This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File:                     KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier:          Jjs4aO3JxtswkpHGtqaQz+au9JsozT76HIEJqmkPU+o=
Subject key identifier:   57:71:93:14:C7:67:9D:35:7E:6C:18:BB:47:70:0D:78:1F:9B:FD:0A
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer:       /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial:       019B533CEDFA9A1A63A3AB17979A632C31CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number:          0B46
Signing time:             Thu 25 Dec 2025 02:01:00 +0000
Manifest this update:     Thu 25 Dec 2025 02:01:00 +0000
Manifest next update:     Fri 26 Dec 2025 02:01:00 +0000
Files and hashes:         1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
                          2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: IFBc0ywwPHJy4pbKjZ4A7B1VAnDg0UXfOrupZAQ5bAY=)
                          3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
                          4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:3c:ed:fa:9a:1a:63:a3:ab:17:97:9a:63:2c:31:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
        Validity
            Not Before: Dec 25 02:01:00 2025 GMT
            Not After : Dec 26 02:01:00 2025 GMT
        Subject: CN=57719314c7679d357e6c18bb47700d781f9bfd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:89:c7:29:a7:7b:b3:8d:19:d5:56:e8:fe:
                    7e:79:31:d9:7a:2e:e1:52:f0:99:1e:e5:45:a0:1d:
                    6a:14:19:9f:a2:f4:ba:27:bf:a5:10:5d:59:3f:c4:
                    3e:3b:2a:bd:da:2f:bc:81:7e:dc:52:b0:2c:db:12:
                    cd:4c:40:6e:c7:85:7b:62:53:15:72:32:c5:20:f7:
                    59:7c:45:36:fe:b5:12:5a:bf:02:9e:fb:0a:f1:54:
                    46:4e:32:0e:99:ad:79:8f:2e:67:36:46:57:88:55:
                    94:f6:18:f5:b8:2b:db:37:36:da:00:5f:f5:aa:dd:
                    e7:ec:6e:9b:63:ab:97:9f:5d:69:8b:65:c2:91:fd:
                    e9:ca:e3:6f:45:09:cb:b3:c0:df:9c:0e:79:24:2e:
                    2b:01:dc:32:ba:c8:b7:52:e1:be:79:25:87:97:8b:
                    e1:07:24:54:a9:95:70:92:d3:d8:c4:b2:ba:39:3f:
                    23:a4:89:84:62:b6:44:d6:aa:63:1f:95:01:e3:35:
                    75:45:0d:8b:20:94:77:4b:74:f5:48:5d:10:5f:fe:
                    fb:7a:81:40:a0:1e:41:fd:ad:7b:58:e8:0b:8b:e7:
                    9e:10:fd:e6:b5:22:d0:1a:f3:b5:a0:58:61:e7:0c:
                    b0:17:07:5d:e4:81:d3:53:5f:71:94:cb:d0:64:07:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:93:14:C7:67:9D:35:7E:6C:18:BB:47:70:0D:78:1F:9B:FD:0A
            X509v3 Authority Key Identifier:
                keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:46:b2:dc:19:22:3d:ec:48:b8:e1:18:a8:7c:b8:c4:83:
         48:1f:98:77:0b:6b:38:2c:e4:08:8b:b6:d4:29:00:81:fc:01:
         83:da:34:d6:37:df:f5:4c:97:e5:16:f1:84:b7:c4:b9:78:2f:
         11:f1:f8:b5:2f:bc:53:f5:06:5d:56:2e:b9:84:ef:ad:7f:77:
         a8:aa:35:0d:95:1a:2f:8d:06:5e:05:93:87:76:38:6b:f3:ac:
         49:c9:99:bf:f6:16:25:c4:eb:3a:af:82:ec:a5:45:5f:e9:a9:
         ea:de:0b:d6:a5:6c:a9:13:7c:a8:e3:1a:c4:64:38:69:bc:a2:
         08:75:04:7d:35:9c:bf:8a:75:a7:dd:9d:c6:51:8b:99:ce:b2:
         72:22:ec:7e:cf:98:19:50:e6:72:93:d4:e7:4a:c5:a1:f7:02:
         f8:0f:4e:d6:bc:3b:11:18:66:ff:7e:41:5e:d9:38:bd:4e:02:
         49:a4:de:60:2b:ec:25:00:30:0c:cc:6e:cc:37:28:f8:0c:30:
         00:40:10:cf:53:2b:d4:6d:f0:81:a7:47:64:73:7a:69:f8:dc:
         4e:6e:e5:fe:c1:51:5f:00:8f:67:ac:0c:4e:f4:2c:9d:29:d5:
         33:ce:d4:8a:2a:47:dd:b1:0c:ca:45:ed:35:81:fa:cf:2f:cf:
         69:9d:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:07:12 2025 by rpki-client