This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          O+0IGsbkIqgBXmn+s+wllLPXMn1MBLYVOMl/UyOlm7g=
Subject key identifier:   D3:85:D3:71:AF:2B:65:93:59:C9:BE:21:AD:E6:AC:7E:FA:60:E2:8A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       019AF0880D66FA3FAC728A2D0AA7A76F96AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          1479
Signing time:             Fri 05 Dec 2025 22:00:39 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:39 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:39 +0000
Files and hashes:         1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: PMh0AglP8ra6skGnEqBok4M3KMoel3MWlQNhy45fqmA=)
                          3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:0d:66:fa:3f:ac:72:8a:2d:0a:a7:a7:6f:96:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: Dec  5 22:00:39 2025 GMT
            Not After : Dec  6 22:00:39 2025 GMT
        Subject: CN=d385d371af2b659359c9be21ade6ac7efa60e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:22:ed:7b:dc:61:96:22:7c:10:52:17:e2:
                    c2:fe:99:4c:37:08:8d:16:42:93:c0:90:56:1f:dc:
                    11:45:74:b1:c0:02:5d:0c:a4:58:83:cd:98:ab:00:
                    06:9b:53:24:de:c3:e4:35:9e:5d:37:be:ba:22:a4:
                    1c:b0:f2:53:4b:e7:01:a9:5f:96:18:78:fa:0b:f1:
                    f7:13:f7:c4:8c:ac:ac:3f:a9:b0:07:a1:ba:8c:75:
                    2d:97:96:b2:a5:6c:31:65:73:7b:6e:1e:8c:ce:74:
                    67:db:34:98:cb:e7:a3:1e:80:51:36:2f:7d:a9:59:
                    53:d0:e2:6a:a5:32:62:08:bf:d9:a4:db:ba:a5:bf:
                    24:ca:59:2d:0b:2f:e4:6b:5b:16:4d:81:00:1d:8f:
                    4d:2a:63:c1:d6:88:b8:3f:9f:12:dd:a5:4e:38:23:
                    68:21:28:ee:39:27:8a:8e:dd:c1:c3:95:10:22:f1:
                    6e:49:c9:e3:81:5f:7b:71:c3:4c:67:49:7b:fa:fa:
                    b7:55:da:be:36:00:2f:4f:ae:01:37:3e:22:11:b4:
                    2b:75:f0:1c:fa:9d:55:f9:06:3a:94:9b:b9:16:5a:
                    d2:1f:b3:b2:3f:f7:ea:4b:77:c8:11:65:d0:ca:19:
                    34:0e:48:0c:af:33:89:c1:a9:e9:58:b4:e6:98:55:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:D3:71:AF:2B:65:93:59:C9:BE:21:AD:E6:AC:7E:FA:60:E2:8A
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:02:27:ea:2d:38:f3:18:3b:3f:ae:d0:20:d8:f7:39:a6:
         cd:2f:c7:d2:95:65:f8:ff:89:9c:1e:d6:07:45:3f:8a:0e:24:
         35:51:c4:16:d6:52:73:01:e8:44:47:b0:18:32:97:01:89:88:
         71:0a:eb:6f:e7:6d:ff:e1:94:b9:ec:26:bc:45:7e:be:aa:0f:
         32:af:87:7b:3e:f6:66:3d:0a:ac:3f:8e:a5:e4:e1:a2:d5:a9:
         f0:b8:1b:23:ce:de:2b:93:a3:b8:9d:2c:40:43:5b:c6:c3:0e:
         4c:8b:cb:6a:4f:40:48:f2:af:eb:ca:37:7f:2e:d5:2c:25:e1:
         59:d1:67:dc:b6:81:df:03:24:25:87:98:2d:c6:18:d8:10:d6:
         2a:70:da:2e:1c:e3:3e:7c:1d:94:ce:fa:ce:9f:67:01:fb:28:
         12:95:07:74:fc:47:0a:dd:85:8a:20:e7:0e:69:ad:66:08:9d:
         28:95:c2:b0:6f:9e:dd:ef:69:b2:91:ef:22:ea:92:84:b4:d8:
         b9:b1:e2:a8:e5:4c:48:ad:1f:5a:be:92:75:46:c7:f7:dd:4f:
         0e:bc:d6:74:44:00:56:6e:2e:0a:75:1f:e4:54:5d:e9:1f:70:
         a4:0e:78:f2:88:a1:ec:4e:a0:f2:bc:63:9c:00:6d:22:e2:64:
         68:4e:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:07 2025 by rpki-client