92F9B61F7CF71390AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
Manifest number:          0A98
Signing time:             Sat 20 Dec 2025 18:01:17 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:17 +0000
Files and hashes:         1: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl (hash: 34Ir6dBttzKMyKwXTi9e0fL8dRE+WQ7B4QSZZZ+T6l4=)
                          2: 8lqYFrGrNOkRZZeWUQj06Qu37Rs.roa (hash: ffxrtsFLmlsEwmAGCn/uwuGnyvYGEI5eYJBSJExNWs0=)
                          3: goJ06I4X-EH8W30V7EVn5y0FKWk.roa (hash: 3tlp0UONPTSFHKc2l1cIXSXdpnGW/o8EYSwZkHrH5Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:4d:7b:b2:0a:f9:2f:9b:61:f7:cf:71:39:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
        Validity
            Not Before: Dec 20 18:01:17 2025 GMT
            Not After : Dec 21 18:01:17 2025 GMT
        Subject: CN=e77f8278bdeba426780dafb43debf89c6b207ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:32:7b:39:d6:46:5b:3d:dc:bb:4d:6b:83:
                    ae:06:84:5d:1c:f4:f6:9c:76:af:4f:fa:38:0c:8e:
                    6f:5b:d4:82:50:f3:f1:fa:88:91:6e:15:25:36:38:
                    ee:5b:58:14:07:2e:c2:3f:99:18:d7:e9:90:83:ef:
                    4d:65:20:82:04:6a:4c:b4:12:38:91:10:21:25:66:
                    37:5f:17:2d:64:e4:21:2b:8a:6f:16:0b:eb:7d:fb:
                    3c:11:7a:cb:58:99:a9:66:bf:7a:9f:73:f5:08:a6:
                    51:31:cc:0e:c0:bd:31:df:fa:58:5f:55:86:17:37:
                    77:19:dc:95:44:8d:09:d0:e7:af:eb:26:2c:da:9b:
                    92:c8:8c:be:28:34:4a:9f:a7:64:6d:0e:eb:0f:14:
                    89:88:5b:08:59:10:71:09:9f:48:48:e3:61:7e:e2:
                    d2:01:7b:0b:9b:ab:cd:f5:c2:5d:98:41:2f:44:97:
                    b0:94:4b:b7:ff:fe:d6:28:93:e7:e7:6a:ac:73:ce:
                    88:1e:59:fe:3f:b8:ac:27:35:1e:04:0d:97:bc:80:
                    fc:26:a2:a4:b3:13:f1:95:73:9d:b5:1e:cd:a3:e7:
                    95:c2:7b:0d:4e:f9:d0:d3:aa:e4:9d:3d:98:c4:cd:
                    b0:6c:8f:d2:0c:23:46:04:7b:d3:a1:2a:39:3b:20:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7F:82:78:BD:EB:A4:26:78:0D:AF:B4:3D:EB:F8:9C:6B:20:7E:A6
            X509v3 Authority Key Identifier:
                keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:2a:a9:77:3e:89:4c:d4:47:22:97:dc:d9:5f:00:e9:84:
         f0:bb:7c:42:96:7a:53:4d:43:4d:c1:eb:70:b1:a7:de:0a:68:
         34:f4:a9:f9:a8:21:ca:f8:16:1b:42:55:9e:b0:c7:a9:75:fa:
         2f:38:9b:43:12:7a:f5:78:04:72:20:3d:33:02:1c:39:fe:c5:
         c5:f7:29:43:aa:49:41:10:96:82:52:b5:bb:71:2a:b7:55:16:
         12:33:59:f5:4c:1e:df:ea:bf:b5:76:c8:11:7c:2b:9b:70:52:
         d3:f4:cd:08:b0:a6:bf:2a:63:ad:9f:27:d6:fa:4c:bc:63:f5:
         68:b6:15:39:44:fb:15:cc:b1:d6:ce:64:02:99:4b:25:1f:04:
         6b:2b:f5:e7:43:f1:eb:b8:75:6a:b6:bd:66:c7:c8:b0:51:f7:
         55:84:73:3a:54:6a:6b:a3:f8:64:cb:3b:37:86:5e:98:c8:9b:
         ce:49:20:40:3b:0a:b8:88:a4:f5:5b:7e:a7:90:fe:2e:98:72:
         73:0a:59:88:a6:14:ce:25:21:82:a3:d0:e3:5b:13:3d:f5:91:
         bd:ce:be:d0:5e:07:73:3e:f8:f4:03:2b:97:6e:2b:cc:1a:37:
         ab:58:db:9f:12:ab:1d:be:53:63:05:b7:7d:41:c1:50:2d:0e:
         bd:05:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:27:24 2025 by rpki-client