This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          9qgwBmQwnvoBUKxigfqPlWmeLTvjy3WG37QuNM2SUdY=
Subject key identifier:   62:E5:A7:4C:F6:88:73:F1:1B:C8:DF:E3:AC:15:07:F1:28:FB:F5:1C
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       019AF12CC2825A401AA12DB54DA57E618004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:33 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: cS5UvNYrr+ULi+nTz29bRAPi4XEcEPHTIqoM/4vsy+A=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:c2:82:5a:40:1a:a1:2d:b5:4d:a5:7e:61:80:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Dec  6 01:00:33 2025 GMT
            Not After : Dec  7 01:00:33 2025 GMT
        Subject: CN=62e5a74cf68873f11bc8dfe3ac1507f128fbf51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:63:ea:9f:75:b6:e0:4b:81:68:55:b0:c0:
                    84:ab:9d:f1:b5:57:88:3e:bb:3d:55:91:3f:a8:f7:
                    d9:90:26:cc:17:2f:44:a4:53:63:c1:f6:7e:6a:e1:
                    ee:64:e2:b7:e6:da:8d:f3:f0:f5:fd:6d:50:25:e1:
                    c7:e8:bd:1e:4c:92:09:92:18:79:f8:d6:47:26:8a:
                    96:9c:b2:72:4c:f5:45:1f:ed:f2:b5:19:01:d5:f6:
                    b2:e7:dc:9d:64:17:67:81:dc:bd:6a:98:fe:69:99:
                    20:60:1d:8c:e3:61:c5:f9:23:ee:45:65:12:1c:84:
                    36:b9:16:bb:9d:c9:0a:6e:e1:8f:40:44:3b:50:ec:
                    58:4f:35:67:0f:eb:9d:53:92:bf:63:89:54:42:bf:
                    4b:8f:f4:b9:85:3f:53:8d:03:7b:8e:0b:ab:92:d3:
                    cd:d3:ca:ff:b7:eb:93:fa:7a:86:7b:d3:37:e4:a5:
                    01:b2:d6:84:29:cf:b6:bb:1d:ea:d7:3f:80:0f:50:
                    4f:90:7c:85:01:0a:50:53:1f:c8:c2:94:a5:88:c4:
                    c7:71:10:c4:6a:f7:2e:13:31:29:0d:a8:ce:f1:65:
                    96:33:cc:9b:98:bf:cd:29:2d:9c:67:95:f3:f0:90:
                    8e:54:59:e1:48:ec:8f:5f:4c:d0:6f:b4:67:2a:27:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E5:A7:4C:F6:88:73:F1:1B:C8:DF:E3:AC:15:07:F1:28:FB:F5:1C
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:02:43:8d:95:84:b8:f1:33:15:96:0d:2d:2e:39:37:1c:
         5e:7a:e4:53:b8:68:16:ad:10:ef:ad:70:89:3e:b4:c3:eb:f8:
         70:b9:bf:fa:6e:34:58:19:99:17:39:07:01:1a:05:fe:22:aa:
         f4:1d:d9:5c:bc:fa:fc:f4:f3:56:94:9c:e4:d4:b3:a9:71:0d:
         0f:83:a1:89:52:43:30:00:c4:d1:60:13:c7:27:f8:4e:8d:88:
         d7:39:f0:d9:3d:93:2e:d5:99:9a:d3:2b:aa:45:1f:cf:c9:71:
         9c:04:80:12:cf:65:78:f6:db:d0:da:2f:2b:28:20:41:85:21:
         e5:dd:80:51:42:c6:73:95:f6:96:2e:70:b0:a7:cf:49:02:d4:
         6a:fa:6a:a6:f9:dc:e0:d0:8a:e7:52:81:e1:8c:ae:ef:87:ce:
         4e:3d:e3:dd:f3:0a:74:b0:d5:8c:38:40:f1:c3:86:6c:f6:a6:
         45:29:91:9d:69:e4:d8:c8:7e:30:92:87:c6:5a:a2:4c:01:81:
         24:e9:5b:98:3a:2b:20:ff:24:6d:80:da:01:d0:1a:c1:ee:94:
         31:7e:38:fb:4f:fe:77:39:a2:3a:ac:ff:8e:ee:69:22:3e:df:
         8a:4e:f3:d1:b5:a7:dd:e6:8f:68:35:40:92:1f:23:cb:7b:9d:
         6a:2b:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:43 2025 by rpki-client