This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File:                     ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier:          z9Ola86Ej+ghN99CKYBFQrE/1nVLq0V0HRGfwUikmqM=
Subject key identifier:   DE:B0:E3:5D:79:63:29:05:AB:F7:5B:F1:5C:FB:57:22:C0:2C:CE:28
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       019AF3893CBEDA779535AA660460AEFC58DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number:          1053
Signing time:             Sat 06 Dec 2025 12:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:48 +0000
Files and hashes:         1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: 8mjOwRo4sNJwFeKxds28ylSwj191ll0IaBsqb8s2jMg=)
                          2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
                          3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:3c:be:da:77:95:35:aa:66:04:60:ae:fc:58:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Dec  6 12:00:48 2025 GMT
            Not After : Dec  7 12:00:48 2025 GMT
        Subject: CN=deb0e35d79632905abf75bf15cfb5722c02cce28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:24:1f:ff:88:74:be:f9:c6:dd:fd:61:19:
                    51:bc:ee:18:b6:e4:6f:3b:00:58:08:05:b8:86:70:
                    1a:a4:16:fc:67:89:74:56:a2:f5:54:8c:2b:e1:66:
                    5e:e5:f7:9b:4e:86:a7:ba:a0:34:70:2b:5b:cd:ac:
                    77:a8:65:02:7d:19:b4:f8:37:b4:41:7f:6b:06:28:
                    93:05:4c:bb:4d:af:81:02:bc:4a:19:1c:33:84:d1:
                    86:0f:0d:78:2a:df:23:44:91:97:01:13:8c:1c:d6:
                    51:a7:6a:0f:b4:e2:cf:06:6c:99:d5:03:c4:9d:e1:
                    0a:d3:f2:4d:70:40:5a:6c:18:7a:6f:9c:dc:35:83:
                    81:f4:c8:59:85:a0:a1:54:ac:2a:03:7b:8b:a0:fa:
                    0a:6b:9e:d9:d7:87:eb:25:a6:24:65:70:bc:aa:fb:
                    66:e5:7d:80:ce:2e:8a:4e:ce:e2:38:b4:3b:8d:17:
                    31:10:de:55:f2:6c:43:5a:1e:e2:3e:bf:a4:b4:e3:
                    a9:e9:91:39:7d:5e:92:ff:74:a7:b4:26:3f:8b:2c:
                    d1:6a:1a:d7:93:a8:6d:03:8b:3c:85:28:22:d1:c0:
                    70:fe:32:f5:30:f8:d9:f7:40:91:42:a1:dc:c5:ab:
                    88:7c:0f:c3:75:80:a9:54:ed:c0:89:c1:33:ac:14:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:E3:5D:79:63:29:05:AB:F7:5B:F1:5C:FB:57:22:C0:2C:CE:28
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:cb:5c:6c:ac:fc:27:62:54:8f:1e:3b:01:c5:d3:4c:0d:
         aa:35:c2:b0:14:a0:b0:45:fc:47:7b:3b:cc:b2:b1:a9:b7:d0:
         5f:0c:3c:a1:cb:7b:2b:06:b7:35:82:4e:7b:8c:6a:77:db:db:
         8b:a8:0c:27:35:7d:54:76:9b:02:aa:02:64:12:1b:63:49:64:
         6c:39:12:f4:28:c3:37:eb:e7:6f:9c:23:e9:70:6f:5b:eb:94:
         68:e0:6b:e9:f8:e6:33:d5:1b:e6:73:f0:5c:34:cd:12:5c:e6:
         a7:66:d3:f4:b4:1f:8e:86:69:b0:17:8c:7b:41:61:70:0a:9a:
         39:bb:04:b1:77:a4:05:3f:84:f2:0a:74:c2:79:00:0d:1d:6f:
         97:97:d1:d8:9b:b1:dd:53:99:3e:e3:cb:03:80:cc:d3:c2:d4:
         e5:77:89:94:e3:66:90:4d:ff:a8:d7:33:00:70:04:6e:45:19:
         89:e8:6d:40:21:af:2c:a1:74:24:d0:e9:40:36:25:f7:8a:2d:
         3a:2b:b6:cb:de:ad:e1:f6:da:53:0e:b0:52:51:b1:54:20:4a:
         f6:58:6a:bd:92:ad:bd:77:5f:a1:60:f0:6e:3a:a0:a9:6f:c8:
         f1:8a:58:82:cc:b9:14:af:3c:c8:8b:15:61:61:56:5c:24:e8:
         e8:06:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:06:16 2025 by rpki-client