This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          Xw7CihB2jZxzx7bQseqqLQtht1joiz9OZyEoBmjknns=
Subject key identifier:   66:4E:49:C2:48:45:39:AF:09:18:DE:80:25:D8:AD:F6:9E:5C:61:BB
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       019AF31BFC5B373787D0E21EF13C3AFAA118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 10:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:28 +0000
Files and hashes:         1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
                          2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: aoWEqaOKFxwLiYiiXgZPBYbY1qnjSD10nLSlhK952J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:fc:5b:37:37:87:d0:e2:1e:f1:3c:3a:fa:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Dec  6 10:01:28 2025 GMT
            Not After : Dec  7 10:01:28 2025 GMT
        Subject: CN=664e49c2484539af0918de8025d8adf69e5c61bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:b6:94:01:99:e0:c1:6a:7f:77:4f:d0:c6:
                    1a:04:e2:2e:4c:74:db:22:74:f6:18:8e:4b:ef:fc:
                    a8:c0:1c:95:d8:86:da:8e:a8:20:bc:95:d9:c7:5f:
                    15:3a:28:1d:be:b4:48:94:49:25:47:66:5e:f7:a1:
                    21:d7:70:43:0a:f9:be:ee:9b:27:a2:8a:dc:c7:21:
                    c7:d4:07:b3:57:f5:f0:80:96:ed:0e:0b:c8:ea:f1:
                    3d:6e:ba:df:74:7a:cb:15:4f:0a:6b:cc:a1:43:8b:
                    1c:18:36:7f:dd:1b:39:92:8d:ca:d7:e8:a7:7d:c8:
                    48:88:2d:41:f1:53:c6:a3:53:5b:18:22:66:8d:4b:
                    cc:27:bb:d7:13:e5:e6:9d:19:c5:c2:bb:70:a4:5a:
                    26:b6:ed:b7:6b:6f:b9:37:ee:52:9d:fd:9a:7a:ef:
                    bb:da:71:89:c7:7d:63:5e:6d:d5:c4:15:d3:0f:35:
                    11:26:37:ac:e7:ae:e3:62:0d:33:43:5a:82:68:c4:
                    0c:48:39:72:2b:f8:34:81:17:44:03:e8:a6:1c:e6:
                    a0:4c:d7:a9:14:11:c5:cf:3c:5e:40:71:b6:56:88:
                    38:c4:9d:88:1b:d8:35:94:8a:4e:25:ad:1d:f2:69:
                    2d:6b:2b:0f:8e:9c:ef:23:9e:4a:ee:5c:e4:f2:5d:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:49:C2:48:45:39:AF:09:18:DE:80:25:D8:AD:F6:9E:5C:61:BB
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:61:21:e6:dd:d3:c4:0b:24:06:82:67:55:eb:ae:b1:6d:a1:
         69:87:17:0d:4a:3c:89:a1:ad:e1:b7:0a:a1:c0:1e:d2:aa:87:
         6f:e7:3b:e2:5f:a9:96:1d:68:72:c3:9d:74:6c:48:50:55:4e:
         e9:49:cb:5a:a5:e4:ff:e0:ca:c8:b3:4e:88:2c:a3:8c:2b:69:
         b8:7c:81:85:94:e9:57:08:cf:8b:87:52:be:11:92:af:76:d2:
         c7:c0:37:3a:a1:08:0d:dc:2c:55:05:63:1e:fc:a3:db:e9:e9:
         ed:88:e9:57:56:57:6b:23:e0:f6:43:d0:e6:3c:2f:27:6a:43:
         cf:29:e8:ff:7d:2c:69:6c:ff:d8:48:c9:1c:53:04:3e:01:81:
         52:6e:76:98:b3:43:75:8e:a7:80:b0:88:93:5e:59:78:32:38:
         27:ea:a3:6f:3e:3a:14:da:5e:91:be:c5:f7:6e:48:8e:43:92:
         97:47:3a:2c:d8:e7:6f:63:0c:99:ea:f8:35:b9:d0:49:e7:59:
         d0:17:08:1d:80:8f:ed:ac:ef:cb:56:3b:dd:2b:1a:9c:83:a8:
         d5:1c:97:3c:b2:a0:9d:85:63:6b:62:ef:79:6c:0f:31:9a:70:
         d2:b4:db:72:2d:7a:97:f4:fe:89:33:fe:25:0a:d5:14:65:aa:
         58:01:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:03 2025 by rpki-client