This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          GSuCZ0Sk+7P6udayJs+Du6BxMZMb2Scd7xOjMyB3Fg4=
Subject key identifier:   F3:28:6F:AD:82:39:D9:ED:4D:D0:F2:6B:55:1C:F5:47:45:E3:8F:D5
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019B3FED462A5902D848CFE9149575E29700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0D4D
Signing time:             Sun 21 Dec 2025 08:01:13 +0000
Manifest this update:     Sun 21 Dec 2025 08:01:13 +0000
Manifest next update:     Mon 22 Dec 2025 08:01:13 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: Mhkcct0T3t7rBh44/yc+ZNXGVWiIqDafE3FK1QayHLI=)
                          2: 49OmEENKn2pggkZrla5_tvJAS5g.roa (hash: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=)
                          3: 98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (hash: EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=)
                          4: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (hash: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=)
                          5: xOL_ByJQJZQBMqDAvRuOKjD76Yk.roa (hash: oV4k7YTonHST8wxb9nEmyy0EnbuDv3hYSGZBk73gZvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:ed:46:2a:59:02:d8:48:cf:e9:14:95:75:e2:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Dec 21 08:01:13 2025 GMT
            Not After : Dec 22 08:01:13 2025 GMT
        Subject: CN=f3286fad8239d9ed4dd0f26b551cf54745e38fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:25:53:e1:d5:6c:26:49:cc:1b:67:6b:54:
                    de:8f:d2:32:7d:88:60:9d:1b:17:b0:f8:56:c7:be:
                    99:59:54:1d:83:08:d4:fb:7e:09:a3:d3:57:94:86:
                    1b:62:b6:b8:ac:0a:de:fe:67:1f:ed:bc:0a:e3:6f:
                    be:df:26:df:30:3e:5b:27:ce:cd:ea:39:08:1a:23:
                    62:fa:22:b0:cc:79:ed:ee:01:8a:41:9d:cf:f6:bb:
                    61:9d:97:1b:39:a2:6a:f4:53:34:10:70:ce:cf:02:
                    13:c0:64:d9:b6:5d:1b:04:89:cc:33:a4:f1:74:ef:
                    1c:06:2b:88:cc:2a:02:6a:89:a9:97:a9:c5:93:5d:
                    4b:f0:bb:72:ff:49:f0:3f:ef:33:ad:a2:8d:38:5a:
                    b3:42:0b:4f:50:eb:e0:fc:ce:36:6d:94:46:42:7e:
                    de:9e:67:5a:67:3e:d9:71:2a:71:8b:5f:bd:fa:bc:
                    74:ae:f9:fe:17:85:c3:15:b5:2a:7e:80:0e:99:92:
                    de:17:78:58:cb:0e:2a:2e:8f:35:40:ac:b0:6d:65:
                    ed:ce:cd:60:8b:aa:b8:93:d5:28:5b:5f:08:25:46:
                    47:89:a4:84:cb:97:c7:03:41:39:68:18:1f:d6:12:
                    0c:3b:bc:3e:08:39:05:06:cb:56:41:cc:a8:8e:d1:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:6F:AD:82:39:D9:ED:4D:D0:F2:6B:55:1C:F5:47:45:E3:8F:D5
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:40:d7:9f:75:58:06:79:aa:b5:d2:d7:b7:ff:81:db:a1:94:
         69:54:48:e4:0e:9c:62:2d:22:34:f2:4d:87:31:57:12:95:fe:
         9b:aa:d9:33:34:d3:a4:c0:77:f1:4c:0e:ca:ba:33:ce:92:9c:
         30:fd:d1:af:44:69:e1:9d:ea:90:7c:84:e1:13:5f:b4:e3:3a:
         e1:8e:55:6d:be:31:e1:48:8f:6d:c5:de:d8:00:f2:b5:a2:28:
         13:9a:cc:5d:ef:00:65:ab:ff:be:86:9c:11:01:9d:ec:b6:81:
         e3:e8:a8:8c:41:a0:f5:2f:d6:8d:e1:21:ac:94:d6:8b:07:43:
         8d:91:3c:0b:fb:a9:fc:7a:04:8f:ad:e5:8a:15:0d:95:bc:7b:
         45:88:50:5c:ef:ef:e9:e1:4d:b3:8d:98:f8:53:02:04:18:56:
         c5:d6:2c:9a:29:bd:bb:d0:25:dc:69:71:b9:ab:b1:54:b7:71:
         65:fe:18:41:fc:df:f7:c9:95:b3:25:ca:dd:0e:32:15:e2:6a:
         a2:58:c8:3b:3f:c9:f0:21:a8:cd:73:99:29:bc:f2:e8:44:9a:
         90:1f:ae:71:8c:d6:bc:12:57:11:0a:12:7b:39:40:c8:ca:0f:
         37:39:0c:17:39:39:79:a5:69:1b:62:12:cb:34:d0:61:a7:f6:
         88:48:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:15:15 2025 by rpki-client