This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File:                     X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier:          d71UBzYaxUQCjmsdm4osUR6XhdGFJT8c3OJGZACz6Ac=
Subject key identifier:   AF:72:A1:30:37:5C:DE:5C:EC:F6:9F:AA:88:CD:EA:ED:A2:2A:34:49
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer:       /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial:       019AF389E10576BEABE634A19B0A921C3D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 12:01:30 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:30 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:30 +0000
Files and hashes:         1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
                          2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
                          3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: 00HuZhX+TRhhSCSWugGTY//aW9EZ0S8ffgdDi1Tkj+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:e1:05:76:be:ab:e6:34:a1:9b:0a:92:1c:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
        Validity
            Not Before: Dec  6 12:01:30 2025 GMT
            Not After : Dec  7 12:01:30 2025 GMT
        Subject: CN=af72a130375cde5cecf69faa88cdeaeda22a3449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:67:7e:da:69:d0:bf:78:26:72:b7:f6:ec:
                    55:53:fb:87:35:ce:be:b4:fa:8f:b5:ba:92:ae:8a:
                    2f:a8:6c:b9:2d:cd:9b:d7:72:0d:64:7e:42:70:ba:
                    15:48:99:f7:d9:e0:a2:47:cc:69:ca:7c:07:51:1c:
                    85:f3:29:84:d9:f9:8a:6e:7e:39:97:b0:dc:82:e9:
                    36:d8:6d:f8:dd:ea:dc:b4:ab:15:dc:66:b5:ec:8e:
                    82:ed:d7:2e:26:1c:bd:d4:d1:ae:60:4d:af:8d:2d:
                    16:97:5d:7d:ff:9e:68:7b:29:67:90:ac:54:5d:d6:
                    79:ab:c2:3e:4a:12:7d:19:86:f8:45:74:2c:81:11:
                    f4:f9:ef:f8:4b:ce:c0:a8:66:28:18:bf:a4:15:93:
                    c0:8d:dc:10:75:48:d3:c7:5b:d5:85:4f:c5:be:28:
                    37:9e:eb:0e:ad:d3:0e:c6:e3:a4:8d:e6:18:cf:66:
                    af:f9:07:0e:8e:fc:22:8c:2e:ff:9f:06:d2:b0:44:
                    cf:64:a7:81:8a:29:fe:df:7d:05:60:ea:3b:96:e8:
                    b8:5b:b9:29:d7:5e:79:97:b3:2e:d7:2a:b8:44:90:
                    54:69:71:e2:51:0e:99:11:cd:0f:bc:19:7f:a6:53:
                    3f:09:42:ed:06:52:1a:77:41:bf:99:7a:a4:98:1b:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:A1:30:37:5C:DE:5C:EC:F6:9F:AA:88:CD:EA:ED:A2:2A:34:49
            X509v3 Authority Key Identifier:
                keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:0b:59:ac:86:1d:89:50:d1:f8:f0:05:17:00:fc:20:f1:
         c2:76:e7:c5:f8:78:d9:35:af:0a:e2:3f:bc:81:7f:6e:de:c1:
         10:06:05:4a:d6:5b:04:fa:06:e4:97:19:26:e5:8e:65:9f:a2:
         d9:22:ff:ec:46:e4:bc:80:be:56:92:f2:3f:98:04:6c:f9:59:
         3b:65:ff:13:c0:42:62:d9:d5:3f:4a:a4:dc:2a:a3:10:11:2e:
         fc:65:18:a1:d2:7f:10:02:c6:0e:ac:63:a7:ae:2a:dd:7e:14:
         5f:f7:e3:72:d3:08:4e:cc:11:32:29:10:80:bc:75:3a:a0:1b:
         08:ba:71:b8:f6:a0:eb:14:b4:78:51:6b:51:2b:29:56:eb:8e:
         58:e7:10:5a:5b:2d:b6:68:cf:12:3d:35:ef:31:10:f0:1b:4b:
         9d:e9:96:95:c4:55:fb:48:94:7b:53:d3:cc:4c:14:3f:92:9c:
         d3:47:d9:06:14:ea:b5:ef:7d:13:35:96:dc:3e:36:f4:92:56:
         2c:57:e8:d0:93:50:37:c6:6b:e0:e7:cb:3b:5a:f1:17:13:0b:
         5d:b9:a2:2e:6a:4c:6d:d7:d2:d8:3a:36:b6:ef:f3:4c:68:9a:
         f1:d2:b8:d3:8d:11:13:31:41:a3:ee:c9:7e:35:8f:f8:1b:8e:
         2e:51:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:59:25 2025 by rpki-client