This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File:                     458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier:          gVXmpH8PvJqz+P5xa/u/i5J/mt+kdjjg0JcB+srf11I=
Subject key identifier:   AC:04:AD:CA:7C:8B:C6:BC:48:6E:17:AF:CC:2E:D0:72:99:D7:EB:94
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       019AF19AF9AC009F0915F6DE17A0FF0DCC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 03:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:56 +0000
Files and hashes:         1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
                          2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: 9Fo0n4zp0OLGJilk3oaJR6keQjdyEp+ChWKcSg/1E3Y=)
                          3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
                          4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:f9:ac:00:9f:09:15:f6:de:17:a0:ff:0d:cc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Dec  6 03:00:56 2025 GMT
            Not After : Dec  7 03:00:56 2025 GMT
        Subject: CN=ac04adca7c8bc6bc486e17afcc2ed07299d7eb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:65:de:b1:00:72:13:29:f9:b3:ce:80:f4:
                    4e:d3:e1:58:6a:05:59:7b:50:bc:c5:6d:34:7e:ca:
                    b8:6f:cc:43:b0:a9:50:20:8d:ea:d4:da:30:38:83:
                    03:8f:8f:23:08:41:d7:ee:95:a2:59:af:43:b8:31:
                    b4:f3:3b:d2:b8:be:96:bb:18:8c:7b:23:2b:dd:4f:
                    84:65:b3:4e:e2:34:9d:bd:ac:7b:97:4c:e4:27:94:
                    24:07:b8:0c:d2:2a:10:e4:46:a0:67:ef:fc:68:9f:
                    d2:f5:a4:9f:f1:c2:6d:a8:fc:8d:cf:a0:d1:e6:bb:
                    dc:b9:60:a0:0f:48:d5:cd:28:65:0a:e0:73:89:02:
                    6a:19:12:2f:19:aa:ae:c4:4b:66:90:75:11:4e:69:
                    92:d4:4b:85:e4:e0:71:ec:eb:be:48:27:1a:4b:04:
                    d8:cb:c3:3b:c0:62:f6:9d:b8:b7:fc:1c:31:b4:10:
                    40:07:20:bf:b3:9a:8b:70:e0:04:69:e5:e9:cf:c4:
                    19:b3:e9:3d:32:98:f7:e7:2f:d6:b6:f9:5f:55:ea:
                    b4:d3:67:3e:06:2b:62:e2:68:18:4c:fe:93:d2:f8:
                    44:4e:a0:53:17:aa:6e:91:f1:b3:12:5d:9c:50:93:
                    af:c3:fa:45:f6:8b:44:11:d1:5a:ed:ff:27:dd:15:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:AD:CA:7C:8B:C6:BC:48:6E:17:AF:CC:2E:D0:72:99:D7:EB:94
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:57:78:17:78:9c:08:bd:34:22:e9:84:ca:94:0a:5d:6b:
         96:80:81:2e:0f:0a:fa:d3:ca:97:d6:4f:1b:24:4f:0c:9f:66:
         e7:68:ec:2f:6b:8d:b1:8a:bc:88:d6:77:9c:52:43:b4:79:3a:
         1c:23:97:4d:6f:f8:0b:80:27:2b:4f:e6:93:af:11:8b:62:d2:
         7f:33:c6:22:c5:d2:98:06:2d:74:c2:c4:ce:c7:f8:54:ce:2d:
         6a:3a:09:00:62:ec:b5:37:a6:3f:48:02:e1:7c:95:02:43:c6:
         99:49:03:84:9c:ba:b3:18:64:ea:7d:aa:08:42:7b:f1:3b:00:
         be:38:12:8d:7f:a6:06:c1:1d:de:db:a9:1c:3c:cf:29:99:8c:
         e3:07:75:9f:16:93:1f:92:4c:c6:a5:b9:a0:9d:e9:e0:1a:7f:
         88:05:57:bb:4c:a5:84:8d:53:ec:59:ce:a0:3c:45:7d:ff:a5:
         53:4d:a0:20:80:07:9c:19:3f:68:7e:a6:a6:b3:b0:51:41:3a:
         09:da:0e:bc:3b:55:af:f7:e5:f2:f5:5f:13:4b:97:ce:f8:a0:
         bd:69:23:35:97:aa:21:5d:5e:8c:69:29:8d:4a:46:e5:5a:63:
         df:80:d1:8b:25:63:8c:fb:34:75:fb:48:58:a5:69:6a:fb:69:
         44:9e:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:15:04 2025 by rpki-client