This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File:                     3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier:          JcGTVMrNT8YaSxSic6RlBgXFQmfZ+b5giH8KFtzMEy4=
Subject key identifier:   0B:57:F1:43:AE:85:DE:9E:5D:CC:60:CA:A7:36:DB:A5:D3:50:DF:8E
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer:       /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial:       019AF3C09795CFC6AE5BC7D0334CEE99B104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 13:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:16 +0000
Files and hashes:         1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 0XOlvdWA1ry0AjXvAOBs/shYlLG+lLFmo5nUlDtuUIc=)
                          2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
                          3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:97:95:cf:c6:ae:5b:c7:d0:33:4c:ee:99:b1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
        Validity
            Not Before: Dec  6 13:01:16 2025 GMT
            Not After : Dec  7 13:01:16 2025 GMT
        Subject: CN=0b57f143ae85de9e5dcc60caa736dba5d350df8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:14:94:96:c4:30:ff:e8:ee:45:7b:3b:e5:
                    33:d3:1b:2a:f1:d3:86:e8:68:20:f0:19:6c:12:47:
                    65:fd:ec:41:70:13:b1:7f:d3:08:76:89:c7:3a:82:
                    8b:82:15:ae:86:5f:cb:a3:df:6e:fe:d3:e3:c8:0b:
                    8b:2e:ff:28:48:d5:2e:f1:21:16:9d:07:a9:d7:b4:
                    21:9e:cf:d6:f5:20:46:e5:e3:b9:dd:ef:ee:61:17:
                    c8:8e:fb:ba:0e:f6:bb:55:81:ec:04:f9:43:a0:66:
                    99:fc:12:73:c2:cc:b6:e4:52:a3:f5:bd:96:c2:48:
                    6b:67:70:f0:15:00:95:e8:7b:a6:b2:4c:f1:8a:20:
                    e5:dd:52:54:e4:19:dc:35:a1:a8:7a:78:df:63:34:
                    db:27:aa:9c:1e:81:93:c8:07:7f:cc:ca:11:5d:c9:
                    2a:9d:60:31:b5:2a:e2:cd:d3:c9:08:bd:c4:fe:6d:
                    37:63:31:38:a9:93:e0:03:30:8d:49:56:5b:15:d3:
                    4b:6f:96:2d:c6:af:6f:af:b1:71:04:af:a1:2f:b1:
                    f4:9d:2b:07:fe:7f:33:23:a0:d5:0f:ad:0a:1d:1d:
                    ab:9a:c2:05:b8:e5:93:9f:9e:e1:ea:60:18:a0:1f:
                    2f:f2:3f:6a:c6:63:38:40:ed:78:1e:23:e5:1f:2d:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:F1:43:AE:85:DE:9E:5D:CC:60:CA:A7:36:DB:A5:D3:50:DF:8E
            X509v3 Authority Key Identifier:
                keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:1b:ef:25:3e:64:16:d1:ed:08:83:07:1c:ab:ff:0c:6c:
         45:85:2d:df:19:cb:a1:ce:98:3d:c4:c0:65:d5:97:a8:34:40:
         a6:67:06:24:05:a8:07:0c:c9:ac:86:45:75:fc:24:a5:ed:32:
         7c:04:10:ba:34:ad:b1:8a:a5:7d:2c:bc:7d:57:42:05:c7:62:
         31:7f:80:0c:5d:80:19:ed:c6:0f:bf:66:ea:ac:8c:7d:a4:79:
         13:9f:ad:03:00:4f:7a:90:a8:74:fd:87:76:20:46:c4:7e:01:
         cc:2d:0e:fd:e0:20:2b:30:95:18:10:1d:16:25:f0:23:c0:00:
         f3:0a:c7:e8:5b:48:4c:18:e7:ff:73:0a:87:60:4a:19:03:e6:
         a8:89:e7:d4:1e:cf:d9:76:65:0c:56:58:67:97:4f:24:44:95:
         fc:af:26:9c:0c:36:b4:e1:77:e5:ea:8f:a0:68:3a:36:7d:f9:
         05:6f:32:00:2c:3d:ab:a7:57:ab:bc:c3:9c:d0:ba:ae:11:b9:
         55:4e:ce:6a:e4:e3:50:7f:19:ea:53:8c:6d:f1:0e:2f:de:c5:
         3a:de:34:36:38:be:fd:5e:96:78:bd:75:a3:60:1e:b3:ff:29:
         72:b5:af:64:3a:9e:8e:da:b2:40:fb:97:04:ec:89:9d:2a:b7:
         79:4c:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:53:22 2025 by rpki-client