This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File:                     mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier:          WD1i5/BDB72c1WpB7hoy5m8g2lg72QT9CHJzvaQ9gnY=
Subject key identifier:   60:81:52:08:C3:87:88:1D:60:B1:56:68:F8:1F:B3:FF:4F:8D:D8:03
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer:       /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial:       019AF1643578AFD9910B2BD3B234C8FEB352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 02:01:07 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:07 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:07 +0000
Files and hashes:         1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
                          2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: zRmqyBKg2TrKKf3dCVJD6EojLwLyj1kOSUXKECWbDqI=)
                          3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:35:78:af:d9:91:0b:2b:d3:b2:34:c8:fe:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
        Validity
            Not Before: Dec  6 02:01:07 2025 GMT
            Not After : Dec  7 02:01:07 2025 GMT
        Subject: CN=60815208c387881d60b15668f81fb3ff4f8dd803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:b1:75:a5:0c:93:89:dc:b5:dc:24:07:1d:
                    1e:f0:ae:22:c9:1e:9a:86:89:03:98:38:c1:34:e8:
                    a7:bb:f1:2d:74:32:2c:dd:71:68:b1:80:c9:a8:fb:
                    2c:b6:74:a3:65:39:7f:79:75:ad:94:6f:08:f7:d7:
                    29:15:e0:69:1b:08:9a:2d:95:ea:b4:94:70:09:f5:
                    5c:49:f9:28:2f:cc:76:ca:9d:3d:0a:38:9b:90:ba:
                    db:79:d3:66:32:e3:7d:d4:26:6f:8e:df:41:4c:22:
                    95:51:2f:b7:ec:b5:04:8b:80:f9:c8:91:93:c0:5d:
                    a3:ca:f6:88:d9:22:ae:e3:6c:7f:30:87:c4:ab:36:
                    00:14:82:cd:b1:ae:b5:52:d1:b1:69:8f:8d:27:70:
                    84:b7:c9:1b:73:dd:69:2a:ef:a7:8c:4e:ca:43:f1:
                    92:f6:ca:b5:cf:4f:45:71:1d:e1:6a:56:f0:f2:a0:
                    63:f5:e7:07:8f:73:2f:a9:a9:21:5f:96:c7:f6:61:
                    47:77:a0:42:f8:5d:96:3f:16:8a:13:52:cb:23:a4:
                    d9:07:87:2c:2d:2a:06:de:51:59:86:c6:7a:01:ad:
                    98:ef:b9:68:33:d9:ce:dc:7a:a5:07:12:5d:1d:ee:
                    0b:16:9b:00:a2:70:80:f4:f2:6e:6f:e1:e2:e5:c7:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:52:08:C3:87:88:1D:60:B1:56:68:F8:1F:B3:FF:4F:8D:D8:03
            X509v3 Authority Key Identifier:
                keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:25:f9:ee:ea:48:b6:db:58:af:0a:16:f9:62:b9:f6:3c:e2:
         1f:da:00:69:5f:c1:c6:e5:dc:20:c1:b1:5d:d8:46:3f:62:48:
         56:74:e0:5d:b8:90:20:8c:2d:b2:1c:53:a3:64:01:f5:d4:2b:
         9b:de:ad:88:e9:02:5c:86:a0:d5:ec:0d:d7:1e:3c:ef:e0:df:
         cc:1e:72:af:18:c9:17:62:75:06:51:56:0a:0b:a7:18:37:0f:
         09:c2:19:df:a7:d9:96:d3:8b:a9:ce:c7:42:b4:55:ac:b9:62:
         44:07:7f:0a:2c:c3:27:ed:7e:f2:00:01:bd:b2:5c:b3:c8:80:
         9f:cf:54:45:39:af:92:2b:c9:04:71:1a:f6:fa:55:89:0b:87:
         7e:b6:5c:50:04:43:7d:26:b2:a3:f3:5b:e8:f6:f8:a0:8e:9d:
         a0:2c:5f:ad:01:4b:77:8a:db:d6:6e:11:03:ba:80:82:2c:9f:
         20:e7:8e:d3:79:e0:f5:5f:73:d9:88:10:f1:8e:42:aa:b7:46:
         ff:4b:5f:5a:4d:f5:0d:f7:59:9c:d8:bd:d7:01:41:e4:7a:a5:
         b9:b0:20:a9:17:ab:f1:e1:75:d2:6f:44:26:8a:1f:47:4e:d3:
         af:57:fa:7c:dc:1a:0e:25:b5:02:22:df:e9:d2:ef:b4:9a:d3:
         79:1a:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:10 2025 by rpki-client