This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          Cy6uHhAqX6UDoCgsvRTP/6S8f6xiGEtyZ/ecXwbGXJI=
Subject key identifier:   E8:05:87:73:EF:C5:5A:6F:4F:EC:43:C6:0E:80:A9:5E:EE:61:DF:8C
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       019AF12E3618F7DE2876B1469C5650B8DC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:02:08 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:08 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:08 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: XoM5Pc+Ev+tYtYamcrtFT1HFTZEOkDwEi8ZzrJhWfs4=)
                          2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:36:18:f7:de:28:76:b1:46:9c:56:50:b8:dc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Dec  6 01:02:08 2025 GMT
            Not After : Dec  7 01:02:08 2025 GMT
        Subject: CN=e8058773efc55a6f4fec43c60e80a95eee61df8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:5d:9b:2b:94:0c:7d:ae:5e:18:b5:0c:12:
                    f1:1d:b2:10:df:1c:67:a4:ff:b3:f7:35:b1:d4:d0:
                    eb:eb:4f:57:7f:d6:da:3a:09:47:3e:6b:e0:8a:81:
                    4f:d9:dc:c6:c9:5b:bb:a6:96:f8:f7:17:c3:c7:7e:
                    f2:af:88:18:3d:1e:90:55:d2:66:7d:c9:0f:20:b6:
                    77:2a:7b:c5:68:1c:85:00:2b:eb:f4:69:9e:76:3c:
                    91:c5:e4:af:35:2b:c7:7a:ae:33:03:7c:50:ee:b4:
                    76:69:20:6d:ce:66:2b:4f:ee:07:49:e0:43:71:2c:
                    77:49:1b:99:e2:dc:ef:bc:17:4c:8d:bf:38:71:1c:
                    00:77:e3:43:98:d6:52:b9:60:1d:35:97:6d:ce:47:
                    47:04:e4:a2:78:bb:46:01:36:c8:71:0b:11:62:e6:
                    ca:cf:b1:8f:7f:1a:a5:d2:b1:49:c2:49:bc:ad:b7:
                    37:2e:17:07:7a:93:48:35:da:b8:e7:3b:10:ed:25:
                    91:99:d4:8f:97:fc:fb:f2:84:38:22:9b:0c:a3:04:
                    fa:b2:1a:6a:23:7b:77:76:58:f5:28:55:24:fc:6c:
                    f6:e5:eb:38:3c:85:c7:b6:59:01:0d:bf:ba:8e:0b:
                    4b:48:6a:f1:f0:da:0d:eb:b2:48:33:2d:2c:2e:25:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:87:73:EF:C5:5A:6F:4F:EC:43:C6:0E:80:A9:5E:EE:61:DF:8C
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:46:ba:42:ee:c0:74:87:55:4a:fa:59:e0:bd:9e:4e:9b:99:
         6d:48:f0:20:63:e9:fc:75:2b:6a:50:5b:63:01:b4:77:3d:72:
         8c:64:a7:8a:73:c3:6e:44:f8:ca:b3:bd:56:3d:29:ea:0b:92:
         1b:a1:8f:88:3c:4b:d6:40:71:56:9c:a4:94:16:04:cc:7a:88:
         c7:b3:de:64:58:14:e7:20:cd:eb:b0:76:24:86:b3:e9:10:a2:
         90:d1:4e:31:e0:7f:40:89:53:f1:8f:2f:45:68:a6:72:d3:16:
         9d:86:62:5f:1b:c6:84:37:ca:ee:bd:bc:10:a2:d0:c9:3c:8c:
         11:ac:46:dc:9c:0d:70:4b:a9:f6:aa:8f:c0:10:e5:c8:c6:22:
         50:fe:96:20:70:8f:49:ae:f8:93:cc:7d:a3:ff:c1:e5:9f:c8:
         0e:ce:e6:a6:38:25:95:e3:42:d7:50:b7:ee:e0:5b:20:55:9e:
         ee:63:ef:6c:b0:6d:8a:3c:e7:87:59:c5:e7:a0:14:28:6d:15:
         8c:9b:76:56:5b:d6:f6:0b:b0:9f:61:a4:8c:31:28:d6:e0:90:
         f6:b2:77:4c:a1:6b:ab:f7:1b:dd:ef:6c:66:28:4b:b0:99:b8:
         c0:7e:3d:f0:a2:60:fc:de:c2:d2:9a:48:1f:b7:93:89:60:ff:
         57:41:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:13:16 2025 by rpki-client