This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File:                     are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier:          evAOOLFh1VAOrrSG1AEbqodCB0WM4o4R9ViB2zqoUIQ=
Subject key identifier:   F6:DD:11:79:27:F1:B0:C3:F9:FD:6B:9A:F3:2B:45:9F:AE:19:B9:F9
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer:       /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial:       019AF2770E79FFF76FF8A87A11100C9AD78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 07:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:19 +0000
Files and hashes:         1: 452BEA0tdKMisIOX3pR09wCEwvw.roa (hash: tqsO8JO/R7NIbaOuNFXRS4CxGBuBkZtyreJ5el3Hruo=)
                          2: P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa (hash: SUeXUBRK111gneMQBTIiq0/M2TNceWYd9pFG3OARHRg=)
                          3: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: nIUI21P+MPSvge96C/teMwIyanINsYAI499fp778ylg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:0e:79:ff:f7:6f:f8:a8:7a:11:10:0c:9a:d7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
        Validity
            Not Before: Dec  6 07:01:19 2025 GMT
            Not After : Dec  7 07:01:19 2025 GMT
        Subject: CN=f6dd117927f1b0c3f9fd6b9af32b459fae19b9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:8d:3b:42:22:bd:06:aa:97:9d:83:da:79:
                    e7:c3:0f:2c:dc:5e:71:13:4e:bc:80:b7:f1:01:b7:
                    8c:e3:49:47:18:86:9d:49:2a:9b:74:e0:86:99:f9:
                    6c:8f:36:ab:fc:f5:cc:fd:93:53:c9:67:8c:2c:1f:
                    f1:e8:a2:67:ca:da:d4:45:f1:a7:32:07:f8:2d:21:
                    49:78:30:b5:06:b6:eb:0f:a5:e8:dc:24:d6:a4:f0:
                    ab:e5:88:e8:8a:75:b7:ad:40:99:0b:7c:9a:1b:f7:
                    92:5b:83:56:f7:19:b4:58:8b:24:d7:88:0a:c7:2e:
                    9d:06:d2:62:64:50:4d:d5:ff:83:b0:23:31:2e:4d:
                    63:be:e9:37:d8:d7:c7:88:e8:e3:84:9b:d7:ec:0d:
                    5e:24:a9:41:dd:00:eb:97:d4:e7:0b:ac:f9:07:4e:
                    bd:79:b8:44:f1:fb:c0:ff:22:10:bb:aa:fe:96:66:
                    be:c8:2d:35:4e:79:c4:6f:0b:fe:fb:29:03:7b:6b:
                    ea:fa:17:66:8b:64:4c:cc:7f:fa:02:62:74:63:72:
                    69:b3:95:1b:7c:6c:88:c4:53:b5:57:70:b7:91:4c:
                    5e:23:1b:fe:6d:42:7b:61:24:0f:4a:ac:2f:dd:20:
                    9c:bc:9b:cb:64:b5:c5:80:cb:da:d6:26:60:28:a4:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:11:79:27:F1:B0:C3:F9:FD:6B:9A:F3:2B:45:9F:AE:19:B9:F9
            X509v3 Authority Key Identifier:
                keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:a3:0e:6e:2e:bd:20:ce:75:26:59:fa:35:30:56:0d:b5:
         a3:6d:ed:e4:61:4c:fd:8c:37:de:a1:d7:c4:fe:b5:62:53:7f:
         a8:fb:85:82:07:db:97:02:e5:a2:00:79:fe:8c:32:49:b2:95:
         84:a2:d2:19:61:61:7f:3d:4d:be:29:bd:fd:35:d9:d1:81:2c:
         5a:1a:91:1c:e7:49:ef:a4:e4:41:35:37:c0:16:a4:68:ac:e1:
         f1:67:e4:8a:bf:70:ed:89:e3:63:f4:69:f0:76:26:51:7d:94:
         82:16:60:69:f9:7c:0e:b0:52:42:0d:a0:05:bf:4e:fb:03:3f:
         37:39:d3:7d:2c:73:59:33:ae:e5:56:34:57:e9:21:9c:7d:55:
         fb:f4:c4:d4:71:8f:31:86:16:67:82:51:0e:c7:fd:c0:f2:ba:
         14:96:49:0f:49:3f:79:90:28:ee:94:97:57:01:58:99:ef:bf:
         34:98:d1:53:6d:13:bc:e0:42:fb:ac:f3:2b:62:4d:58:e8:f6:
         99:38:92:2a:95:19:6a:50:0d:89:03:da:3a:8a:4a:8a:bc:0d:
         df:92:36:86:f8:44:0f:10:7a:67:89:8c:f3:7a:83:83:80:87:
         19:b8:0a:21:03:04:13:bf:d5:df:30:06:d0:52:5b:b9:70:d3:
         72:0e:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:06:06 2025 by rpki-client