This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File:                     1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier:          bNIjAueNB3ENHS4daB4aS4+of4Wj09NYo7MnrnmL/Yo=
Subject key identifier:   26:6F:26:DD:43:4B:B7:21:D4:31:C2:01:A3:F9:C6:D0:59:10:52:E3
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer:       /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial:       019AF31BB7C071C597388306C88D46831DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number:          0504
Signing time:             Sat 06 Dec 2025 10:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:11 +0000
Files and hashes:         1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: 9IZtLKkUb9gQ2ABzpuvE3jms5T1/vkGcfpAL7nL/sIo=)
                          2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
                          3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
                          4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
                          5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:b7:c0:71:c5:97:38:83:06:c8:8d:46:83:1d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
        Validity
            Not Before: Dec  6 10:01:11 2025 GMT
            Not After : Dec  7 10:01:11 2025 GMT
        Subject: CN=266f26dd434bb721d431c201a3f9c6d0591052e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:79:3c:23:24:11:44:67:43:dd:c8:c1:81:88:
                    82:9e:36:dd:16:f3:99:4f:46:b6:71:25:8b:37:58:
                    17:68:67:ff:69:79:70:01:0d:c5:2f:a4:31:e6:7a:
                    0e:aa:0c:e1:b2:61:26:3a:3c:ca:59:72:52:b7:41:
                    a6:f2:be:54:af:26:f9:57:39:28:60:44:68:d1:94:
                    1d:68:8f:de:d8:b4:b7:06:49:d6:90:70:d2:69:0e:
                    37:71:3c:08:0a:63:41:34:1a:74:4a:9f:65:fe:d1:
                    d8:61:89:c4:08:27:db:c7:ad:ba:23:26:0d:4f:87:
                    fd:35:60:67:c6:4c:f9:05:1c:05:09:2a:48:01:c7:
                    de:db:10:92:b8:6f:0c:e9:45:57:02:bd:02:ad:e3:
                    34:ee:3a:55:01:82:e9:0c:93:a1:d5:d5:2b:c5:d3:
                    33:6e:dc:d0:59:75:0a:e6:06:5d:32:e9:79:84:61:
                    9b:6b:b3:10:76:33:03:d7:9b:61:ed:6e:30:b5:4e:
                    18:95:79:0a:9d:20:fa:a3:08:29:be:96:64:7f:d4:
                    d3:21:51:4e:1d:5e:bf:b6:42:30:90:5d:7c:97:5a:
                    e0:7c:93:18:c6:3e:01:c4:e0:dc:e3:d1:27:0c:c4:
                    4f:24:70:c7:7f:60:f4:b5:6e:7e:f8:87:90:9d:17:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6F:26:DD:43:4B:B7:21:D4:31:C2:01:A3:F9:C6:D0:59:10:52:E3
            X509v3 Authority Key Identifier:
                keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:73:73:89:db:70:d9:81:4d:4a:34:f8:c2:6e:df:57:ac:5b:
         f8:11:b3:27:bf:91:14:8e:d2:9c:7e:ac:3b:3a:8d:70:7f:ff:
         f0:d9:03:6e:d8:54:29:6c:3e:28:4d:27:38:91:a6:a6:8e:5e:
         7b:14:5b:55:ff:30:3f:9c:49:14:ae:3e:d0:ae:9f:be:01:12:
         a3:a0:f2:1d:86:84:a6:bf:5b:b6:a3:33:df:da:75:3a:ed:19:
         d8:8a:e0:7d:3a:aa:18:e3:c3:54:3d:0b:44:83:7f:6f:22:99:
         22:43:a7:61:a2:0b:49:ca:83:f0:8c:f9:50:bc:94:ef:03:4d:
         bf:7e:f4:71:26:5f:ff:6b:c7:0c:8e:ed:da:b0:a6:f0:4b:d5:
         03:79:42:08:ab:ad:12:d3:55:af:67:8d:21:a2:ef:fa:20:5d:
         4b:a8:b0:9d:2d:6c:0c:d7:d8:0b:c7:de:57:52:3c:5c:4d:4b:
         a4:ca:16:8f:8e:84:59:a3:c3:cc:36:f0:ec:d9:1e:40:73:db:
         f4:7d:03:51:bd:d0:0a:b5:3f:6f:8e:6e:52:02:e9:7b:81:03:
         c6:c4:42:fa:3c:dc:2d:53:d2:8f:73:35:2e:e8:98:22:55:2f:
         9e:43:98:ed:dc:2c:dd:eb:6b:a0:bb:82:0e:76:52:d0:c6:eb:
         af:39:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:32 2025 by rpki-client