This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File:                     NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier:          jHOk8oFAYDTQvHAo6RRye63RNzSh5JarQIs0s6kIyzQ=
Subject key identifier:   56:4A:23:01:F0:1B:8B:5E:51:2E:43:E1:3C:DA:8E:1A:F8:08:1B:4F
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer:       /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial:       019AF31BE2AA13D9E82BBC382631FDFAA34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 10:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:22 +0000
Files and hashes:         1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
                          2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: 9Wb+la9wr/esfQfeMWL/xXMOjNsqvvKd4+Dst6rNYJ0=)
                          3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:e2:aa:13:d9:e8:2b:bc:38:26:31:fd:fa:a3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
        Validity
            Not Before: Dec  6 10:01:22 2025 GMT
            Not After : Dec  7 10:01:22 2025 GMT
        Subject: CN=564a2301f01b8b5e512e43e13cda8e1af8081b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:3f:63:fe:a0:19:c2:b4:39:76:f4:6b:6c:
                    90:33:ca:08:00:0e:31:23:d0:53:12:bb:f1:7a:24:
                    e5:1a:30:67:c8:bd:0f:1c:ec:dd:2e:2f:0e:24:24:
                    79:5b:4e:61:eb:d8:53:22:25:1e:33:b3:09:5a:5d:
                    68:b1:4e:0b:f0:4d:c2:f3:a1:89:3c:56:05:bc:a5:
                    ba:bb:29:2c:64:ea:b3:4e:dc:00:50:2e:80:ad:b8:
                    3c:22:ae:df:d1:ed:2f:b7:77:5a:20:77:73:e1:2b:
                    06:77:63:c6:b1:27:27:41:fb:40:72:5a:87:09:0c:
                    6e:a4:7c:14:63:2b:d3:ca:5d:1a:f4:d3:1a:aa:b2:
                    9e:a7:f6:53:8d:d0:13:41:30:08:f8:f7:a6:7c:5c:
                    5b:43:70:e2:f0:b7:dc:69:18:81:09:fc:05:91:f3:
                    76:44:fd:b1:2c:df:43:bc:e4:7e:14:64:b8:67:1d:
                    ac:ae:7c:36:b0:e3:c0:55:6e:9d:53:b9:f9:fb:43:
                    16:9a:1f:b9:6a:81:7b:12:00:67:b2:4d:94:c4:2b:
                    b2:a6:4f:c2:05:3c:2f:40:a2:8b:1e:c0:dd:30:2f:
                    35:f7:a2:bc:c3:99:a9:19:13:55:56:40:a9:06:f9:
                    f4:53:04:dc:db:6f:a0:af:78:3b:1b:f1:67:c4:d3:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4A:23:01:F0:1B:8B:5E:51:2E:43:E1:3C:DA:8E:1A:F8:08:1B:4F
            X509v3 Authority Key Identifier:
                keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:27:03:ac:b0:0d:dd:64:96:21:16:71:e4:26:40:9a:33:
         a9:c2:5f:b4:62:f6:25:a0:97:a7:00:28:81:15:05:42:6e:ea:
         8b:55:84:fa:87:04:45:53:1d:d1:0a:44:70:22:65:f6:d8:a3:
         64:32:0a:04:f8:4f:95:5c:63:58:02:78:a6:ba:54:e4:b9:e0:
         5c:8a:01:78:c8:42:1b:fd:11:a3:fb:ec:46:45:0b:41:cb:0b:
         52:ad:db:c4:68:21:02:f3:00:f7:13:ce:e9:a7:ae:f4:bf:45:
         d3:80:f3:db:74:8f:21:04:26:40:68:d6:ec:14:58:31:7b:25:
         2a:f4:53:2f:22:3d:94:42:4d:65:08:fd:c2:28:eb:ee:3c:9f:
         d2:0a:6f:5b:e1:da:0d:79:31:4d:18:33:c4:c7:f8:94:8e:5b:
         d6:19:11:e6:e7:e7:77:21:f2:13:af:b6:75:22:bb:94:15:48:
         50:74:cb:aa:2b:c7:07:49:c2:ba:d9:bb:a8:72:bc:fc:51:da:
         0e:04:fe:b9:c3:d5:a3:0f:85:ea:60:74:38:c5:f6:f4:38:7a:
         02:50:2f:bf:5d:20:53:f8:ac:ad:16:04:2a:63:2f:a1:b2:5a:
         5a:25:c6:76:33:bd:de:52:f1:30:bc:e9:98:1a:97:f1:24:31:
         85:e1:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:59 2025 by rpki-client