This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File:                     c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier:          fZSzqCZdNRXg+vi4EjC4CkgkWbsWZrFJb/RMiOYlefA=
Subject key identifier:   06:7C:19:8F:2E:18:6A:FF:8F:C8:D8:63:7B:EA:DD:FC:39:AC:AC:E6
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       019B5305E2647FBF91F6DBC52CF06B22EF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number:          15B0
Signing time:             Thu 25 Dec 2025 01:00:53 +0000
Manifest this update:     Thu 25 Dec 2025 01:00:53 +0000
Manifest next update:     Fri 26 Dec 2025 01:00:53 +0000
Files and hashes:         1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
                          2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: 2Noo1eGB7Y01CG1vJ7pJGKG2+oN5wi0ecxz4VLZR+F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:05:e2:64:7f:bf:91:f6:db:c5:2c:f0:6b:22:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: Dec 25 01:00:53 2025 GMT
            Not After : Dec 26 01:00:53 2025 GMT
        Subject: CN=067c198f2e186aff8fc8d8637beaddfc39acace6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:19:4b:c4:56:01:97:99:ee:19:ea:97:22:
                    6f:6f:66:57:76:ac:c9:f2:5c:f5:4f:e4:ae:4b:95:
                    82:7a:3a:85:93:69:25:47:29:02:0c:9b:94:94:33:
                    a2:c4:b3:4a:86:89:f5:a0:76:a2:3f:c0:54:af:58:
                    de:56:57:8c:e5:15:71:e1:2d:9f:f5:09:a4:2a:e6:
                    ef:ca:c6:f0:9f:00:0d:44:e5:56:a9:5e:d4:81:bb:
                    94:02:2e:d4:69:bd:4a:f2:61:8a:db:b0:06:38:97:
                    96:a1:03:3a:56:16:d3:52:d1:9e:0d:08:b4:10:28:
                    6d:9d:25:74:b2:59:6e:5e:56:ee:e9:17:a0:2d:01:
                    1c:f2:fa:8b:60:30:d2:ad:76:da:3b:61:75:d6:b9:
                    09:78:59:5d:09:33:78:fb:5a:fc:5a:e7:96:a8:a6:
                    a0:9e:04:32:c9:42:4c:05:9c:62:a0:f4:8f:d8:f1:
                    7f:b9:bc:6f:32:b5:44:a1:dc:47:10:ae:f2:bc:59:
                    e2:b5:57:3f:74:64:83:9d:6c:b9:a2:11:9c:d3:fe:
                    9d:07:99:00:42:be:8e:8c:4f:87:80:b2:88:b0:a5:
                    90:ee:7e:d6:16:8f:be:ce:12:72:a4:0e:5b:8f:0f:
                    c0:eb:4a:b8:a8:2e:d4:9f:95:71:39:06:06:63:2a:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:19:8F:2E:18:6A:FF:8F:C8:D8:63:7B:EA:DD:FC:39:AC:AC:E6
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:53:9d:06:bf:fb:8f:43:35:06:29:2a:61:36:69:49:91:
         7e:58:eb:38:d0:1f:1a:04:da:c5:6f:c8:e7:76:a2:ac:e4:6a:
         bb:dc:af:92:34:f0:cb:7b:f3:f8:d3:c5:57:6e:c4:c8:a3:a5:
         b9:19:9c:81:7e:49:ce:65:85:bd:13:74:f7:56:3b:91:06:f8:
         a7:8b:c3:8d:89:13:c4:99:bd:d0:ec:10:fb:b8:06:03:90:20:
         1a:38:16:44:69:1e:d4:1f:49:a6:51:60:7d:42:0e:ba:b2:d5:
         3d:22:1e:4e:d6:f2:9d:97:9a:e3:5f:7d:96:b9:09:63:6e:ef:
         3b:c0:63:e3:cf:1c:ca:47:a4:07:df:74:da:a7:7a:69:37:fd:
         74:c8:39:81:e7:c2:31:ca:3a:6a:6b:42:22:6e:d9:5b:3d:85:
         a3:b5:6b:4e:a8:b0:6b:19:b7:69:e5:9b:ea:4a:10:01:bc:77:
         60:ee:26:be:f3:66:49:7f:a4:44:8c:6a:cc:2a:64:ff:55:03:
         ac:43:f7:9e:9d:b3:6b:df:a0:9f:7d:f2:02:b7:ee:6c:c7:4e:
         22:6a:48:34:4e:62:80:31:ea:2c:97:7f:b7:15:65:01:37:00:
         1b:72:6e:5f:92:78:e9:d8:02:9d:20:35:61:30:eb:18:15:d2:
         06:fe:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:15:41 2025 by rpki-client