This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File:                     auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier:          gyqnulq0J1VCd7hq1GVoMYXouNMM/6R1KCBbf0Ufbio=
Subject key identifier:   7A:D5:D3:2B:12:A1:99:EF:84:0F:CC:CC:25:84:B5:9B:26:4D:B1:15
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       019B6B0E51D6FEBCA939F01D5EBFFC1BABF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number:          1254
Signing time:             Mon 29 Dec 2025 17:00:59 +0000
Manifest this update:     Mon 29 Dec 2025 17:00:59 +0000
Manifest next update:     Tue 30 Dec 2025 17:00:59 +0000
Files and hashes:         1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: rj9SCKpSpm1bWNgJknHHLYZcQxUDXCwg296pDy/SvUk=)
                          2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
                          3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 15:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:0e:51:d6:fe:bc:a9:39:f0:1d:5e:bf:fc:1b:ab:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Dec 29 17:00:59 2025 GMT
            Not After : Dec 30 17:00:59 2025 GMT
        Subject: CN=7ad5d32b12a199ef840fcccc2584b59b264db115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f8:f5:88:75:ee:42:39:d8:ee:b2:0c:72:9e:
                    90:1e:e7:bd:bb:b0:4f:92:95:e7:b5:2e:17:4d:e4:
                    d0:84:56:f1:28:c0:b2:0a:23:eb:7f:8c:75:3c:22:
                    e6:5a:8e:64:49:e9:6f:b8:10:09:e0:ab:2b:9e:e6:
                    cc:dc:8f:29:c8:a5:6c:b2:4f:9a:d6:52:a7:62:d3:
                    11:d0:12:da:ed:b5:d8:aa:e2:ef:44:8d:6e:81:f0:
                    79:c9:af:ab:40:8f:57:0b:39:5c:8d:90:c2:a0:b7:
                    77:0d:bc:1b:b5:e9:8b:46:e0:34:85:34:fb:12:3a:
                    85:d0:d9:18:d6:44:a3:de:c4:d6:2a:fb:e1:b7:a2:
                    76:e3:04:4b:09:78:38:1c:f2:f0:85:ee:79:f3:54:
                    61:9c:99:cd:bd:21:8c:db:02:e0:60:4d:4d:0c:42:
                    97:bf:4f:05:ae:4e:0b:6b:41:98:c9:b5:68:4b:36:
                    77:92:27:87:4e:da:d1:e4:72:61:f1:29:8f:0d:1e:
                    ba:ec:3c:c6:a8:cf:54:72:e3:fe:d4:c9:0c:c9:b1:
                    e0:80:1f:26:27:8f:c4:bc:b4:eb:8a:af:4e:43:79:
                    96:17:92:42:ad:c2:a9:f8:6f:15:f7:73:b9:e6:9d:
                    fa:65:02:d9:84:fe:55:f5:cc:6f:24:84:30:77:fe:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:D3:2B:12:A1:99:EF:84:0F:CC:CC:25:84:B5:9B:26:4D:B1:15
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:53:fe:88:f8:10:d6:a6:9d:5e:4a:1b:16:f4:eb:8c:ea:6e:
         a0:ef:41:c8:a4:94:36:ce:ed:8e:b2:02:a6:35:f9:7f:88:ff:
         0d:d6:42:47:a1:5a:17:bf:6c:42:79:05:06:34:c2:85:dd:3e:
         ff:59:8c:45:bd:61:fa:dc:8c:5d:e9:e0:d4:62:e0:1d:bf:1f:
         45:92:60:48:84:74:53:ed:e9:57:b2:42:ee:dc:40:76:ad:08:
         c1:7b:c2:b8:dc:02:47:79:f2:0f:ca:eb:e4:dd:b4:ab:e9:3e:
         26:d4:34:18:ff:b4:02:cc:24:1b:a7:a5:33:c4:5e:83:65:d0:
         27:0c:0c:23:35:61:3b:65:c7:d6:f2:fb:65:d6:7b:31:5a:47:
         6d:5e:5f:33:04:2b:11:f5:2f:96:82:1a:62:17:36:15:dc:52:
         14:61:5c:36:aa:7a:d8:3d:2e:cb:06:e8:1f:26:1d:d7:8a:fd:
         8c:33:8e:4b:07:49:e9:45:61:bb:08:0b:f6:24:c8:35:b7:23:
         74:1a:91:33:ba:8d:0d:13:b0:97:e9:ac:14:df:4c:94:2d:52:
         53:09:ef:d7:9c:fd:1b:95:e2:12:5b:48:4f:74:79:3d:bc:ef:
         cc:b1:e6:0b:6d:11:c4:43:b4:62:7c:73:31:26:08:d4:6e:e1:
         9b:0d:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:44:51 2025 by rpki-client