This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          Q10jHJMrqekOyiGwGuCdbshCUvPdeXSWcpeITWY1tUs=
Subject key identifier:   10:32:DF:7C:98:3A:4B:75:FA:AB:42:A2:69:F6:EA:7C:61:52:9C:30
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       019AF31B2DAB8E92CA128CB2136FC85208F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:35 +0000
Files and hashes:         1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
                          2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
                          3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: jYRrc4bQ0jM3xQunDW0GVBuLu9ztJB1mGlL42ulu/kw=)
                          4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
                          5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:2d:ab:8e:92:ca:12:8c:b2:13:6f:c8:52:08:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Dec  6 10:00:35 2025 GMT
            Not After : Dec  7 10:00:35 2025 GMT
        Subject: CN=1032df7c983a4b75faab42a269f6ea7c61529c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:77:e6:13:5a:de:dc:1b:f3:d0:59:fd:bd:
                    ab:4c:bd:e2:34:97:7f:2c:d4:06:8f:fa:41:f1:25:
                    e2:8b:b7:57:49:6a:f3:0e:3e:a0:d2:d1:6e:3e:19:
                    48:3f:e1:30:d5:fb:b5:09:3b:a2:c4:33:a1:77:75:
                    8b:61:67:4b:07:29:54:17:61:9f:65:d6:c2:be:23:
                    23:4e:24:45:a9:be:79:47:ef:64:2f:ca:6a:c1:b2:
                    c7:64:5a:15:ed:1c:4b:40:e8:c4:13:18:8b:72:ca:
                    05:f3:2e:c0:55:68:7a:1f:fa:47:af:c3:1d:d8:d0:
                    6a:51:94:1b:4c:dc:65:05:55:99:0c:11:5f:7d:b5:
                    92:65:b6:e6:bd:8a:75:d3:6f:4c:82:09:33:9c:0e:
                    fc:ae:8d:a7:3d:41:f4:02:c5:33:18:5d:65:05:21:
                    f5:58:ed:29:4c:af:3f:3f:8a:4f:50:38:93:d5:8b:
                    50:52:54:58:92:cf:ac:06:e0:29:a5:e2:1b:54:7e:
                    0d:64:c2:78:36:4f:40:b5:03:17:5c:2f:f1:d6:82:
                    1b:6c:40:c8:77:d6:ae:9e:9f:16:c7:e7:06:75:5b:
                    e7:42:9b:b3:6b:d7:f5:0e:ce:8c:d2:12:c6:69:5a:
                    61:10:5a:58:28:13:7e:e8:1c:36:ea:25:af:f0:48:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:DF:7C:98:3A:4B:75:FA:AB:42:A2:69:F6:EA:7C:61:52:9C:30
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:17:57:4d:53:02:14:26:8c:18:3b:8b:9c:59:f2:2c:57:11:
         6f:cd:d9:a7:37:44:4d:34:ef:f1:0f:48:7e:51:f4:1a:eb:f4:
         ed:cd:15:09:2d:0c:98:02:91:1c:7e:a9:f7:e7:46:4d:f7:51:
         f4:d1:3a:a4:7b:a0:f6:b6:28:a8:37:7d:92:ee:69:89:2e:e7:
         c3:ef:2d:a1:f2:ed:91:09:f9:47:4d:70:5f:48:d8:96:59:85:
         b6:cc:95:36:da:81:79:a5:15:e9:90:03:47:c2:cf:d1:af:41:
         57:c3:b9:54:09:56:bf:34:97:bf:9a:7e:b6:34:26:56:c3:09:
         a4:4e:af:67:d1:3e:b9:9b:91:03:77:41:f2:e5:cd:e2:f4:7b:
         5b:10:b2:9f:22:c3:95:8c:6b:f3:ab:55:9f:92:de:c6:f1:ad:
         8a:f1:ca:e2:b9:78:68:62:ae:23:96:0d:d1:f6:2a:91:83:54:
         84:ea:42:1c:79:79:3c:70:65:33:b6:35:85:a4:12:a7:4f:db:
         b0:33:0a:62:dd:c5:1a:b9:f7:7a:aa:a8:07:8a:dc:16:12:4c:
         ca:1a:f3:fa:af:5c:bd:ec:14:2e:6e:8c:55:e9:d4:c0:5b:8a:
         c6:9c:31:8b:b8:26:79:4c:6b:0f:e6:b2:e8:15:d7:45:ab:ce:
         34:ca:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:53 2025 by rpki-client