This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File:                     AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier:          pz2/zj8LBC8F+691dA5AYtu+ME54UNOhJ8zTkjW6RSk=
Subject key identifier:   E7:FE:8B:A1:BB:37:B6:45:88:92:91:E6:1A:C7:44:64:5A:0A:3A:E9
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer:       /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial:       019AF088C46D5F4561DC1EB24EA7668C90AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 22:01:26 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:26 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:26 +0000
Files and hashes:         1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: wUzy4E4bwjQf1eVktVKk5ch7ZkctTGfwJn6YMjn74+c=)
                          2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
                          3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:c4:6d:5f:45:61:dc:1e:b2:4e:a7:66:8c:90:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
        Validity
            Not Before: Dec  5 22:01:26 2025 GMT
            Not After : Dec  6 22:01:26 2025 GMT
        Subject: CN=e7fe8ba1bb37b645889291e61ac744645a0a3ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:7a:57:09:4b:3c:a5:8f:0f:48:a7:66:4f:
                    14:cb:5d:db:4f:e2:93:62:c6:60:0f:5e:e8:c3:c7:
                    5e:96:bd:c9:99:3c:f4:2b:e5:e1:f6:58:4f:f9:ae:
                    dd:ca:a8:23:3c:b1:97:63:ba:33:7c:de:48:f0:d0:
                    9c:01:c5:0b:75:58:12:4f:aa:f8:3e:98:47:24:5c:
                    bd:c8:42:44:75:1e:47:27:15:2a:ac:5e:05:59:e5:
                    25:04:1b:5f:51:75:b9:81:c3:e5:2a:44:f6:b3:2f:
                    e0:41:e6:40:cc:c8:ed:90:6f:60:80:0a:e3:f7:e3:
                    3a:c9:d5:97:47:d9:fa:da:8a:b5:2a:38:ba:d7:58:
                    a3:df:eb:7f:85:36:db:3c:28:1e:b9:82:2f:ca:af:
                    6a:87:30:74:4e:37:8c:9d:72:21:ae:33:4e:02:91:
                    e4:e7:73:fe:da:a2:a8:a6:5b:13:e2:8c:f4:4b:76:
                    b8:b7:20:48:32:d3:22:a0:57:2f:0f:2a:db:f1:04:
                    6b:84:4f:57:60:14:17:41:79:c5:d0:65:49:49:c0:
                    df:fa:d1:5a:f2:0d:76:e5:d9:7a:28:51:79:66:43:
                    0a:b6:d3:02:e7:fe:a4:39:b9:46:87:06:4c:e6:26:
                    4b:f4:db:bd:34:30:1a:63:11:1f:7e:e0:23:9c:4f:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:8B:A1:BB:37:B6:45:88:92:91:E6:1A:C7:44:64:5A:0A:3A:E9
            X509v3 Authority Key Identifier:
                keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:65:7d:71:92:24:2f:df:7c:8f:f5:9d:f1:15:ca:9f:a5:40:
         7d:9e:6b:fd:dd:6a:e2:12:10:32:4a:1e:8a:41:b4:8d:b9:66:
         df:39:ca:ba:31:6b:8d:9f:5d:ec:8f:5f:27:16:e6:52:8c:3f:
         54:ab:d9:4f:de:e8:66:43:72:22:c1:80:fc:07:67:32:23:5f:
         23:2d:5a:99:fa:08:81:f6:b3:b3:a9:f2:c6:f5:c1:24:65:5f:
         fd:d3:6c:ec:0b:ba:28:52:0b:f2:8c:5b:83:0e:0e:29:6a:ea:
         ff:0d:cf:49:94:ce:75:1d:eb:a3:a6:08:2d:f2:cc:66:64:94:
         25:75:d8:ae:a9:a4:6f:06:be:8e:8d:9f:13:33:c1:24:1c:ad:
         5c:70:bf:93:31:bb:79:10:57:2e:26:c3:1e:0c:51:d9:ba:d6:
         af:16:b9:6c:ff:7f:74:96:01:85:e5:fb:36:55:9c:7a:12:b3:
         64:67:bb:12:c8:16:9e:74:6b:db:d8:d7:ae:e3:e7:30:db:c1:
         ae:d5:b2:4a:92:b3:5c:ea:9d:1e:a7:d1:a2:a5:73:60:9e:87:
         27:98:4f:d0:b1:13:a1:98:5f:30:17:0b:84:45:8e:15:7e:22:
         f0:05:81:5e:0b:bf:e1:77:25:19:17:0f:b3:10:52:48:f3:74:
         d0:63:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:57 2025 by rpki-client