This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          sr0Zuzwvy9OicKK+sp2ZCRiolJl8iBLGsgfABddUjAY=
Subject key identifier:   75:8C:79:D5:24:C4:1A:5A:E2:A0:FC:C4:22:F1:19:65:16:61:FD:5D
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019AF12D3258177BE5C17071B3C085B56096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:02 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: iHLdy3w8bALShxn68Nj4AJtpsKVI8d1UVqLf/uN32jM=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:32:58:17:7b:e5:c1:70:71:b3:c0:85:b5:60:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Dec  6 01:01:02 2025 GMT
            Not After : Dec  7 01:01:02 2025 GMT
        Subject: CN=758c79d524c41a5ae2a0fcc422f119651661fd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:6a:b0:e5:b9:ee:d3:f7:50:32:c5:8f:a8:
                    08:c9:a4:57:ad:c6:33:09:15:1a:bd:b0:4d:d9:93:
                    8b:04:cb:70:a6:ba:8f:a8:25:56:05:97:0a:b2:48:
                    c9:b1:33:e9:cf:a1:ba:d3:49:27:c1:6b:48:07:3f:
                    52:a1:6a:2d:dc:49:4e:6f:d0:44:34:85:e1:19:b7:
                    ec:e8:4f:ab:43:f6:45:7c:47:c6:65:67:d2:fe:57:
                    29:dc:6c:b9:8e:4f:80:48:7a:f6:c1:b9:9d:f5:d8:
                    01:1a:29:6a:e9:6c:95:41:72:cb:fe:7b:84:a1:0c:
                    f1:af:ec:25:02:11:1d:ad:6f:ba:66:ec:a2:9f:1a:
                    c1:e9:c2:a1:0e:07:a9:be:ef:6c:5d:d0:db:7a:3c:
                    18:5e:63:2a:6a:34:3a:66:8f:79:dd:52:03:51:1d:
                    ef:2b:91:77:e1:66:40:c2:be:a8:7c:7d:56:6c:a2:
                    ec:1b:43:d0:4a:3f:0d:29:ff:ca:bd:7e:c7:a8:8b:
                    f7:76:dc:9f:04:65:d1:aa:65:07:49:00:1f:95:f7:
                    8b:a2:53:e9:37:cd:75:be:19:12:46:f4:1f:31:45:
                    d5:72:12:7d:28:7e:b9:b6:c0:97:a0:44:79:73:46:
                    6f:ce:c8:ac:6a:88:1e:0f:e7:5b:b9:52:9e:c0:bf:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:79:D5:24:C4:1A:5A:E2:A0:FC:C4:22:F1:19:65:16:61:FD:5D
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:04:7c:c9:8a:6a:14:37:13:53:d9:b4:2b:54:7c:f5:78:16:
         1d:f0:dc:16:6e:d2:67:25:4c:66:22:98:e4:c6:c6:12:77:3e:
         ad:21:90:a7:37:5d:13:14:51:06:9b:38:a5:17:46:fb:91:a3:
         76:a9:de:02:fa:1f:2b:d5:db:16:8c:23:d2:eb:76:6b:36:62:
         00:8e:ab:1c:c8:14:97:b2:73:21:ba:66:4b:b7:68:1c:b6:24:
         53:b8:10:ab:02:b5:44:05:f5:92:f5:e5:06:dc:88:45:c0:91:
         db:65:25:78:da:ee:24:90:ae:80:38:41:a3:6e:c2:e7:19:51:
         35:97:d5:45:e6:d9:6a:2f:b4:08:7c:e2:a6:5e:e9:8f:a2:5e:
         53:a0:89:7b:05:8a:e5:c7:96:74:c2:3b:7e:13:a9:68:e3:0c:
         f1:76:50:ca:dc:7c:ca:60:a4:58:01:e5:47:35:0d:36:b5:c8:
         7b:95:1e:93:48:e5:67:59:f0:e8:29:74:8e:4c:7b:fd:13:63:
         0a:7a:c8:b5:09:d5:20:85:5a:72:57:33:15:9f:3a:cc:13:83:
         b0:7d:e4:82:c1:29:92:db:0c:0b:c7:d1:6c:6a:eb:10:00:9e:
         fb:cc:57:24:97:9c:81:13:0b:c2:cb:5f:43:0b:a4:ee:7b:8c:
         db:80:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:07 2025 by rpki-client