This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File:                     RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier:          BjEocG/5CsWsA4BwwcUf3ceQVIymKyC5M0Ya1KPq+Ec=
Subject key identifier:   7B:3B:5D:38:13:04:7E:31:DC:14:92:FE:CF:1C:61:05:47:CB:56:7C
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer:       /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial:       019AF0BF277802D69A54FD1F89C55A26473D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number:          0E56
Signing time:             Fri 05 Dec 2025 23:00:50 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:50 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:50 +0000
Files and hashes:         1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: Mqa1JedvsBlns9/TleaRu8LVeDccNSuX4Y7X3ndGUBs=)
                          2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
                          3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:27:78:02:d6:9a:54:fd:1f:89:c5:5a:26:47:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
        Validity
            Not Before: Dec  5 23:00:50 2025 GMT
            Not After : Dec  6 23:00:50 2025 GMT
        Subject: CN=7b3b5d3813047e31dc1492fecf1c610547cb567c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:f6:f4:6c:d8:a2:54:ca:02:3c:48:36:49:
                    ef:f0:1a:3c:a5:9c:1a:2e:29:ef:bb:a1:e1:46:73:
                    28:db:ab:22:c4:5b:1c:0c:b1:d9:27:6e:a6:3c:a1:
                    7b:20:eb:6b:85:ba:bd:3f:b7:cf:4b:75:f3:47:9b:
                    5b:82:f3:6a:85:3f:c4:27:3d:8c:0d:bf:37:41:e0:
                    fe:8a:3d:fa:5d:cb:a7:fd:e0:82:0b:6c:cb:96:e1:
                    b3:71:31:cb:89:fa:46:17:14:61:81:e9:6d:58:cd:
                    ba:7b:33:c5:98:7c:ad:df:23:d3:f4:77:0f:a7:4b:
                    ce:06:d4:0c:11:9f:58:2a:eb:20:d4:9e:a2:cb:89:
                    01:25:8f:a2:a9:ed:ac:10:5e:41:d8:3d:81:24:81:
                    32:f2:37:4e:61:4f:c5:1c:99:87:3f:26:62:3c:49:
                    c7:d4:4e:64:3f:bc:2c:fe:7a:86:e6:a1:db:40:81:
                    7d:de:04:cb:48:23:bb:12:00:6f:b2:fd:f7:ba:aa:
                    22:48:27:01:cf:86:7c:25:b2:fd:ba:8f:da:e1:c0:
                    65:ee:7b:f9:a9:1a:69:46:76:98:f2:0c:9f:90:a3:
                    d0:72:07:ec:a5:13:53:20:1f:5e:37:f2:d2:2d:65:
                    0b:b1:b7:0d:5a:86:ae:1d:e2:52:1b:eb:cc:88:62:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3B:5D:38:13:04:7E:31:DC:14:92:FE:CF:1C:61:05:47:CB:56:7C
            X509v3 Authority Key Identifier:
                keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:49:d2:c8:c2:f3:9a:e4:87:01:21:01:dd:93:20:b8:fd:
         d6:07:15:77:4c:d1:44:6b:5f:d8:75:ea:2e:a3:6b:1a:cd:82:
         f4:b7:d2:aa:d5:4e:ec:8e:df:a5:34:1c:e1:8c:70:85:e0:cd:
         64:a1:54:03:6f:c7:c5:0a:c0:fb:ac:95:34:56:e3:ee:bf:a7:
         c8:cc:5b:8e:43:bc:ce:f6:bc:f6:1d:fc:75:11:39:30:7f:35:
         3a:6a:ec:b6:2b:3e:96:51:ba:5e:dd:67:80:85:8d:74:3d:94:
         13:ca:56:2a:57:c3:1b:e4:b3:d1:46:64:61:05:6b:b7:71:78:
         4f:f1:84:54:c2:76:4e:4f:4f:c0:8c:9c:42:fc:07:3a:a0:c8:
         93:3c:0b:13:20:aa:0f:c2:7e:7f:b4:83:36:e7:26:35:c0:16:
         f8:0b:e5:8e:05:fe:e0:0e:08:ed:a8:62:de:dc:8e:93:9c:23:
         9f:21:05:15:e1:8c:50:9f:e0:8e:e5:e1:57:15:31:ec:4a:79:
         a4:52:c6:0b:bc:56:ce:f5:c6:51:78:b3:31:af:ac:0a:dc:8c:
         c5:f5:5a:9e:84:96:f2:1a:41:91:92:6d:06:53:8e:23:fa:c5:
         5f:8a:72:0f:1c:45:d7:10:19:f0:2b:fc:df:93:16:2e:59:84:
         91:a9:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:53 2025 by rpki-client