This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File:                     R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier:          h2xw/dn1Ca3Ah6mD38qh8ARaFGT4wyaFRtwWR7j4THY=
Subject key identifier:   E6:C3:F4:A8:7D:5C:8D:0E:E4:5B:9C:B8:54:EE:E9:03:F9:5E:F0:45
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer:       /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial:       019AF5E65500CAF47773CEE67F7EFB4E42D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 23:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:44 +0000
Files and hashes:         1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
                          2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: F7CKxk793kE2nmuZ59aELx3X0iZrSGtRMdoobedYsSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:55:00:ca:f4:77:73:ce:e6:7f:7e:fb:4e:42:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
        Validity
            Not Before: Dec  6 23:01:44 2025 GMT
            Not After : Dec  7 23:01:44 2025 GMT
        Subject: CN=e6c3f4a87d5c8d0ee45b9cb854eee903f95ef045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:b7:17:12:fb:e3:7a:ca:a9:aa:2b:6b:3f:
                    31:b7:97:1c:48:75:aa:98:29:bc:eb:62:5c:49:88:
                    95:d6:44:14:68:a6:fa:1b:86:e5:05:d3:7d:c2:e2:
                    4b:18:22:ad:69:6b:22:48:88:0d:51:c4:5d:26:44:
                    99:4f:01:e4:58:72:73:f0:62:ac:e4:d0:60:d3:ac:
                    4a:ee:ab:d9:49:eb:85:38:2b:99:be:bc:02:7d:c3:
                    10:89:a6:95:8b:6a:48:36:06:ee:d8:bf:e3:94:9b:
                    72:19:ab:c1:c5:17:b9:b5:de:d6:e4:9c:9a:eb:ee:
                    da:c0:e0:7d:d3:1d:ba:6a:8d:57:e5:c7:c5:9f:bd:
                    f7:85:c0:23:2b:bd:49:96:8f:82:42:d4:36:fe:8d:
                    b4:e8:46:e2:8b:c0:06:1b:b7:ae:7e:e3:bb:c2:6d:
                    62:59:89:11:92:70:93:95:42:bb:05:05:a4:5c:50:
                    1e:d2:cb:9d:16:8d:97:ce:33:e0:ae:8e:5d:89:11:
                    47:a0:2e:6a:c4:cf:43:87:43:a2:4b:3d:cd:fe:78:
                    c9:b3:08:f2:4a:5b:89:fe:c2:0d:1b:08:a3:38:02:
                    52:cb:a3:16:df:67:9b:b7:c6:72:62:96:e0:8c:b9:
                    b5:df:06:00:1e:a6:0d:ff:9a:3c:e2:a8:65:d9:be:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:F4:A8:7D:5C:8D:0E:E4:5B:9C:B8:54:EE:E9:03:F9:5E:F0:45
            X509v3 Authority Key Identifier:
                keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:91:49:76:5b:bb:4a:4b:38:14:10:93:17:b4:c7:15:37:
         28:67:9f:44:23:2f:a7:77:08:95:0e:ca:0d:d0:e6:f2:63:88:
         c9:e6:a8:c8:8b:dc:07:61:79:28:a9:00:0f:62:fc:15:54:28:
         a6:57:d9:0d:0a:6b:eb:86:2b:d0:28:0f:62:26:54:13:a1:60:
         33:7d:23:b2:5d:4d:40:a5:14:c1:3a:d1:c4:91:a1:fd:82:59:
         0f:ac:be:29:c7:92:5d:53:34:8c:f3:8f:0d:98:12:a6:51:41:
         ba:1f:e6:a3:51:7d:3f:38:93:3e:8e:b2:3b:e0:d3:b8:a7:28:
         0c:c9:0b:b0:51:7d:9c:d9:dc:c4:c2:8e:b5:b7:9f:21:c2:d8:
         91:ce:dc:93:46:c4:aa:ec:8a:76:3f:5c:47:95:3c:61:07:2c:
         27:b0:9b:3a:97:01:cd:c1:6b:3f:65:01:9e:ea:fe:37:0a:f2:
         2b:dd:0f:0d:48:f5:80:3c:d0:0d:5b:06:79:5d:9a:5f:07:43:
         3e:ee:87:05:ba:a4:39:cf:0b:9d:eb:60:18:63:4a:85:24:ec:
         6c:2e:6f:d7:2b:57:c2:c2:9e:f4:92:52:d6:ec:60:5c:4b:85:
         54:33:b0:bf:c2:84:f8:ad:39:38:5f:e9:50:c1:9f:52:a7:3d:
         6b:8a:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:42:10 2025 by rpki-client