This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File:                     Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier:          ZyX8j+EdzprnS4oOwYhvcTIL136djuglFR6snRDsZ3Q=
Subject key identifier:   3D:92:3B:94:E3:49:F6:A6:68:83:ED:A2:F6:C3:23:66:87:90:43:0C
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       019AF389294429E227F9DC60AEC9B21262C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 12:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:43 +0000
Files and hashes:         1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: K9cqQ+AdilpB8d6FJchN63Qy1djB7HRSYRmXJmppkKE=)
                          2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
                          3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:29:44:29:e2:27:f9:dc:60:ae:c9:b2:12:62:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Dec  6 12:00:43 2025 GMT
            Not After : Dec  7 12:00:43 2025 GMT
        Subject: CN=3d923b94e349f6a66883eda2f6c323668790430c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:e5:24:90:92:df:4c:a7:46:f6:da:ad:ff:
                    bd:b4:6a:9c:5d:59:67:2e:51:60:71:da:3a:b1:3d:
                    f7:94:7a:35:51:89:bd:8c:3a:80:51:44:79:ed:e2:
                    3c:11:3c:9e:05:4f:2c:af:45:bc:2e:53:23:6c:ee:
                    4d:60:72:61:d3:51:25:36:87:d0:f9:4e:3d:5b:bf:
                    77:f7:96:07:b6:84:56:25:8a:6b:31:88:9e:cf:e0:
                    b2:e2:6f:fa:8e:f8:12:c8:15:86:9d:06:3d:a4:ec:
                    57:89:9b:31:69:90:2f:be:4e:e0:13:85:42:45:c6:
                    db:72:4d:09:45:01:98:c6:cf:94:e6:47:ee:a3:91:
                    94:25:c7:54:01:4a:8a:3d:ce:16:de:d8:26:e8:2d:
                    a2:28:dc:32:ae:6a:e9:38:d8:7b:40:2e:19:b0:b9:
                    69:1c:b2:26:2a:4b:2a:16:f4:43:42:75:a1:92:1b:
                    43:1c:ab:4c:1c:0f:47:0e:3a:5b:39:8c:3b:0e:f8:
                    f5:bc:56:7e:48:59:f5:0d:1b:e6:c8:64:7a:3c:40:
                    fd:63:aa:90:05:e2:5d:84:da:66:14:58:72:2c:c5:
                    46:24:9e:63:9b:a0:fd:ab:04:01:bc:e7:67:11:29:
                    e8:3f:17:f3:32:d1:66:c9:ef:32:69:b0:d7:d3:c8:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:3B:94:E3:49:F6:A6:68:83:ED:A2:F6:C3:23:66:87:90:43:0C
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:f8:a0:32:1c:93:56:86:c5:bb:3c:64:79:bd:04:33:bc:
         db:e9:8c:b0:fe:5a:cd:8a:46:11:79:50:85:e0:e3:15:45:96:
         21:31:ac:7e:72:34:fc:81:84:26:f0:e3:ea:d5:7f:7b:e7:ed:
         9f:9e:80:25:64:94:46:8c:36:1f:00:ae:1d:d2:41:39:ea:67:
         0e:ba:2a:f2:3d:1c:79:c1:30:85:49:71:ea:00:98:23:f0:87:
         a2:3c:0e:02:80:53:cc:a4:86:96:d7:71:0c:d2:50:2b:12:61:
         6c:95:d8:6a:e3:8b:9e:27:a0:d5:f3:36:b6:a4:4d:a1:db:07:
         b1:10:06:90:b4:a5:19:e3:9c:6a:f4:37:b3:9e:b6:b4:e3:12:
         bc:98:f7:14:3c:43:1e:f5:36:4b:3c:a9:dc:73:bf:17:4e:32:
         0d:8c:9a:9b:69:36:aa:96:08:7a:f3:1c:3d:ae:84:91:80:22:
         86:3c:71:ad:2f:e2:00:cc:2c:83:54:41:7f:72:f4:df:83:b6:
         81:78:73:8c:4e:0c:2c:10:ee:aa:7f:0c:f4:49:4d:0d:db:2e:
         d7:1b:03:a0:68:14:7a:e0:f8:70:a7:13:63:d5:be:ec:63:58:
         05:22:1c:f5:a6:ee:ac:43:7f:3b:14:9e:18:d8:6b:2b:a6:69:
         f8:a3:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:41:23 2025 by rpki-client