This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File:                     76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier:          pgRXUuPV4lwJwhaeI8QVP1T9MASlTdMjTz4/+jHjDMo=
Subject key identifier:   00:A0:F2:BC:4D:C2:E7:17:19:FD:96:05:75:A9:93:E3:DF:32:E4:F6
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       019AF16449654A77146765D60D3D40D89231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number:          106F
Signing time:             Sat 06 Dec 2025 02:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:12 +0000
Files and hashes:         1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: hzAlSZ3uCd16opDKpKBDYBLcN1BWFEjEhpkFgzK7aS0=)
                          2: gJcVJ0djrH5rQDUfK1fCsLicbs0.roa (hash: FiBwswjBHp729mKlojR2ulY+J6meIBspX0VFQpsAgtk=)
                          3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:49:65:4a:77:14:67:65:d6:0d:3d:40:d8:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: Dec  6 02:01:12 2025 GMT
            Not After : Dec  7 02:01:12 2025 GMT
        Subject: CN=00a0f2bc4dc2e71719fd960575a993e3df32e4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:df:38:82:f8:4b:83:c1:03:7d:c5:d7:75:
                    e9:4f:90:c5:6f:a9:b6:cd:b7:6f:71:8c:b6:8f:d6:
                    61:67:af:55:41:bc:5b:00:a7:33:b0:b4:a5:a5:63:
                    43:7c:75:93:4b:8f:8b:e7:34:a2:8b:d4:11:f6:1c:
                    8b:18:cb:42:fd:e2:bc:38:81:19:c8:fe:e6:48:05:
                    33:1f:4f:3e:a0:b1:51:19:40:7d:1e:65:4f:53:4a:
                    0e:c9:02:12:81:4a:02:70:d6:77:a6:d3:01:be:1f:
                    3e:94:b0:d1:b4:59:27:31:2c:37:31:9d:85:ee:f0:
                    d6:77:04:06:c6:e7:22:91:7a:6a:05:47:63:06:6c:
                    9b:08:c5:5e:e5:28:db:e6:bf:9d:cb:94:d5:a4:e9:
                    6e:8a:88:24:02:85:c0:fc:9f:56:a5:69:89:21:01:
                    78:60:f7:46:37:84:22:1c:42:d1:aa:48:08:b5:e8:
                    88:2d:96:1d:72:3f:76:e2:56:25:9a:a4:b0:84:4a:
                    70:86:9b:b2:43:84:f8:6c:b4:bf:ef:e9:b9:1b:a2:
                    a9:2a:00:99:ed:2e:89:31:bd:67:c1:8e:6b:43:36:
                    e2:18:b3:bc:27:be:3d:6a:be:cf:5f:a4:2b:14:36:
                    9b:81:2f:56:3c:5a:51:f2:e9:aa:71:e3:f2:25:70:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:F2:BC:4D:C2:E7:17:19:FD:96:05:75:A9:93:E3:DF:32:E4:F6
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:89:2c:50:e9:9c:ab:7c:47:3a:fc:4a:e1:22:d2:44:52:
         4b:e9:07:50:0f:c8:b1:3f:f1:9e:3f:2e:4f:92:53:e5:6c:24:
         b3:b3:a9:ed:73:0f:50:1c:b6:74:d1:37:68:5e:cc:d8:c8:57:
         ff:65:b8:03:7d:75:e9:cc:0d:cd:8b:87:cd:d1:7f:15:18:ed:
         98:ec:30:33:a6:b0:e2:11:95:39:05:2f:8d:5c:ed:2b:d7:56:
         d9:86:f2:21:1b:14:67:cd:6e:e0:c4:19:47:45:97:d6:a4:48:
         e5:57:f3:16:de:fd:d0:ce:65:12:28:31:55:4f:c4:95:a2:41:
         0d:e7:08:cb:8d:94:88:41:a5:54:85:de:65:0b:48:58:59:d6:
         d2:12:05:a6:86:d7:d6:66:e8:36:68:34:f4:8d:66:bc:98:d1:
         c8:40:74:8e:6d:c6:c0:09:76:1c:5b:f7:ee:8d:28:f3:94:d0:
         d9:e1:cc:cc:f2:db:54:b0:48:d9:8b:a0:ec:8d:f3:19:b2:72:
         63:79:8e:a2:8c:fd:17:27:f4:65:47:4a:22:af:80:77:91:af:
         b6:29:8f:27:6d:70:b4:98:ab:d3:30:bd:80:83:68:ff:73:c5:
         f5:94:8a:20:18:87:99:90:e2:78:b5:37:5c:71:43:5a:fc:6f:
         62:61:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:02 2025 by rpki-client