This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          cZO2nzTwBcUnkMyfE8/AkG312V7JNLx2RtjXO/C5Mlw=
Subject key identifier:   47:04:60:D3:39:0C:F9:B1:EC:3C:52:BF:A4:2F:97:62:56:E6:C8:7B
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019AF0BF4D5041CD05E63F6B18491720774A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1761
Signing time:             Fri 05 Dec 2025 23:01:00 +0000
Manifest this update:     Fri 05 Dec 2025 23:01:00 +0000
Manifest next update:     Sat 06 Dec 2025 23:01:00 +0000
Files and hashes:         1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: nQ29JVeCQzl0bUCvGS5gFF8XSW987//hFpNun4Afjpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:4d:50:41:cd:05:e6:3f:6b:18:49:17:20:77:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Dec  5 23:01:00 2025 GMT
            Not After : Dec  6 23:01:00 2025 GMT
        Subject: CN=470460d3390cf9b1ec3c52bfa42f976256e6c87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:bd:e3:3c:ee:16:21:d2:3f:07:c1:4f:11:
                    39:37:6a:0f:61:99:4a:eb:e2:bd:29:8e:c9:bc:b2:
                    a0:d4:49:60:10:55:92:22:f6:5a:68:8a:05:9a:da:
                    3d:3b:0f:66:f3:b3:8e:89:ff:4b:92:81:c4:ee:69:
                    e6:2d:dc:29:3b:b0:09:b8:db:f7:92:1d:4f:0d:c3:
                    89:e5:aa:50:65:24:bd:92:95:35:54:2c:78:31:60:
                    6b:66:43:98:c7:8c:39:ee:4f:36:6d:14:8e:66:e5:
                    27:d2:6b:8e:93:df:78:8b:56:74:87:e4:0b:09:5b:
                    b0:ea:fc:77:4e:79:46:18:40:c9:df:c6:0f:2b:20:
                    c3:a5:b6:a1:3e:dd:6f:78:19:23:cf:b9:e3:0c:52:
                    15:c6:a5:3c:78:c9:e6:ac:a4:ea:10:db:9d:06:55:
                    48:f9:43:c1:91:06:ae:46:1f:33:4a:34:b4:fa:07:
                    c4:37:a6:4a:c4:ae:10:1c:d0:d5:8b:40:02:04:01:
                    3a:73:41:14:17:9e:ad:a8:1f:94:52:6a:a5:89:9c:
                    2d:95:90:93:51:1f:a6:8b:88:80:6d:ec:2f:3d:1d:
                    6f:42:c9:ab:58:2b:e6:89:d7:89:45:63:c1:4d:26:
                    c6:24:a0:cc:89:1c:13:0d:1c:ae:96:71:29:1c:31:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:60:D3:39:0C:F9:B1:EC:3C:52:BF:A4:2F:97:62:56:E6:C8:7B
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:68:01:08:d9:f6:8d:af:df:89:b7:89:f1:06:8a:d1:bc:
         1d:cf:b7:75:94:13:74:17:74:1d:b7:1d:61:17:33:d6:d6:82:
         ee:18:2b:47:6a:7b:48:8f:8a:90:40:96:49:7c:5b:3c:9a:77:
         2a:69:01:4e:c6:0c:16:f4:22:55:54:76:72:7d:8f:2e:77:74:
         98:5a:49:92:e1:83:ca:4a:fa:ff:b2:8c:5c:57:24:67:36:48:
         97:18:a6:a6:13:c3:1d:85:ef:fd:00:5c:08:21:14:c4:5a:dc:
         ef:9b:c9:f6:9d:ed:90:35:2b:62:31:37:36:c5:2e:80:7a:ac:
         26:ff:98:b6:ee:c3:b1:c2:a6:04:04:f5:53:2d:3d:43:47:0f:
         2b:6b:8b:c2:5f:fc:fe:5a:0d:90:fb:8a:a6:d4:a1:5c:e7:36:
         32:9e:d7:d2:f5:11:f1:85:03:3d:2e:7a:98:fc:03:56:56:eb:
         fb:87:47:31:97:c1:a6:40:d0:31:50:e4:79:a3:9c:f8:be:a7:
         4a:c9:d5:8b:8f:21:1d:be:19:bb:23:85:58:ae:35:c5:91:0f:
         56:d8:e2:b2:7b:8b:fe:79:a7:4b:69:d4:ea:b0:c7:2e:0c:55:
         b1:e3:66:75:ee:a5:8b:75:ff:99:12:7a:c4:f3:d9:7e:38:72:
         3a:8b:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:23:02 2025 by rpki-client