This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          Yz2o6U3PuGidZP6B2EyzXIAM1hISF0UJIijPdoo6gWo=
Subject key identifier:   D6:11:4E:11:83:39:6D:99:28:AD:22:43:FC:88:FD:2F:28:AA:86:29
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       019AF49C1097DDB0237407D4AE12658EDF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 17:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:59 +0000
Files and hashes:         1: NGx97u5kA3dUDgSnZsO_ai0a5zE.roa (hash: NM6MYaekH4qBVbHzQFehYG5HnPWSemWzqr91LDcaFoc=)
                          2: _VuqWh_9zLum_t2LzmiL-bKUpwU.roa (hash: fjTMbmjav2QqlRjLRKV5RKbBW9ZGH9k7F0uicD/W2jc=)
                          3: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: DKYAUzZSQkibFO68Y/IBu84oFkT3mOAPmD5k5uT5pF8=)
                          4: dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa (hash: JZO95le0AT9qZyGk77wE0TYV+xtaUVyy4hxb89m5QEk=)
                          5: vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa (hash: s+4rmOMySoNQOi+H+sRt31xxTfChmW9KgSsCZve3tZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9c:10:97:dd:b0:23:74:07:d4:ae:12:65:8e:df:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Dec  6 17:00:59 2025 GMT
            Not After : Dec  7 17:00:59 2025 GMT
        Subject: CN=d6114e1183396d9928ad2243fc88fd2f28aa8629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:3a:d8:06:ff:0d:cf:b7:3b:06:81:a3:a7:
                    b9:9d:5d:b1:e5:b0:3c:93:ff:91:2c:f5:a4:d4:b8:
                    ae:9b:a0:ea:cd:5b:4c:f5:3c:ce:a3:b2:c6:36:a1:
                    8a:be:80:01:8d:ad:5e:b4:a3:44:51:56:f3:a6:6f:
                    dc:ad:06:1a:a4:ef:52:8c:ec:98:b0:66:46:1f:cd:
                    f3:38:e0:92:64:f8:73:94:3f:48:51:4f:52:af:ee:
                    15:f3:18:90:1c:11:a9:85:9e:71:18:a1:9f:06:82:
                    02:b8:9d:6b:fc:40:e4:09:3e:56:ae:b5:de:11:5d:
                    fb:29:d0:1d:80:e7:68:fc:b3:80:3b:75:25:2c:42:
                    19:b2:52:e7:25:39:f7:59:50:86:82:11:2d:e1:bc:
                    64:d5:63:c5:91:07:18:d4:97:80:03:40:03:03:21:
                    92:28:18:c7:d3:d1:40:f7:80:f0:e0:26:62:a0:d3:
                    35:89:cd:7c:af:89:dc:3f:64:22:db:a6:fc:1c:d3:
                    42:2d:40:fb:5b:dc:d8:bb:05:98:a7:7b:96:37:c4:
                    de:78:3e:b9:5d:35:25:2b:6d:00:fb:04:63:86:f0:
                    f3:a7:a3:07:7e:f1:ea:18:2e:83:72:a5:64:d3:d1:
                    32:2a:3b:13:d7:22:73:4e:36:bf:7b:6e:a7:b0:96:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:11:4E:11:83:39:6D:99:28:AD:22:43:FC:88:FD:2F:28:AA:86:29
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:4d:8e:bb:9c:89:54:4d:c6:be:c9:be:f9:55:42:cd:48:
         2b:d5:3d:39:7b:49:73:79:63:fb:50:70:80:0b:89:46:32:49:
         58:0d:de:10:39:ce:14:03:a5:c6:21:be:20:1f:b0:bb:be:5d:
         40:6e:ec:24:67:fb:f9:5f:52:ab:e1:d8:ca:1c:3f:c6:f0:a3:
         11:78:b9:ad:29:23:ea:28:54:30:d9:61:f9:64:7b:df:2c:2e:
         b7:1d:ed:e4:c2:2e:ef:bc:18:34:f8:4b:24:00:36:cb:ea:74:
         63:77:e5:19:1f:82:bb:45:64:a4:32:79:26:6a:03:d6:bb:8b:
         c3:57:54:ca:a0:17:c7:a2:21:27:15:6a:33:42:25:0e:08:03:
         03:10:b4:7c:ef:bd:f7:c4:a6:8c:5c:68:dc:0a:5b:5c:24:d9:
         30:58:89:5a:17:4b:49:2d:96:02:0b:f7:5e:0c:5f:e0:c8:43:
         85:56:4f:5b:7f:d2:21:7e:29:6e:d5:a6:9e:fe:c3:8d:a4:01:
         ae:bc:a4:41:d8:15:d2:c9:1c:6e:91:f5:a2:35:e9:62:63:13:
         f0:2f:32:ac:6c:e1:48:35:41:51:26:bb:d5:c4:02:47:68:ca:
         64:56:8e:87:11:a2:30:74:a7:2e:d5:ec:32:21:e4:42:c2:45:
         e3:af:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:38:13 2025 by rpki-client