This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          R05skcpRvMGqI8CPgtM7SHDhiXrvKKnldhOM/F9mieY=
Subject key identifier:   5A:C8:59:BF:28:F9:90:34:BA:D5:BD:E4:C4:C3:9A:E1:F0:DB:05:74
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       019AF31B7B5FCCE73F5BF551669D28D64268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:55 +0000
Files and hashes:         1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
                          2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
                          3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: uDUvrVpbnBWFx4IkhX5lTaAmEvjOTpHXlCZc+ZCB7gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:7b:5f:cc:e7:3f:5b:f5:51:66:9d:28:d6:42:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Dec  6 10:00:55 2025 GMT
            Not After : Dec  7 10:00:55 2025 GMT
        Subject: CN=5ac859bf28f99034bad5bde4c4c39ae1f0db0574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:a7:dd:c2:43:33:ec:ae:a2:bb:77:47:3b:
                    f5:e7:65:d5:f5:5f:ce:95:96:36:75:99:79:14:98:
                    59:83:f7:cf:6b:1b:d7:6c:31:e2:2f:7c:b0:8e:21:
                    41:83:e9:06:d0:00:1d:eb:9a:0a:cb:7b:5d:b3:69:
                    87:0a:80:bf:e9:bd:8b:7e:7f:7c:91:76:41:51:3b:
                    92:25:46:23:fb:1f:ac:d1:60:2e:cd:97:02:65:64:
                    79:1a:34:4c:9b:92:9e:ac:0b:e6:21:fc:c9:db:91:
                    3c:ad:17:8a:20:df:4e:ce:b4:a5:26:5e:6a:c0:93:
                    43:13:ce:36:6f:fb:07:95:b5:df:e4:fc:3f:22:85:
                    ee:9f:4c:60:63:d1:05:94:75:31:98:4d:7c:3e:e1:
                    61:02:4e:9b:37:c4:8e:5c:82:98:b9:b4:2d:7b:45:
                    61:14:55:55:cd:3d:30:01:bc:4e:c5:b2:a9:c9:4c:
                    53:77:ec:f6:a7:4a:6c:45:d2:2a:f6:61:10:28:8f:
                    79:6c:73:37:0e:b9:d7:51:85:04:be:9b:17:28:e4:
                    ff:b5:bd:56:e9:c7:59:a3:44:71:ed:e2:b9:35:dc:
                    77:da:71:9b:c5:cb:71:69:f1:b0:c8:1a:3f:0c:74:
                    96:c0:2f:47:c4:20:f9:fd:75:04:32:f7:50:55:2a:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C8:59:BF:28:F9:90:34:BA:D5:BD:E4:C4:C3:9A:E1:F0:DB:05:74
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:51:e5:e2:ac:6a:98:db:45:cc:85:a1:b9:59:44:e5:ae:
         49:3c:f1:f7:4d:c2:ee:3c:41:76:da:70:a8:2d:48:d1:57:ef:
         a5:04:20:5b:5a:31:e8:d8:36:ce:65:f3:c6:ae:9e:7e:30:ce:
         a0:a9:3e:5a:46:fc:b9:fb:0b:20:65:62:54:77:55:5c:74:25:
         f9:5e:b7:37:1c:09:74:89:bc:81:70:1f:0d:58:e5:07:d8:a2:
         77:ef:8c:50:f6:3d:c6:d0:5a:3e:83:71:87:da:e1:e2:61:85:
         e7:04:73:35:6e:d7:82:82:8d:9d:36:ed:be:10:a7:88:6d:77:
         98:62:6a:9b:64:70:cb:cf:1d:39:e5:34:49:d2:50:7e:b9:ae:
         95:07:e6:e8:8b:d4:07:6a:c8:7e:84:2b:9e:57:8e:f4:d4:0c:
         01:c1:08:28:c9:b1:f9:3e:fc:85:4e:57:09:a8:68:5f:b4:34:
         3e:b3:f2:73:26:2b:e1:2f:57:e1:73:cb:c4:7f:f5:10:59:85:
         7c:60:01:a7:65:41:cb:03:f3:55:b4:0d:7b:53:be:3d:36:f0:
         f8:1a:74:38:76:5a:48:8c:ea:02:b4:ab:c1:5e:a7:ac:d0:a3:
         92:98:b3:8a:ab:37:2c:30:fc:e4:77:9e:ec:9c:2c:65:4e:4d:
         2b:cb:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:47 2025 by rpki-client