This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File:                     crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier:          PsR+vNTAcwaxG3ZItXUgbmqwBZa9k1JetGowXnZ1zFo=
Subject key identifier:   6F:E8:98:2F:2C:1C:EA:69:F1:26:65:55:06:7C:B6:7F:C1:CC:2F:C6
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer:       /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial:       019B304342D3D17784AACEC4C87DD0853285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number:          0892
Signing time:             Thu 18 Dec 2025 07:01:12 +0000
Manifest this update:     Thu 18 Dec 2025 07:01:12 +0000
Manifest next update:     Fri 19 Dec 2025 07:01:12 +0000
Files and hashes:         1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: bXJUEYqe4581BajbaL8MaICJzAAI41gNTRYBZX23kmo=)
                          2: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=)
                          3: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
                          4: l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa (hash: BmB8JatQfp2mQ4vWr7Bgl6YeJ1OakzxtLlN1iSUDIbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:43:42:d3:d1:77:84:aa:ce:c4:c8:7d:d0:85:32:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
        Validity
            Not Before: Dec 18 07:01:12 2025 GMT
            Not After : Dec 19 07:01:12 2025 GMT
        Subject: CN=6fe8982f2c1cea69f1266555067cb67fc1cc2fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:6b:52:19:ca:b7:72:bb:4b:97:20:1e:21:
                    fc:17:31:96:04:bc:6e:b7:aa:74:7a:8a:31:cf:8a:
                    67:74:09:cd:71:5c:1f:b4:25:9b:76:67:a1:c8:ea:
                    53:e8:d1:8a:4e:15:46:ad:5c:61:8f:2f:8f:25:48:
                    6e:52:25:d3:95:9b:f2:10:a4:61:af:1c:f3:19:af:
                    f4:5b:ed:85:03:ac:99:aa:e0:7c:3e:27:09:cc:d4:
                    b6:2d:c7:6c:9f:b8:67:0e:f5:21:5d:4a:09:d7:44:
                    2f:29:c2:9c:48:a8:54:48:ea:ec:4e:39:72:08:b3:
                    cc:4c:47:85:4e:8f:43:cb:8d:e0:c1:68:c0:36:ef:
                    ed:c1:49:6e:28:65:e4:39:8b:2b:98:53:dd:7a:28:
                    73:00:77:1e:0e:a7:e2:5c:4c:99:5f:8f:9b:65:5d:
                    d5:75:8d:f1:d0:b9:8d:7c:13:3c:7f:28:62:04:37:
                    4c:cd:68:46:a5:14:cc:e0:78:74:8b:ae:93:6f:37:
                    10:7a:2f:d9:6f:71:62:eb:4d:88:7e:76:6b:54:bc:
                    3e:41:a9:f8:ba:b7:87:13:56:f8:d0:f4:07:03:3b:
                    81:ae:89:22:ae:51:29:63:5b:6e:7a:6c:75:99:bd:
                    3c:73:45:fa:d2:31:1b:21:f4:21:4f:24:31:80:28:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:98:2F:2C:1C:EA:69:F1:26:65:55:06:7C:B6:7F:C1:CC:2F:C6
            X509v3 Authority Key Identifier:
                keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:64:3d:30:4a:02:b7:7b:ca:53:be:22:9a:7e:8e:62:a8:d1:
         01:eb:68:7f:c2:53:69:97:cb:fc:92:54:0a:19:6d:dc:04:6f:
         95:77:5a:44:b9:e5:90:0f:ff:76:af:1a:41:95:10:df:86:a5:
         c3:af:19:0b:33:53:70:a4:91:bc:dd:dc:47:9b:42:a0:99:0d:
         29:0c:7c:fc:3a:b0:c5:b8:b0:fd:47:53:31:21:36:da:2d:1b:
         25:4a:78:aa:23:1b:57:2c:9b:a4:09:01:bf:ef:28:f6:09:90:
         23:c6:a9:d5:b4:0b:35:25:a2:33:c0:6e:6e:9d:ea:a2:c5:06:
         20:be:6a:df:c5:88:08:6d:30:1f:5c:a1:c7:ef:ba:ad:81:3f:
         cb:07:b3:92:c3:53:33:61:d6:f5:f1:6a:f8:f3:c6:f7:3e:e4:
         ff:ee:a1:29:9d:cc:93:57:5d:5d:4c:61:ef:64:64:70:c3:01:
         64:1c:ad:33:f1:6a:81:62:b0:83:a5:f6:02:b9:fb:e4:91:ab:
         58:03:ef:d2:5f:e2:3a:16:f3:50:ec:d8:23:74:c5:75:23:44:
         2c:6d:f0:74:40:2d:04:ae:03:24:53:4e:0c:9b:d5:c4:7b:54:
         8e:2c:cd:8e:40:b6:1d:23:a2:e3:a6:b2:c0:40:bb:70:ab:c5:
         f4:93:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:21:41 2025 by rpki-client