This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          YgI4LvCFZVndO6vcvlGo5pyc4AXB1IUthc/HbBj8REo=
Subject key identifier:   73:95:B8:34:76:F5:6F:BF:08:60:EC:B1:C5:4E:0C:4B:1E:FF:15:35
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019AF0F5F257D359AD073170BB0DB74B87B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 00:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:41 +0000
Files and hashes:         1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=)
                          2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: y4tRIfIkU8yaSDxuvyrUU7/j0zuaH2jxFPYS/9oOIPQ=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:f2:57:d3:59:ad:07:31:70:bb:0d:b7:4b:87:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Dec  6 00:00:41 2025 GMT
            Not After : Dec  7 00:00:41 2025 GMT
        Subject: CN=7395b83476f56fbf0860ecb1c54e0c4b1eff1535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:36:53:d7:a5:6e:82:53:79:88:83:d2:e4:
                    b4:b4:73:ac:73:2d:ce:f4:c3:de:63:bd:a6:af:b4:
                    8e:77:7e:95:25:94:67:82:e9:dd:0d:d3:24:3a:24:
                    99:c1:3f:ec:86:3e:91:06:6f:4d:d9:b5:d1:ae:52:
                    18:de:d9:c6:15:08:6b:02:62:16:1d:37:5f:ec:1d:
                    9b:fe:60:b7:bf:6b:a0:3c:04:05:27:98:fb:88:4a:
                    8e:ad:73:e5:35:60:16:2f:b4:85:87:9a:39:0c:1b:
                    3b:5e:5c:a8:1a:a1:50:42:e9:e3:e4:03:bb:6a:33:
                    7f:56:96:b6:eb:c9:5b:30:11:93:6e:18:ee:7a:5c:
                    01:d0:50:e8:0a:d3:25:2e:80:2e:8b:48:89:30:99:
                    d7:e7:6d:ee:64:d7:f9:eb:2b:16:bc:a8:16:1c:0b:
                    d6:b1:ac:92:24:31:5a:56:03:7f:ab:52:74:10:c3:
                    9a:9c:3e:a1:ba:a2:4e:90:67:ec:14:71:38:1b:f0:
                    b1:b7:a6:cf:07:75:2e:6e:3e:6a:54:da:78:4b:1e:
                    25:a6:8a:8e:1e:16:32:90:8f:32:20:5d:c3:61:8f:
                    50:ae:36:e9:25:2a:f5:7a:5e:42:0f:1b:cc:53:cc:
                    33:2f:69:e8:07:7e:68:30:9a:ef:d0:01:0d:7d:b1:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:B8:34:76:F5:6F:BF:08:60:EC:B1:C5:4E:0C:4B:1E:FF:15:35
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:a4:5e:3b:78:a7:34:93:29:ba:14:42:9f:05:d7:3e:72:
         bd:fe:b8:02:e7:f5:7d:1a:46:83:6d:07:20:82:c7:81:f7:02:
         6d:41:25:bd:b2:5d:15:08:3f:de:a0:19:02:94:cc:1f:a3:71:
         11:6f:d3:60:d4:47:55:a6:7e:b7:39:3a:80:1a:f9:42:c0:77:
         b6:a3:e4:61:b1:28:03:8e:9c:39:8b:c7:93:ba:53:54:28:b7:
         13:01:50:cd:11:4f:f9:12:8b:82:e8:85:54:7b:31:48:27:9b:
         e0:da:df:d5:a4:69:aa:c2:0c:7f:c0:66:b1:4f:89:97:b3:00:
         e8:a4:7d:5a:fb:c0:d6:89:24:65:c9:8f:d0:45:93:a4:2d:37:
         8e:5f:79:7b:c2:02:62:42:65:9d:72:04:2a:34:c7:bb:f1:8e:
         9a:80:74:70:e0:b7:bb:87:eb:3c:1d:77:9a:46:03:65:8b:28:
         9d:26:26:5b:81:3f:3a:0c:7d:e0:9f:22:e1:bd:2f:32:d0:a4:
         65:2a:38:aa:ec:96:64:d5:93:f7:e8:de:4b:ee:ce:27:40:5f:
         74:ea:00:2d:c1:c1:55:d4:58:03:5a:1a:10:c6:f2:3a:7e:2f:
         b8:84:ae:19:5d:10:f1:eb:6c:5c:6b:e6:4f:e1:80:2e:98:8a:
         40:e0:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:16 2025 by rpki-client