This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          E+kdee97prxhlJPaaRcugFS1mQCMvlEJ/FbkzF7yt20=
Subject key identifier:   83:02:7D:6B:70:7A:06:F9:30:F7:8B:A7:8A:CF:0B:8D:54:EF:88:40
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       019AF389A358D3371A566010355ED12DD81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 12:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:14 +0000
Files and hashes:         1: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: mNHPizdSwyqMQKvxWWU3byYem76DQlypfQJXMCTGShs=)
                          2: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
                          3: eG_gGxLivr2ewefCZXKvl9LEIQ4.roa (hash: 4AFKJ4zK1Zt8UICDrX7yj7rG6ous3rW3n9Muuzhoyfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:a3:58:d3:37:1a:56:60:10:35:5e:d1:2d:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Dec  6 12:01:14 2025 GMT
            Not After : Dec  7 12:01:14 2025 GMT
        Subject: CN=83027d6b707a06f930f78ba78acf0b8d54ef8840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:42:84:7d:64:6b:11:ea:3c:e8:74:53:fd:
                    08:11:0d:57:5c:b2:66:7a:49:c0:f6:19:9d:ce:f4:
                    2e:cf:60:da:76:fb:f1:a7:b5:27:75:7e:ee:8c:aa:
                    b7:81:35:2e:a2:56:1c:bf:04:e8:ba:b3:69:e5:16:
                    a2:5b:65:cc:24:4a:df:a6:5d:12:09:a3:e7:86:f2:
                    28:ff:d9:f4:4d:e9:f2:70:29:90:4e:32:e6:53:65:
                    48:f2:41:09:33:8b:ba:45:ee:93:b8:4c:da:3d:de:
                    62:15:dc:84:29:e5:be:08:0f:2e:0c:c7:86:bf:8f:
                    ac:f9:56:20:3b:a8:da:37:51:81:70:2c:70:44:b6:
                    23:e9:87:b8:0a:f4:2d:e3:52:0a:ec:64:39:5d:44:
                    9f:37:ed:85:12:bc:88:d6:f5:9a:31:de:78:32:6f:
                    ee:74:f2:6b:71:ab:d7:a1:4f:98:92:51:22:f7:3e:
                    9c:7b:72:52:58:27:2f:06:70:d3:b5:0b:14:8e:4f:
                    4b:37:66:9e:a7:27:d5:df:1b:db:2c:ca:bd:e3:8e:
                    c8:f2:8c:cf:90:85:bd:b8:c1:c2:00:ed:c1:11:01:
                    7f:d5:1f:86:a1:ef:dc:2b:31:a2:74:55:51:c8:88:
                    8f:58:8a:14:30:4a:4d:c4:84:68:18:e1:e6:42:ee:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:7D:6B:70:7A:06:F9:30:F7:8B:A7:8A:CF:0B:8D:54:EF:88:40
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:d1:a0:ef:6f:9e:65:2e:f7:f3:16:6c:dc:41:9b:ed:04:
         9f:d9:06:75:5a:65:c1:3b:d5:ef:a6:13:59:e9:8b:b5:48:e9:
         8a:a7:44:ff:38:ae:cd:78:e5:64:d8:b6:fe:01:72:b6:20:3c:
         2f:6f:9d:84:c1:80:dd:f6:63:6f:1e:cf:96:51:6d:97:75:4a:
         2b:78:51:17:67:e5:94:13:aa:f7:f5:94:ee:da:07:d9:40:99:
         8a:a8:de:5d:f7:a5:98:e9:06:26:0c:31:c9:59:7f:91:dc:dd:
         0b:2a:ef:6f:17:7b:8d:22:c5:ab:58:5a:c9:47:d9:88:44:94:
         91:1f:2f:56:9f:8a:fd:f7:04:54:98:31:ba:45:cd:22:1b:8f:
         28:3e:3d:db:f2:9b:48:4e:f9:50:5c:27:d9:7a:59:34:bb:47:
         ff:da:5b:d7:91:8d:cf:57:01:e5:6a:95:e0:2c:31:04:f4:3c:
         0e:79:8a:88:f6:f6:56:79:f4:3d:4b:f5:5d:ef:83:97:2b:25:
         5b:de:a5:da:c9:98:d7:09:e7:f5:9c:4b:c2:ba:1e:ae:ef:1d:
         06:f3:6a:7d:fc:1c:6f:ba:d1:c4:4c:53:35:ea:95:65:dd:f0:
         1d:ce:b3:65:6f:16:16:7d:25:b0:2c:6a:3d:04:f7:e6:35:8a:
         56:eb:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:28 2025 by rpki-client