This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          57BtsPDu/nKsWuKsaYBSndoHALpFyLKZnSTx37sEFb4=
Subject key identifier:   35:DA:BB:07:28:4D:DE:53:DF:97:65:C2:E0:E7:C9:CF:E3:98:17:AE
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       019AF31B66F6CC281A7461E78E523CB7C281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:50 +0000
Files and hashes:         1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
                          2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
                          3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
                          4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: VfsBFW3SvTSuDgUbUaV5o1L12zlkvvtnmr/MbWL4G8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:66:f6:cc:28:1a:74:61:e7:8e:52:3c:b7:c2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Dec  6 10:00:50 2025 GMT
            Not After : Dec  7 10:00:50 2025 GMT
        Subject: CN=35dabb07284dde53df9765c2e0e7c9cfe39817ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:28:9b:00:da:fc:71:da:3a:ae:04:72:79:
                    0a:d9:13:4b:3d:59:51:38:2e:b2:36:98:58:ce:f2:
                    5d:48:bf:68:e1:f9:62:e0:7e:43:06:23:58:81:f3:
                    30:97:f5:52:9c:d5:24:54:48:f2:9f:54:39:44:e4:
                    c5:63:13:90:6d:56:74:59:40:8c:ea:0e:d4:b1:a1:
                    15:f7:ce:45:87:43:2b:49:9c:91:61:56:d6:c1:67:
                    54:b9:87:40:da:07:0b:96:71:62:35:0f:b0:79:94:
                    e3:bf:7c:d1:b6:89:08:03:d0:4f:73:4b:52:6a:f1:
                    84:7c:14:91:66:d4:78:0a:9a:9a:f2:97:f0:a8:21:
                    b3:60:6b:c0:06:17:07:69:5b:4a:57:05:c1:0a:00:
                    ba:08:41:a1:d9:92:6f:00:61:2c:2d:11:20:81:19:
                    7a:4f:6b:67:3a:70:2d:51:f7:03:c6:f9:3f:86:58:
                    47:c3:40:5c:90:ea:42:90:67:ae:db:d0:f0:2f:96:
                    71:0c:ab:97:b7:c1:ed:74:99:9d:ec:2d:5c:3e:c6:
                    47:ae:43:11:79:41:e8:5f:ec:f1:bf:c9:8f:18:8a:
                    fc:9d:14:ca:33:00:cc:9e:3f:ed:4c:07:fe:a0:df:
                    0a:50:33:40:7e:7b:0a:90:d5:be:b3:f9:64:d5:7d:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DA:BB:07:28:4D:DE:53:DF:97:65:C2:E0:E7:C9:CF:E3:98:17:AE
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:90:5d:4e:97:e0:41:00:9a:f3:09:58:54:8e:6a:e0:1c:7c:
         0c:12:75:2e:ba:29:b5:88:6d:de:89:cc:76:db:98:ac:bc:b7:
         d4:c2:0f:99:f8:e9:25:f5:18:54:4d:19:4e:f7:32:51:8d:80:
         22:3f:58:e4:77:79:23:b8:80:f4:1e:1a:8e:9b:d5:f7:5a:95:
         1f:7e:8d:79:bb:8e:65:34:7e:33:c3:77:3d:51:fe:7f:cb:4b:
         57:e2:0c:7a:f9:28:16:e3:35:fa:00:69:cc:4b:1a:ee:1c:83:
         51:e9:57:59:00:3b:f7:24:ff:af:22:ae:80:1e:a1:cc:67:05:
         98:fd:ee:3d:9a:5b:1f:2a:d6:dd:2c:a0:74:4d:3f:ce:aa:6c:
         bd:31:a9:6b:ff:e7:9f:82:63:b5:f4:33:03:3c:13:6b:c6:cc:
         a0:64:63:06:1f:d5:57:98:c9:43:44:0a:2a:bf:36:ad:14:af:
         b7:ec:42:b8:9f:55:91:a6:76:6c:45:2f:93:c9:69:d8:5d:68:
         fd:45:4c:1e:79:a7:cb:b3:44:7a:1a:c6:55:cd:1e:1e:d1:6e:
         ae:88:4a:fe:51:e4:f3:bf:36:8e:bd:da:5d:2f:93:1f:62:f4:
         84:4a:50:4e:b8:0f:62:be:94:af:e4:8d:7f:bd:91:d9:d0:19:
         da:33:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:38:42 2025 by rpki-client