This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          yOnia8cdHGTBAyzxKPvnn22JskohizRPVFyAhBujZPg=
Subject key identifier:   B8:68:2B:59:FD:5C:2A:00:3F:8E:8B:DD:17:FB:05:37:95:91:F1:58
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019AF1D1E76F8FA7E2725836D581F3010BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 04:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:56 +0000
Files and hashes:         1: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (hash: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=)
                          2: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (hash: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=)
                          3: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: sUpqZTr0v5Di0uhieSVZ8WXjZAFLHQObWSQxI4cjkPU=)
                          4: a4P5Nmq1ldQpFUTXqCcYVJT2FBw.roa (hash: uK/XWq2f7Vj84yIu4J13Mqd4rpKs4ZvyhbUMCrHpfh4=)
                          5: pximGQHr39SJNlSVeBxiF1qsg24.roa (hash: /gURbuP1U7iyGPQ+gJZ+djR795j5GOwMQH7yvPma3Sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e7:6f:8f:a7:e2:72:58:36:d5:81:f3:01:0b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Dec  6 04:00:56 2025 GMT
            Not After : Dec  7 04:00:56 2025 GMT
        Subject: CN=b8682b59fd5c2a003f8e8bdd17fb05379591f158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:7a:6f:72:f0:79:b7:2b:50:12:39:90:94:
                    13:58:95:2f:fe:06:09:be:c8:20:5f:49:2a:c8:97:
                    1b:23:b7:5c:ec:a3:da:43:69:14:65:af:21:f8:70:
                    ea:95:c0:27:ee:e4:f7:53:e4:a2:f6:ff:62:e4:7a:
                    1c:f8:37:e1:d1:89:c0:85:e2:95:06:60:4a:06:00:
                    41:e9:dd:98:67:82:1b:4f:a0:c0:e6:b3:bd:50:c0:
                    69:b0:43:22:3a:5e:f5:1e:cd:b6:bf:fe:02:26:9f:
                    36:7d:e7:e6:b1:81:fb:a2:0f:dc:47:c3:72:7f:ef:
                    87:02:68:70:78:75:74:90:3b:ea:6c:1f:a4:d5:6e:
                    54:b3:ba:cc:98:5a:b9:df:e8:6d:7b:98:5b:6c:b2:
                    71:37:93:1a:03:84:98:b8:63:bf:42:17:5e:67:c1:
                    86:44:cc:0c:52:23:0f:13:f4:41:ff:bb:0a:63:9c:
                    d6:d3:52:de:0e:df:c3:1c:46:a2:1f:44:43:bb:59:
                    87:e0:b7:0e:7c:a3:07:12:6d:f2:ec:09:17:b7:d5:
                    09:18:d3:56:16:d2:df:c2:27:34:20:dd:62:7a:d2:
                    08:78:b2:56:5c:5c:cc:7c:4e:00:b0:0b:eb:16:3c:
                    f9:90:2f:79:50:19:c7:a6:47:11:65:ca:89:c6:3d:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:2B:59:FD:5C:2A:00:3F:8E:8B:DD:17:FB:05:37:95:91:F1:58
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:22:ed:32:93:21:f0:ad:12:f5:64:5f:b7:05:de:a8:ef:
         eb:66:fd:7f:0f:49:8c:9b:e1:96:11:03:18:c6:92:50:9f:1c:
         7a:87:3c:06:d6:5f:ec:81:7a:25:70:36:4a:90:a8:fb:cf:1e:
         c9:71:d7:79:31:60:d4:2f:be:71:f3:b1:32:bc:e0:84:32:7d:
         78:1c:8e:43:0c:44:76:87:92:cd:d5:c8:cf:fd:de:17:5c:b8:
         50:a8:20:bb:1f:10:ca:48:0e:e3:a8:be:90:c3:15:ad:3b:d6:
         16:2d:99:60:5f:37:22:4e:f1:fc:41:5c:36:43:fc:a5:9b:84:
         5a:a2:ad:59:d2:8a:5e:05:73:78:87:09:50:34:c2:09:48:9d:
         98:e6:90:6d:8f:34:d8:41:9c:ce:88:49:67:1e:b6:4c:bf:a2:
         45:92:a2:2c:41:5a:27:fb:4b:30:ad:18:85:0b:d5:1d:81:00:
         0d:e7:c2:d1:30:08:15:89:62:f3:e9:96:cb:81:e3:86:1e:35:
         43:20:79:76:aa:31:45:6f:9d:3f:7e:9e:9d:2b:e3:70:b8:e9:
         b5:ea:f0:b9:fe:0a:6e:ca:35:03:d3:f2:d4:b9:52:72:87:89:
         b4:6a:ba:c6:be:24:ed:ce:1d:f9:8c:96:1b:67:ed:ef:ce:57:
         a8:f5:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:04 2025 by rpki-client