This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File:                     sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier:          t/ywQmkLaP2dOvmdtLu01zz2Yrb0TT/Yi5gwTXfOn8Q=
Subject key identifier:   57:AF:D9:4A:F7:D7:8D:89:1D:A6:E3:E3:AA:87:F8:28:62:D9:A1:1B
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer:       /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial:       019AF208E65081D8E83637159344C97297E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 05:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:00 +0000
Files and hashes:         1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
                          2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
                          3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: nxaWcD5UvvG44nLbT1qi4nr2fL5ixYm0s2zEoMfOQ8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:e6:50:81:d8:e8:36:37:15:93:44:c9:72:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
        Validity
            Not Before: Dec  6 05:01:00 2025 GMT
            Not After : Dec  7 05:01:00 2025 GMT
        Subject: CN=57afd94af7d78d891da6e3e3aa87f82862d9a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:87:d3:e4:b7:ca:30:8b:8c:ce:04:f1:7c:
                    69:2c:a2:ef:b5:32:51:87:14:2b:31:97:83:35:0d:
                    57:de:d6:54:d2:07:21:2f:ff:3e:6c:88:f0:e6:2e:
                    6f:0d:f8:d2:88:6c:24:f7:9c:b6:2f:42:bd:2c:4a:
                    3b:ca:bb:76:d8:d3:4c:96:25:f9:dc:c1:71:4c:91:
                    75:59:63:9b:3b:61:ad:a4:72:47:94:5c:b0:2a:21:
                    67:e0:80:31:4e:8b:22:eb:d7:d2:cc:60:16:4f:cd:
                    6e:5c:c8:60:fa:01:49:8b:b0:ae:05:0b:b6:69:a4:
                    ae:17:d4:b9:4c:65:a7:ab:e0:a3:92:6f:d5:3e:c1:
                    e3:e4:b2:8f:9c:a3:86:60:3b:96:8a:eb:c3:ef:1c:
                    cd:bb:1b:cd:ee:ee:e4:4e:d0:a9:5c:b5:6d:76:59:
                    b6:56:1b:99:fa:dc:a9:76:ba:57:88:db:46:5e:ad:
                    36:f3:7d:e1:31:a7:01:c0:18:4a:3c:c1:a5:60:a3:
                    72:47:4f:72:86:83:bc:26:2d:3d:71:a0:f6:94:d3:
                    76:06:22:66:50:ee:f2:a9:73:88:18:5d:87:12:2c:
                    ff:6a:ea:61:ff:95:26:6e:3e:97:a5:55:fb:68:4b:
                    37:95:ba:dc:79:be:75:01:38:5c:b8:6b:49:36:39:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:D9:4A:F7:D7:8D:89:1D:A6:E3:E3:AA:87:F8:28:62:D9:A1:1B
            X509v3 Authority Key Identifier:
                keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:a3:ac:14:a9:1b:d2:fa:bd:6d:d4:42:70:f8:b8:75:f8:
         ef:a3:07:97:e6:e1:cd:c6:ff:1a:18:d7:91:98:f3:c3:cb:71:
         45:c1:4f:3f:99:55:86:65:8f:39:98:e7:27:da:d4:0e:bc:b0:
         2d:9b:ba:52:c6:fb:39:5c:54:8e:48:03:fc:59:c8:0e:d1:5c:
         83:da:4c:af:3f:aa:7b:8f:46:68:a1:03:a2:90:ff:7a:71:5c:
         f7:89:e3:3a:e0:d3:66:d6:68:3e:99:b7:46:ab:74:05:c9:1a:
         e2:e5:e6:df:e6:b9:32:09:cd:a3:0d:e2:7a:96:29:62:21:a3:
         74:70:4d:22:8d:1d:e0:3e:71:58:a6:67:f4:d3:35:c5:50:be:
         d7:c6:12:1e:f0:6d:6c:5c:2b:d5:35:11:a8:48:c2:34:38:37:
         54:18:15:8c:f3:f0:37:a9:67:87:80:de:7e:01:04:b6:25:c6:
         ba:af:e5:fe:26:10:27:f3:13:0d:44:af:5b:2a:c8:23:94:7c:
         3d:88:30:2f:a3:5d:3c:bf:96:81:29:d9:50:47:5e:50:d0:d4:
         ed:60:8a:98:42:29:5e:4c:44:0b:b0:3d:86:3e:dd:b5:06:f2:
         f6:d6:6a:d1:30:14:3d:05:68:d4:0b:42:17:b0:2a:c0:61:76:
         21:26:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:46:08 2025 by rpki-client