This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File:                     13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier:          jhRUqRcA3yTJ5QtIXCkagqlBgLTgOpIRQnoQL5iKHWk=
Subject key identifier:   86:A4:5F:61:53:1A:8C:CE:D8:01:C9:FD:2A:E3:D9:41:8E:EE:31:38
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer:       /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial:       019AF31B90F088BE41D28193E4889478227C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:01 +0000
Files and hashes:         1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: WoxtT2tYrIFt4FGrhbqjz/Olysl9S6wNzCbx8qDh+08=)
                          2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
                          3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:90:f0:88:be:41:d2:81:93:e4:88:94:78:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
        Validity
            Not Before: Dec  6 10:01:01 2025 GMT
            Not After : Dec  7 10:01:01 2025 GMT
        Subject: CN=86a45f61531a8cced801c9fd2ae3d9418eee3138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:80:7e:18:76:6a:a7:bf:32:39:f0:08:72:
                    b7:06:d5:16:77:de:e4:97:09:f2:c4:5c:36:6d:1b:
                    e3:eb:61:3f:bc:84:09:0a:52:9e:98:9a:43:10:b4:
                    61:3f:47:0d:0e:d5:31:3c:ed:d6:c7:e2:32:c0:dd:
                    9c:b1:e7:09:be:30:49:19:0d:be:f5:1f:00:69:fb:
                    91:84:75:1a:25:2b:be:b7:4a:f8:34:27:8c:75:b4:
                    b1:01:ff:a2:ee:82:4e:7c:fd:70:de:fe:74:c4:24:
                    ef:3d:55:2a:e1:eb:ed:d7:84:82:ba:0d:fe:b6:28:
                    74:ea:82:0f:d3:c7:c9:d0:d6:3d:e8:28:ba:2c:02:
                    57:60:95:40:7c:90:08:ac:62:65:8e:0e:11:7b:f8:
                    20:f8:d5:2e:97:d4:af:60:f3:4c:46:5f:32:c6:70:
                    99:d6:95:20:be:49:1f:ab:90:84:43:19:2a:56:d5:
                    28:9a:7a:7a:a6:f7:b9:7c:8e:0a:3f:73:2a:6a:68:
                    c5:25:9b:64:08:10:df:fd:2f:5d:30:58:f0:f3:ef:
                    53:28:2b:5c:39:f1:a4:22:d7:e6:c2:ac:f5:b5:db:
                    d8:45:79:a2:ec:1a:f3:19:8a:8a:96:fe:e0:a0:de:
                    ce:a5:3c:18:db:ff:ac:04:d0:4f:a0:e9:7f:82:2a:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:5F:61:53:1A:8C:CE:D8:01:C9:FD:2A:E3:D9:41:8E:EE:31:38
            X509v3 Authority Key Identifier:
                keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:12:bf:c5:b7:69:5f:b8:54:9c:fd:bf:89:32:9e:34:c3:
         ee:cc:a5:45:0a:5c:9e:98:ea:58:69:d1:81:75:43:63:07:c0:
         7f:a1:38:1a:08:5b:c6:42:8f:3a:2c:43:03:79:93:2a:b7:75:
         5d:75:2b:9a:67:75:f1:a9:b6:a8:a2:e0:d8:62:d4:94:f8:9a:
         9f:60:cf:b6:b0:d4:c8:e9:5b:d8:81:9c:27:89:b1:78:cd:c6:
         bc:00:04:d9:a8:56:2b:49:f4:29:0e:19:bc:87:7f:55:50:a1:
         89:60:91:78:47:2e:27:8e:69:b8:bf:11:c9:91:42:37:90:23:
         07:32:26:2e:34:20:70:cd:82:e1:4c:40:49:63:2a:af:00:3a:
         63:c1:09:42:62:db:cc:18:97:cd:92:3f:64:b1:40:5e:f9:8f:
         ab:f9:9f:67:61:c9:74:21:df:c0:4f:d8:b5:c9:86:78:2f:48:
         0d:93:3c:e5:68:a0:1c:0b:16:ac:5c:24:41:1e:d8:42:80:e1:
         3b:19:41:a3:b3:4f:73:82:d6:17:ff:35:34:6d:ed:df:68:09:
         97:aa:b1:da:7c:f4:a1:7a:19:eb:f8:9d:4c:9e:63:35:b7:ec:
         93:87:73:4e:8a:68:4f:37:e2:73:a6:74:b8:06:8e:56:46:0d:
         19:ac:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:58:50 2025 by rpki-client