This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File:                     76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier:          VQbtXPDWVE1Pj4JxqHuldRwn4ZQ/krHt7lDuq8P5T2o=
Subject key identifier:   6B:47:16:38:68:3A:53:EF:49:6F:14:49:B4:28:4C:EB:7A:CB:1A:5D
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer:       /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial:       019AF2764C4DE273E0615B432E8A7C5B5AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number:          0198
Signing time:             Sat 06 Dec 2025 07:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:30 +0000
Files and hashes:         1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: DI2ZLsVcA+7xBnxf4abJY951+nVTuism+MH0UBDuIJI=)
                          2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=)
                          3: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=)
                          4: ZwlhiYyWQkRGz3NJHJFyM_Rg7Cg.roa (hash: 5by/fhrdm7/3f06Vze3ay8vgCnkJXF3Gh0BeggMxG98=)
                          5: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=)
                          6: gR_nj3KnhXU_3ijLA5gL5yTqRVo.roa (hash: yYO83gea+RX6tvgJTdvweHxx3nR1Y0pwKFCRPMjHc2I=)
                          7: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
                          8: lnWvinUWS5GJDEzSwSpnFLjN5SY.roa (hash: jtKCkOjWf0Ny2MITAbfrrO67TWiVMtXecagrH1sOE/U=)
                          9: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (hash: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:4c:4d:e2:73:e0:61:5b:43:2e:8a:7c:5b:5a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
        Validity
            Not Before: Dec  6 07:00:30 2025 GMT
            Not After : Dec  7 07:00:30 2025 GMT
        Subject: CN=6b471638683a53ef496f1449b4284ceb7acb1a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:c4:9c:15:55:c4:cb:e3:ec:99:37:58:b6:
                    3e:e7:cc:3e:08:ea:6f:44:52:74:06:3a:76:26:ed:
                    e0:ec:fe:35:f1:08:63:1c:d9:0c:b8:76:27:c3:c1:
                    22:f7:dc:09:59:18:97:69:de:1b:7a:04:56:61:18:
                    f3:44:95:fc:73:57:12:e3:41:65:fe:78:23:f1:ac:
                    1a:e1:ba:3f:06:b7:d0:db:85:2e:53:af:81:b0:e4:
                    72:3f:be:f1:1b:39:16:fd:f0:63:1d:e4:30:51:89:
                    6b:a6:de:db:1c:2f:79:ec:e4:01:5f:fc:c3:4e:43:
                    a5:ab:d1:02:2a:c1:dd:c2:04:c4:79:95:5d:aa:f3:
                    90:c1:9a:e2:fe:c9:3b:02:59:14:ff:ae:1e:9b:40:
                    9c:a1:d7:62:e7:7d:ea:80:6b:45:24:9e:1d:85:6d:
                    43:f3:cd:5d:19:ed:f1:a7:93:90:a1:a8:32:9b:89:
                    a4:6c:fd:0e:e9:ed:98:b2:82:45:fa:7f:57:c6:a2:
                    ec:06:33:2d:ab:c2:7c:33:0e:eb:de:52:3d:87:12:
                    d6:f3:a9:f6:81:10:e0:46:be:75:5e:7a:aa:d0:2f:
                    7c:70:c2:3e:f4:58:d8:46:cd:b2:7e:4c:01:b6:19:
                    c7:0a:85:37:8c:2b:34:ca:2c:8e:40:38:f9:95:d0:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:16:38:68:3A:53:EF:49:6F:14:49:B4:28:4C:EB:7A:CB:1A:5D
            X509v3 Authority Key Identifier:
                keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e0:6a:e4:e4:bf:e8:c9:37:d5:a2:fb:6f:c0:be:a3:fc:f8:
         22:57:66:1c:11:ba:36:1c:90:34:da:20:0a:93:b8:58:b7:91:
         55:4e:38:d7:e4:b1:8e:b2:ec:46:bf:ba:9b:47:c4:56:6a:e9:
         e6:82:72:54:87:86:ab:49:bd:5a:fe:3b:ce:a5:78:4c:7c:bf:
         90:90:42:aa:23:1e:48:7d:51:ad:c7:fb:2e:ae:00:29:b4:fd:
         33:f6:3e:2f:fd:eb:23:5a:bb:4e:6f:e9:ab:61:da:22:88:a2:
         16:bd:bb:c8:77:93:2d:b8:ef:2e:42:84:91:9d:65:4a:76:15:
         0e:d8:48:7d:6e:9f:f8:bc:84:f4:18:f5:88:52:d1:b0:3c:82:
         c1:e2:4d:9b:7f:bd:43:76:0c:d3:f0:cd:d9:06:de:53:db:2f:
         43:dc:fe:8e:1d:1b:4f:46:19:e8:30:35:c9:14:fb:56:e5:f3:
         83:7a:bb:88:59:41:5f:69:ea:46:fd:85:b5:a8:15:96:f5:5f:
         f4:aa:b3:71:2b:83:8b:e8:e3:69:f1:ef:83:97:39:34:17:85:
         96:67:46:bc:9c:d2:0f:b5:6d:e9:6a:f6:11:98:1c:72:75:1d:
         02:17:2c:68:cc:90:ed:ff:ae:8b:f5:a1:61:a8:16:5c:a4:16:
         4d:89:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:06 2025 by rpki-client