This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          YRf89MxoXoZWJWg94w87iL6zhYbAOjUm/nLo4r9f2zE=
Subject key identifier:   91:92:16:72:FE:37:39:4D:DC:EB:C1:9A:72:A9:E4:B6:19:2A:4D:A2
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019AF3F78159E3E3106B83C45915B30A984B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 14:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:15 +0000
Files and hashes:         1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
                          2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: 0DknEUvTC5EAwN2ZhwqaywhUP0vrvozjgI+HFqfsyqM=)
                          4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:81:59:e3:e3:10:6b:83:c4:59:15:b3:0a:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Dec  6 14:01:15 2025 GMT
            Not After : Dec  7 14:01:15 2025 GMT
        Subject: CN=91921672fe37394ddcebc19a72a9e4b6192a4da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:13:72:26:df:78:2e:2f:9e:13:84:52:6c:
                    e1:d4:45:6c:04:ca:2b:fa:19:1f:f1:64:ec:1d:73:
                    45:2f:00:c5:9f:2f:40:11:d0:7b:ca:bd:31:bb:eb:
                    34:49:d0:38:53:87:fb:ef:59:fc:7e:9b:33:4d:d8:
                    2e:81:e2:0c:fd:bc:0a:a0:5a:d9:6a:87:b8:40:7f:
                    10:15:a0:45:8a:71:c5:d5:bf:55:68:8f:2f:64:83:
                    7b:55:f5:ae:7c:16:36:08:9e:2b:03:eb:39:79:06:
                    fc:49:80:c0:9c:13:4c:26:09:96:59:f8:67:29:ee:
                    47:d3:6c:0b:bf:3a:f7:0f:29:91:25:06:a5:63:3a:
                    65:59:5d:c7:5b:cb:b8:0f:c0:f5:15:db:c6:70:67:
                    b5:9b:44:78:80:5d:a4:5e:f0:f0:1a:03:c6:17:e5:
                    06:70:54:f9:17:85:4c:d1:93:89:08:55:32:fa:dd:
                    b8:ef:db:25:b9:57:c7:73:65:ff:3b:d5:8a:02:0a:
                    b2:17:19:07:43:99:42:ed:3c:49:b3:06:05:3d:7a:
                    ce:cb:bf:c5:42:e1:f5:cd:3f:56:33:eb:02:dd:0b:
                    9c:e2:69:e8:87:71:8b:ef:ff:0f:fd:9b:ad:46:01:
                    9f:75:02:06:0a:ea:f7:da:08:81:15:25:4b:81:b6:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:16:72:FE:37:39:4D:DC:EB:C1:9A:72:A9:E4:B6:19:2A:4D:A2
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:6f:fe:fb:6d:e1:ec:4a:bd:84:c4:99:b7:fd:1f:f5:9e:
         7e:7c:51:42:14:70:c2:ae:15:1c:0f:cf:20:a7:15:8d:63:82:
         68:08:99:a7:b3:c2:96:11:86:94:9b:66:6f:98:00:06:70:de:
         ad:ce:51:9a:d2:5d:b0:62:1b:64:19:86:03:ab:bf:d2:a4:4f:
         4a:da:86:da:fc:9c:61:2c:c5:90:98:63:24:01:4d:e7:57:2e:
         0c:9a:3e:15:05:0c:cb:8b:a5:8b:6d:7f:67:f9:0f:ab:6a:83:
         cb:86:ee:6b:94:56:3a:d4:12:d1:6d:02:0b:27:d0:59:8f:32:
         a9:fa:5b:f1:2e:59:c8:58:ae:8f:ed:02:b1:b3:2d:fd:2d:af:
         54:6e:a5:1a:6b:35:3d:c0:c5:c0:fd:4c:7b:42:b8:4a:7e:cf:
         c8:f8:cb:d1:0b:66:90:ac:02:45:33:87:59:9e:c1:77:66:08:
         ed:13:0c:93:2c:cc:aa:b3:8b:42:1d:1e:50:eb:3e:22:e6:f4:
         b3:9d:73:1c:3d:db:15:2f:91:d3:95:0a:29:4b:9a:d7:a8:b6:
         60:b3:b5:85:ef:3e:64:d2:9f:4d:21:04:e3:f3:c0:1c:77:cf:
         45:ee:68:90:36:77:ef:14:f8:83:2e:27:36:c9:ad:1e:06:e2:
         50:ed:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:43 2025 by rpki-client