This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File:                     RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier:          lXTMTwZQM/fyONC1Fo/XbOjXjtooghLOEDCv5fakKuA=
Subject key identifier:   7B:9B:46:51:F7:0C:A8:81:8F:2C:1C:6F:E7:4B:AF:EF:56:E0:5B:24
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer:       /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial:       019AF2765BA348D0543C742EDBA64782F83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number:          1770
Signing time:             Sat 06 Dec 2025 07:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:34 +0000
Files and hashes:         1: La2OHk40xT9jVzdbL8VM1zaNhwM.roa (hash: L4NT7hhkbemzTZ1h36oxCLeAgJ9PnHHf7M9ufVdCkYE=)
                          2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: k/cjGFz2CTQt9RJ5OWqx4uf26L36To0Ld9tM/S3MTgU=)
                          3: oqbSDVyffYW6POB_Swdu2RDuL0U.roa (hash: sIzz4Hddo5JRH5QoMZorIpCfLRHXcarNIkRS1cu9s/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:5b:a3:48:d0:54:3c:74:2e:db:a6:47:82:f8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
        Validity
            Not Before: Dec  6 07:00:34 2025 GMT
            Not After : Dec  7 07:00:34 2025 GMT
        Subject: CN=7b9b4651f70ca8818f2c1c6fe74bafef56e05b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:63:64:ce:c2:d4:87:31:ce:e1:c0:89:b4:
                    c9:7d:61:1d:8c:98:57:b3:b6:17:64:25:41:a3:ab:
                    e2:f0:9a:17:ff:bd:ca:60:da:ad:f6:c0:53:2b:92:
                    fa:fb:e2:f4:f2:00:e0:40:4f:fe:ec:03:ed:fe:b2:
                    a8:26:05:e6:e5:20:88:41:1b:dc:e9:bf:ac:86:7c:
                    c7:41:31:84:38:75:0c:30:da:28:74:45:de:a1:2f:
                    e4:64:f8:9d:2a:68:15:b2:96:af:6f:49:56:f8:e8:
                    83:8a:cf:3a:89:e3:71:b0:c2:9c:86:e9:d7:74:20:
                    cb:44:db:7f:2a:d5:07:5c:8f:71:ba:91:59:6e:80:
                    72:8b:ec:ab:f3:e2:d1:5c:18:04:e0:3b:3f:3e:3b:
                    b9:44:a7:db:95:0f:13:f7:39:e7:90:1d:0d:ef:27:
                    5d:e6:24:53:52:d7:be:08:c1:8c:b3:8e:24:8f:46:
                    d8:8d:40:82:a7:d9:80:5e:fd:4c:50:a8:66:fe:8a:
                    b1:7c:18:92:50:5e:31:e8:d5:19:25:7e:1b:e6:7e:
                    a4:68:22:a4:c8:eb:2d:34:3b:84:d1:76:ca:b0:2b:
                    42:4c:40:b9:62:4b:d3:3d:3b:2b:3c:cd:32:72:39:
                    28:4b:f9:69:6a:f3:97:0d:a7:81:38:43:6a:c5:b7:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9B:46:51:F7:0C:A8:81:8F:2C:1C:6F:E7:4B:AF:EF:56:E0:5B:24
            X509v3 Authority Key Identifier:
                keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:06:df:b7:e0:78:62:89:a1:ed:71:35:19:b3:5d:c3:b4:f7:
         92:f5:6a:55:e7:99:17:28:7d:84:52:7f:b1:21:06:6f:d4:64:
         a8:7c:32:45:99:9a:b5:f7:64:81:cf:e4:2a:29:32:b9:29:5f:
         41:c9:77:fb:b4:5d:4d:59:1b:5c:10:a6:bf:59:44:dd:42:ae:
         04:f5:3e:d6:d7:99:9b:d1:f5:36:70:4d:b8:90:06:b1:b3:58:
         dd:09:e5:9b:e3:16:85:b4:54:2a:ea:fd:d3:1a:5a:01:46:77:
         23:02:f9:41:d7:42:1f:42:3d:c5:76:61:2b:e9:a8:0c:de:9f:
         e5:62:2b:e0:7f:9a:c6:8b:96:91:d8:7d:7f:be:e5:01:fb:9a:
         aa:49:9e:ce:fe:e1:ce:3a:26:c4:b5:22:76:f1:fa:6b:85:cd:
         62:ff:59:5e:9f:c9:d9:e4:93:4c:04:7d:c7:62:88:0b:dc:9e:
         f4:e0:e3:4a:a4:1e:27:8d:2a:fc:20:11:43:8f:10:21:17:b7:
         e8:b8:1a:e1:7c:eb:60:91:3a:54:4d:bd:ba:5f:58:c7:d4:eb:
         90:0c:f6:8f:62:b9:ae:d4:16:9f:ea:aa:89:07:54:8e:16:c2:
         7b:ef:b0:83:54:da:77:7e:4c:6c:15:5e:0c:05:0c:b9:02:0c:
         c1:a3:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:05:49 2025 by rpki-client