This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier:          gLD4OYF1s2esuV0mUZLr2SMpNXJ7GSF6cE+NzzwerOc=
Subject key identifier:   6C:7C:10:E6:55:57:40:A6:EA:01:0B:F3:48:65:B1:2B:FC:39:FF:2D
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       019AF0BF355D95C03BD3D816946D1A7393E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number:          175F
Signing time:             Fri 05 Dec 2025 23:00:54 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:54 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:54 +0000
Files and hashes:         1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: 8IGD74vIp/QxyFTv9eXMAoADyubQw7W2Ubr6IjG+sM0=)
                          2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
                          3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:35:5d:95:c0:3b:d3:d8:16:94:6d:1a:73:93:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Dec  5 23:00:54 2025 GMT
            Not After : Dec  6 23:00:54 2025 GMT
        Subject: CN=6c7c10e6555740a6ea010bf34865b12bfc39ff2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:02:50:9d:16:c4:7e:ed:0c:5a:49:d7:ff:
                    67:78:8d:03:ee:83:42:06:86:8e:be:db:90:a4:be:
                    ba:80:fa:5e:50:ee:d6:17:10:2a:a1:fd:6b:82:8e:
                    37:eb:68:55:1b:cd:7e:0f:37:30:25:5a:03:81:15:
                    d6:f3:ec:61:44:90:8b:f3:62:6d:26:a7:7b:0e:2c:
                    e2:a8:8f:5f:4d:96:35:c6:a9:4b:db:04:71:bd:52:
                    3e:1c:b6:0a:e2:00:5c:1c:95:9d:9c:e8:c1:f2:5f:
                    45:ec:bc:5d:9d:be:48:a8:e5:b0:66:70:8b:63:21:
                    ed:ad:bd:00:f7:70:ae:ff:1e:95:b9:bd:1c:56:c2:
                    79:d7:f3:21:be:b9:95:5f:b0:5a:99:c3:09:22:5e:
                    39:46:bf:b2:ed:61:8d:55:71:68:28:1d:ff:29:4d:
                    72:57:c0:03:22:25:20:3d:df:ad:20:80:23:b0:e6:
                    cd:fe:be:2b:c0:5f:55:98:aa:7d:ce:c8:b7:29:9e:
                    8d:ab:9a:ab:66:3b:67:62:ec:6a:28:94:cc:0a:ef:
                    15:7a:bf:de:af:cb:7a:32:e9:35:6c:8f:4e:10:6f:
                    4b:22:ba:73:57:21:d5:7e:6e:48:1e:a4:d6:b8:c7:
                    ec:0b:69:00:82:3d:0c:bd:d1:c6:4d:d0:54:80:f3:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:10:E6:55:57:40:A6:EA:01:0B:F3:48:65:B1:2B:FC:39:FF:2D
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:03:e7:db:b7:59:50:ba:fd:bd:d0:81:1d:90:dd:33:7f:
         b1:69:8b:1b:63:cb:1e:e3:be:39:8f:b8:df:1d:f0:97:70:36:
         17:e3:0f:3a:f7:2f:6c:34:e3:cb:5c:d4:9e:3f:6e:fa:9c:e7:
         33:5e:3c:cc:88:f2:5b:58:fc:ba:7d:0f:0d:06:a0:7f:85:a4:
         c4:af:c3:c1:21:2a:3b:d2:30:7e:b1:06:da:9c:4e:27:01:89:
         53:9b:9d:95:47:65:c4:a2:00:aa:7e:d1:ee:6c:2c:9b:5c:f7:
         0a:d2:d8:ba:ca:6e:41:b2:0a:08:0f:dc:c4:3d:d1:9e:e7:01:
         64:26:9e:e0:4c:5b:0f:7a:a2:62:71:db:e2:3a:55:86:6b:0d:
         57:d0:52:70:b5:52:42:02:0e:0d:6f:76:29:0e:fd:5a:35:5f:
         d9:c0:e5:9d:d8:e5:eb:a9:2d:9d:6f:b6:0e:51:a1:f7:53:95:
         27:36:89:f9:66:32:82:a8:1b:46:e6:e0:e9:70:10:35:22:9b:
         6c:e0:58:41:75:82:6a:29:95:38:6a:ee:4c:a8:9d:e4:68:5f:
         3f:85:4f:58:7f:a5:82:9e:06:32:72:fa:c7:9d:8a:47:e5:f0:
         34:99:44:6b:39:9d:af:69:7a:f7:e5:4f:92:7c:34:d7:de:1f:
         11:66:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:58 2025 by rpki-client