This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File:                     r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier:          72iAT4fok78fokkv2L3fGlogCwUzXZafkEuRU1i8S3g=
Subject key identifier:   84:D6:94:30:88:AD:32:A2:D2:1F:28:1B:CD:9E:6F:69:17:FD:CF:F9
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer:       /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial:       019AF3F80BE58E4AE77A90F5EE9E0493DC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 14:01:50 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:50 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:50 +0000
Files and hashes:         1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
                          2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
                          3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: 4mK3msDD+yaJx/f2Ym3EHrgRpNb1yw13X8HZDatS71U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f8:0b:e5:8e:4a:e7:7a:90:f5:ee:9e:04:93:dc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
        Validity
            Not Before: Dec  6 14:01:50 2025 GMT
            Not After : Dec  7 14:01:50 2025 GMT
        Subject: CN=84d6943088ad32a2d21f281bcd9e6f6917fdcff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:35:ae:36:69:41:2b:4b:dc:45:5a:e4:4d:
                    c0:73:ab:a9:94:d7:e2:0c:6e:86:b7:b1:2a:6e:32:
                    08:e1:8a:ef:76:ab:7e:65:93:53:dc:1b:e5:89:07:
                    6c:38:4d:c3:8c:af:bf:c2:e2:b1:02:7f:08:ba:c2:
                    f0:ab:c6:6a:01:85:29:75:3c:b2:46:be:2e:a1:c6:
                    86:cd:bc:6c:ca:74:ff:6d:37:33:07:c1:af:f6:d5:
                    ea:ac:1f:22:9c:60:7b:93:ed:c7:0a:ff:61:1e:42:
                    48:3f:ed:b1:25:85:7c:df:05:46:15:4f:90:9b:50:
                    ca:5c:94:bd:d0:71:bc:8c:e5:69:de:91:df:6c:12:
                    31:cd:b5:12:bd:c8:de:67:97:a4:8a:b0:dc:0d:f3:
                    b3:8c:2d:4a:f0:2e:02:03:df:ac:47:f9:4a:af:e4:
                    b9:96:54:dc:31:4d:47:9b:21:a1:e4:f2:4a:b1:39:
                    10:20:06:e8:ea:5f:79:8c:02:4f:63:8a:a1:de:68:
                    b0:5f:6e:bc:ce:6a:74:65:bf:07:af:17:c2:35:02:
                    72:dc:51:35:9f:58:99:7d:ce:f7:20:36:29:fa:64:
                    ae:d4:75:5a:98:29:24:2e:08:d6:5e:1b:9c:c2:05:
                    7b:5d:f0:a8:19:8c:ab:66:d3:e1:fe:94:29:31:a6:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D6:94:30:88:AD:32:A2:D2:1F:28:1B:CD:9E:6F:69:17:FD:CF:F9
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:42:6f:91:c8:c9:99:df:78:a7:e6:24:62:a0:ef:dc:d1:6f:
         71:f2:c5:15:08:ea:76:e1:6b:6b:b8:84:19:6d:c8:7e:cc:59:
         b6:a5:58:b2:ec:d0:75:60:d7:73:8e:79:e8:09:55:72:70:70:
         c0:4e:4b:b6:59:e2:e9:7c:18:5b:95:9e:13:71:90:ee:f6:d1:
         71:1a:c1:db:35:f9:6a:00:be:34:40:e9:e7:ec:46:e0:eb:94:
         c4:e2:33:9a:0e:d9:7c:10:40:fc:e7:b5:8c:01:60:18:71:9c:
         d5:ee:17:5b:90:d8:b9:c6:17:a0:58:d8:d2:31:51:04:d5:95:
         4f:d6:eb:27:87:aa:36:15:72:b4:86:e3:c9:42:56:df:81:a6:
         8c:74:4a:f6:5b:69:e0:22:5d:a8:83:41:e4:cd:05:43:8a:ce:
         b2:0d:9f:34:b3:ef:13:c1:c3:55:28:f7:28:13:97:69:68:0c:
         78:06:fe:53:e4:f7:82:4c:b7:0c:04:83:f1:0c:be:84:8e:3e:
         3f:35:eb:a0:39:6e:9a:76:b6:83:1b:ff:50:ed:2c:0b:c7:b6:
         d6:ad:27:a9:a6:f5:3e:24:f2:84:1d:cf:c6:a0:75:2f:5a:83:
         c0:02:e3:79:c5:9d:0f:d9:3a:2f:52:4b:3a:85:4a:f4:72:19:
         a1:ce:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:53:42 2025 by rpki-client