This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier:          iQhiy8YeCXTSj8B1Jr0Ml9QAYYzvYSOs2I9Y66Fymd4=
Subject key identifier:   DD:B8:8A:DD:B8:5C:08:BF:F8:12:22:F5:21:1E:16:F1:A0:06:4D:5E
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer:       /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial:       019AF5775C3A0F819AA654457102FD83BF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 21:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:31 +0000
Files and hashes:         1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
                          2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: dgHh/Ri0CluV/UkS7SjpteTzGULfT7FUe4sbsOXtIM8=)
                          3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:5c:3a:0f:81:9a:a6:54:45:71:02:fd:83:bf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Validity
            Not Before: Dec  6 21:00:31 2025 GMT
            Not After : Dec  7 21:00:31 2025 GMT
        Subject: CN=ddb88addb85c08bff81222f5211e16f1a0064d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:f6:10:b5:7f:36:a7:38:15:c3:24:18:8a:
                    8f:ba:5b:a5:be:65:57:f4:86:b1:77:c2:18:39:8a:
                    1f:79:eb:aa:d9:38:6e:9b:6e:9b:c9:69:61:30:f6:
                    ad:c3:1d:bf:1b:3e:ef:9c:5b:ea:c3:85:d2:c3:d6:
                    32:58:7e:51:07:56:04:d1:9d:dc:0b:80:4d:77:81:
                    8b:b6:1a:c4:ee:ce:e3:2c:28:7d:17:c7:fc:0c:79:
                    81:29:ae:e3:e0:a5:55:2e:cd:bb:63:85:26:83:06:
                    e7:07:c5:e3:71:38:ec:10:6c:59:a7:26:a3:77:06:
                    fb:b9:d1:b7:ff:22:11:8b:bf:3c:90:9c:71:07:11:
                    a0:24:25:1d:e7:6c:b7:c1:f9:05:68:37:be:73:ea:
                    ed:83:88:85:cb:98:17:e7:0f:e4:99:bc:1b:5e:1c:
                    67:70:24:94:ce:7c:68:39:bd:22:d6:99:51:f0:0f:
                    f4:1b:0f:8b:7c:9f:cf:9d:e7:36:93:97:c2:2e:bc:
                    52:95:f4:2e:d2:f9:31:f0:ca:42:80:c5:0d:96:95:
                    3c:53:26:27:38:17:63:50:01:b9:b2:09:60:8f:c0:
                    fe:98:0e:24:a2:06:d0:50:55:8f:ed:fc:18:31:3b:
                    5f:86:27:0b:bb:6d:3f:d2:07:26:03:4c:f6:ec:cc:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B8:8A:DD:B8:5C:08:BF:F8:12:22:F5:21:1E:16:F1:A0:06:4D:5E
            X509v3 Authority Key Identifier:
                keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:20:6b:74:71:6b:02:51:3f:5e:01:80:b1:05:46:c6:e4:14:
         79:dc:53:dd:bc:f7:83:9c:03:7a:ce:c9:f9:c4:56:97:4a:d7:
         6e:9a:74:61:c7:1f:3d:8b:32:56:f8:d5:be:88:f1:06:c2:4f:
         8b:f5:bf:40:ac:da:06:20:e9:b5:41:6c:e1:b0:00:4e:be:57:
         cf:04:18:e6:13:0d:e1:35:34:3e:53:6e:cc:d8:a7:e3:fe:21:
         d5:e9:90:17:11:44:46:3d:86:5c:70:36:b2:ca:90:66:67:b2:
         63:c1:36:6b:2a:2e:aa:94:53:85:ad:ae:e1:d9:83:91:15:2a:
         e5:54:4e:45:73:61:5a:a9:9a:a3:6b:ba:59:db:d9:1e:db:38:
         0b:68:76:ce:c9:0f:f9:96:89:a1:7a:3a:9f:0d:96:f9:62:0c:
         74:d6:32:d9:f3:2b:ce:22:69:13:be:55:7a:bb:76:d3:d2:50:
         b5:a2:53:0a:48:7d:f1:23:5e:06:5a:4a:ef:2b:d3:c4:f0:e7:
         6e:0c:c1:5e:34:ab:e8:da:48:a3:59:2b:96:ad:58:bb:4b:5f:
         14:e7:27:d9:b8:14:df:8f:98:db:10:3f:50:20:b5:da:93:51:
         f2:f0:74:54:17:3f:e4:cc:61:e9:07:b6:b7:4a:c0:90:ff:54:
         1b:26:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:35:16 2025 by rpki-client