This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File:                     RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier:          j0GBWu4evd9+wBh9d/Cg1kieAFFrYiIYp2o3M8wBIco=
Subject key identifier:   1A:D5:4B:0B:5C:2B:F7:28:FA:A9:88:14:A7:78:DD:EE:23:44:D3:FC
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       019AF68A8DA4E0E2EAB82C83862F69466348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number:          1769
Signing time:             Sun 07 Dec 2025 02:01:06 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:06 +0000
Manifest next update:     Mon 08 Dec 2025 02:01:06 +0000
Files and hashes:         1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
                          2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: eSzzQMXBSLSWJvn5gZfPLysB8DP88OyyriBeKvJFBtk=)
                          3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:8d:a4:e0:e2:ea:b8:2c:83:86:2f:69:46:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Dec  7 02:01:06 2025 GMT
            Not After : Dec  8 02:01:06 2025 GMT
        Subject: CN=1ad54b0b5c2bf728faa98814a778ddee2344d3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:a5:cf:3b:56:52:18:60:cf:f9:21:23:f2:
                    88:55:77:31:91:87:7a:c0:ad:c2:25:c7:25:13:bc:
                    51:58:8f:75:fc:b4:59:54:20:c9:2a:34:0b:f7:75:
                    e8:e9:fb:11:87:13:73:ae:11:8d:8f:8d:7c:06:17:
                    51:3e:15:a4:36:30:93:c9:6b:20:24:e0:e0:46:ef:
                    bf:e0:e6:21:ed:dc:77:2d:05:69:b4:61:48:ea:32:
                    9c:3e:5f:f7:e2:50:e3:0f:1b:c0:b6:1c:9d:74:9b:
                    b7:9f:ee:ec:2b:b1:a1:4f:df:37:6f:45:5a:bd:ca:
                    97:79:4b:85:0a:bf:98:99:d0:1e:bf:5e:b3:b7:13:
                    2e:47:55:20:38:82:7d:a5:6e:9a:c1:5b:6b:d0:06:
                    ab:e7:f9:14:ac:f7:c2:91:62:5f:e2:56:2c:80:a8:
                    0e:9a:dc:4b:7f:82:0d:90:8b:04:94:63:93:3f:cf:
                    7a:6d:6f:1b:00:6a:57:36:b2:c8:1b:28:73:a6:60:
                    3d:04:18:85:82:9d:14:cb:d8:40:21:5b:c0:38:18:
                    61:b3:80:bf:89:f6:db:ba:2a:40:a4:bb:d1:d8:38:
                    70:e3:aa:2d:89:23:4b:4f:a5:99:69:41:83:9b:30:
                    a5:bb:5f:64:96:b4:70:72:b8:ec:15:ac:99:9c:b6:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:4B:0B:5C:2B:F7:28:FA:A9:88:14:A7:78:DD:EE:23:44:D3:FC
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:e3:48:fe:2c:2b:a7:fc:63:dd:55:e9:39:62:20:75:54:
         9b:8b:0b:a3:7e:a3:a0:84:20:fe:0a:68:fb:5f:64:61:77:d2:
         a6:b2:8b:a2:6c:3e:55:56:2c:a5:58:6d:1e:fa:8d:3a:bc:f1:
         a5:d7:e6:f9:7c:16:74:c9:26:07:fd:43:3c:8d:0d:b4:73:52:
         ef:33:26:d2:91:36:b1:e1:f9:b3:83:a4:60:95:97:40:57:50:
         14:de:98:0a:f3:e8:d6:e0:8f:b4:2d:80:76:89:c9:49:91:ce:
         e3:fa:76:c3:5e:d5:b2:bc:c0:25:a8:48:45:91:3d:5e:42:58:
         de:05:68:a5:a5:f5:3c:35:0f:49:27:d1:bb:46:49:f1:ed:ec:
         8f:2c:bf:f4:0f:46:dc:f8:5b:19:d4:07:d2:a2:8d:e7:4f:d3:
         ea:f1:45:5f:d6:ff:8f:63:58:7d:6c:98:4a:bb:25:89:61:df:
         ef:5b:4c:50:3a:2b:52:c1:0d:79:23:30:a8:38:de:0a:b1:e3:
         3d:fa:0c:60:30:9b:76:2a:ca:0f:e6:6e:73:56:47:2f:83:e2:
         46:45:12:80:39:2e:73:dd:46:cb:a6:59:e0:43:9a:6c:ba:0d:
         eb:a3:9e:ab:5c:6a:5a:82:b3:2c:1c:64:fc:de:66:30:98:8e:
         d8:a7:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:16 2025 by rpki-client