This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File:                     g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier:          SDGPsH855XA3vpVdGUvasDYrgqDU4txszMOROfSiH+c=
Subject key identifier:   C1:56:93:A7:4B:E2:96:91:72:E0:42:5C:E8:20:F3:A0:0A:F4:C2:24
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer:       /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial:       019AF277076D65B3C23E0238A036D166CD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 07:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:18 +0000
Files and hashes:         1: FiNVX28gYght-QYZJvZkKvA8mpg.roa (hash: OWl23RYTlTMxZtrywernX3ASfukLtRAzCghbHPY5Zmc=)
                          2: az8f5PX7dUfhI93pu-mhMPohiUw.roa (hash: PF7qRr/GcrYr8KFAg2buvtd67qe7aScIHbVhVBnD8/M=)
                          3: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: Z139OYsq9Or0FJaiXiq0msavXppwFWJeWwvfofA7Scg=)
                          4: pnar3nU7lsWpYfObm0kbhWvk0to.roa (hash: YBfwP3uxI+fMAH4sE5yvO7xnTJh4Fd6ScTYz4RruI/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:07:6d:65:b3:c2:3e:02:38:a0:36:d1:66:cd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
        Validity
            Not Before: Dec  6 07:01:18 2025 GMT
            Not After : Dec  7 07:01:18 2025 GMT
        Subject: CN=c15693a74be2969172e0425ce820f3a00af4c224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:c2:c4:67:ca:67:f7:19:c3:40:e2:63:ea:
                    43:cc:af:1f:53:43:8e:a5:76:9f:e3:bf:d6:c7:08:
                    c6:0e:e6:35:5d:48:98:39:59:d1:61:c1:f5:6d:66:
                    75:0c:c3:32:83:73:67:72:d5:d1:47:dd:ca:53:a9:
                    ad:6b:93:c2:c4:6b:33:03:84:11:bf:49:94:97:ed:
                    f3:d7:8e:10:1a:2d:b9:91:1b:bf:d5:a7:19:4a:d4:
                    cb:4e:39:cc:5c:3e:9a:c8:db:bc:17:5a:92:89:e2:
                    34:fb:44:43:03:93:a8:f1:c5:d2:84:b0:8d:90:76:
                    72:a6:a2:63:9a:2c:27:17:d4:6b:9a:0e:d2:ec:ff:
                    3d:33:63:7b:70:82:78:f4:e8:13:a7:b6:5b:ab:5e:
                    fc:5c:55:c4:c6:16:e2:5c:33:33:9b:63:35:86:4c:
                    c4:0c:2c:3e:c2:f4:d3:21:71:f9:51:bd:26:11:0d:
                    d7:d7:77:b7:a9:95:f7:eb:b2:e7:9e:fa:1f:05:b8:
                    db:e4:85:5d:60:27:a7:85:e5:33:b3:41:cd:eb:6f:
                    f0:14:22:f5:7b:5b:20:fa:f5:98:fb:da:38:6e:73:
                    a1:4b:0e:e0:e1:77:d6:7c:6e:bd:26:a6:c5:dc:56:
                    14:c9:d1:cd:b8:88:43:5f:30:31:85:c6:37:fe:e2:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:56:93:A7:4B:E2:96:91:72:E0:42:5C:E8:20:F3:A0:0A:F4:C2:24
            X509v3 Authority Key Identifier:
                keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:49:ab:82:aa:59:c9:dc:21:49:4b:13:4d:a9:25:e9:da:
         f8:54:02:e2:a3:85:d3:b6:20:8a:8e:3f:c3:59:72:77:62:d1:
         3b:44:17:b7:4b:b5:5f:91:85:ff:2a:1c:8f:3f:85:c8:13:e9:
         79:98:bb:a4:e4:96:9b:13:66:a9:c9:9f:44:aa:7d:98:db:c7:
         4a:5c:47:98:5c:63:8a:fd:3a:40:c2:39:49:f5:8a:1a:21:7a:
         bc:5b:ef:10:89:77:3c:79:40:c4:28:c6:d2:98:dd:d4:f1:fe:
         76:62:f1:ca:5d:31:fb:63:de:54:32:f3:8c:6a:40:75:1c:93:
         67:cb:d7:6f:15:93:3b:2b:b2:b3:98:e4:7f:16:68:8a:01:74:
         fd:4e:d5:4b:03:a8:50:67:67:32:62:a7:d5:f4:0d:d5:0e:c8:
         d5:f3:55:ce:16:de:cb:93:9c:b4:0d:28:e9:7b:44:fb:35:96:
         ee:de:45:9e:cf:18:ab:0b:7e:de:3c:31:e9:f6:9d:10:5e:a6:
         e6:19:92:7c:e3:c2:87:49:3b:da:e2:59:e7:ba:d5:b9:fb:b7:
         51:46:a3:51:93:e2:9b:bb:e0:e8:d1:41:ba:ba:3a:32:35:f8:
         f8:8b:51:c4:ea:af:06:b7:31:65:8d:2d:56:24:3c:c0:56:eb:
         24:b5:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:00:34 2025 by rpki-client