This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          +SRdn/1Sd6NZ03WmOplUM1xRewH4gubC7lIxlTBQ/UI=
Subject key identifier:   E1:FB:4C:50:3C:7A:4E:C7:99:F9:E6:95:21:C4:66:AE:97:09:C9:8D
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       019AF276777349380167ED357C9E3694DEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 07:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:41 +0000
Files and hashes:         1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
                          2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
                          3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: 6wPb8yjV4zd1MTZzc/m2LQYshxFf8r60/Sfehuz4BEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:77:73:49:38:01:67:ed:35:7c:9e:36:94:de:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Dec  6 07:00:41 2025 GMT
            Not After : Dec  7 07:00:41 2025 GMT
        Subject: CN=e1fb4c503c7a4ec799f9e69521c466ae9709c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:3a:47:35:8f:f4:03:69:e9:70:a7:b2:a2:
                    3c:1b:80:8c:28:28:8c:93:61:0d:96:67:2e:2b:fa:
                    7f:91:4a:f8:25:8d:79:ab:26:f2:4e:26:52:c0:62:
                    0c:21:f7:6f:9a:0a:c4:d6:e6:57:d1:71:08:31:66:
                    32:c9:e5:a1:f0:2b:06:46:d6:92:60:9d:5d:03:9b:
                    c2:22:ff:86:81:db:c5:28:66:88:71:8b:54:6a:94:
                    14:06:4c:36:9a:c1:2e:93:80:11:08:cd:85:e3:2a:
                    f6:4f:50:c1:06:99:79:a4:c9:7e:47:52:43:1a:e1:
                    e6:d8:38:a8:88:20:b9:b3:2c:05:73:0c:ae:a6:5d:
                    75:83:0d:8c:f5:88:d8:c5:d1:92:06:18:a8:d6:70:
                    68:d1:5a:a1:06:ad:ad:b7:47:87:57:43:00:c9:72:
                    3e:84:a9:70:b4:76:b8:66:cb:1d:8e:fd:0a:64:70:
                    3a:b2:9b:c6:7c:ab:a9:d4:4c:d0:75:4d:ab:cb:b3:
                    60:3a:10:4a:8d:30:e4:50:3a:4c:30:58:22:ed:ad:
                    52:0c:76:c3:29:17:03:1b:95:e9:31:67:f9:b3:56:
                    7b:3e:24:cd:f9:00:8f:d5:e0:37:be:27:20:36:a1:
                    a4:ee:81:ad:08:b7:68:c9:07:43:76:3b:36:e3:7f:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:4C:50:3C:7A:4E:C7:99:F9:E6:95:21:C4:66:AE:97:09:C9:8D
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:6d:00:88:86:b7:06:ca:2d:82:54:d9:4d:bb:59:60:1a:
         c4:e5:2c:72:d3:a1:5b:88:c0:11:1a:5e:11:94:b8:b3:e6:7a:
         8b:3d:e8:65:00:4c:3c:4d:6e:29:56:03:d7:35:4f:95:a4:8d:
         a0:40:c6:b0:e4:cd:8b:15:80:d6:d5:a7:86:24:44:ba:09:77:
         e1:4a:65:d5:d9:63:7c:eb:9a:4f:3c:e3:81:13:26:a5:64:ec:
         0c:69:3f:9e:42:12:a9:7d:6e:f8:86:0d:b2:6f:2b:25:9f:4c:
         d6:35:61:00:ed:ab:b3:f5:e7:fa:08:ed:f7:17:6c:f5:d1:75:
         d4:ff:f0:49:d5:b4:6a:40:72:3e:d8:7a:70:8d:8a:c3:70:69:
         42:42:fb:a8:14:fb:16:b4:c1:15:d7:65:ce:53:13:5f:13:9c:
         0d:c7:8d:bb:69:09:8d:8b:82:bd:0d:7f:1d:44:e3:c7:c9:9f:
         4b:44:e7:25:c9:99:fb:b6:4c:e7:93:d0:2e:3d:9a:78:07:94:
         4b:85:c0:9d:2d:3d:04:63:42:b4:15:a0:0a:bf:b1:8e:fa:b0:
         36:6d:7e:64:db:4b:2e:d8:0a:c6:a6:75:e5:7c:83:73:89:f9:
         c3:36:75:b7:b5:5f:27:1b:eb:ca:af:85:54:32:e8:7d:a7:3b:
         f4:86:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:30:28 2025 by rpki-client