This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File:                     cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier:          QjdJXP2d50i/00V3fP8LQH+RZd1yKNeRBaDXxVRT0c4=
Subject key identifier:   53:53:8C:E9:75:76:0E:66:BE:EB:67:3F:B2:08:18:DD:49:91:F7:40
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer:       /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial:       019AF1648C267CEE46824DA95AD3B0EAAD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 02:01:29 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:29 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:29 +0000
Files and hashes:         1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
                          2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: b8m4gQvlooJCaRPVnyw3VgZabJBRUd/dEE0wN2niEOU=)
                          3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:8c:26:7c:ee:46:82:4d:a9:5a:d3:b0:ea:ad:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
        Validity
            Not Before: Dec  6 02:01:29 2025 GMT
            Not After : Dec  7 02:01:29 2025 GMT
        Subject: CN=53538ce975760e66beeb673fb20818dd4991f740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:c0:9e:fd:77:ce:12:c1:f6:8a:1a:42:20:
                    a1:b1:84:f7:2f:f8:2f:62:eb:63:02:fa:da:90:05:
                    46:1e:f7:2b:b8:cc:69:e7:d7:1f:2b:4b:ec:e2:47:
                    b7:3f:98:13:c7:d5:33:b2:1d:1a:10:1f:93:fa:86:
                    03:e0:60:c0:0a:3c:21:06:08:3a:9f:85:fa:7b:39:
                    51:80:bc:7d:d0:6d:cf:28:93:4b:48:bf:c8:2e:85:
                    c3:e6:e4:96:14:7e:76:5d:b3:7b:aa:02:d1:80:79:
                    90:5e:03:8d:60:32:6f:51:07:91:82:4e:a1:d1:9c:
                    04:92:ff:e5:6e:fd:99:ea:e0:17:a8:08:9a:e1:97:
                    cf:5b:25:96:5a:d0:f0:03:7d:45:e4:4b:d0:cc:53:
                    26:19:1a:0e:a0:d3:2c:f7:13:5b:c6:79:2f:68:70:
                    c1:4c:63:32:b9:e0:33:0a:bf:87:c3:32:7c:16:ce:
                    f9:50:d3:c1:eb:37:55:30:4a:d2:6c:4e:5f:1f:4a:
                    7c:3c:fe:ee:2d:16:2b:f8:b7:2e:2c:ac:e2:52:02:
                    59:4b:fc:8a:0b:b0:53:80:c7:c9:92:93:f5:a7:99:
                    a3:03:09:ea:e1:99:4d:b5:14:54:a0:cd:91:9e:b9:
                    63:ec:2e:3a:93:38:44:68:69:2e:cc:43:36:7a:9c:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:8C:E9:75:76:0E:66:BE:EB:67:3F:B2:08:18:DD:49:91:F7:40
            X509v3 Authority Key Identifier:
                keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:64:dd:81:07:77:dd:80:ee:13:d1:4b:64:d9:72:d9:e6:
         b8:28:f0:45:d3:e6:a6:ed:96:32:11:8f:22:4e:6b:39:d3:b4:
         58:67:47:a7:b1:d4:11:21:40:8d:13:27:a0:23:23:6a:81:50:
         9d:35:c6:b3:da:06:90:d1:bc:99:05:0d:7c:bf:c2:8f:5f:e1:
         3b:b8:e5:5f:73:52:4b:30:0f:63:15:76:ac:17:23:db:e7:5e:
         ef:2a:a0:b1:46:4a:43:e9:c8:a4:4f:a2:d4:d4:80:b3:02:a0:
         61:62:3f:f7:9b:1f:fd:fa:b7:c4:85:7e:3d:ef:b1:11:17:dc:
         6f:44:aa:d4:8c:29:84:6a:04:4a:90:7e:06:99:4a:d5:9d:9e:
         aa:bb:a3:a7:a1:77:34:39:a5:84:9a:98:59:11:d1:78:f3:43:
         4d:43:9a:8b:5d:63:28:3b:9d:b0:31:59:75:16:00:cb:6f:83:
         3e:5b:7a:97:02:54:49:54:eb:2f:57:6e:d1:0e:96:f9:e3:c4:
         d4:7e:bc:e0:06:da:0b:de:3b:5e:5c:9d:93:68:b7:6f:5b:3f:
         c5:46:97:de:c5:ec:53:8f:27:51:ae:45:9a:34:66:e3:eb:c7:
         1f:03:7b:dc:bc:d4:bc:da:b5:45:f5:df:5f:df:bd:85:ce:69:
         9c:59:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:55 2025 by rpki-client