This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          x7yjK8sY2tDUmFZ0eTeqW4FcufFnhSDhIdQJIECqy/4=
Subject key identifier:   F8:13:91:8B:5E:B4:4A:BF:09:E9:E5:88:B9:66:5E:85:1E:05:49:30
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       019B2BC16EB614FA1E901A590D082A82AD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 10:00:55 +0000
Manifest this update:     Wed 17 Dec 2025 10:00:55 +0000
Manifest next update:     Thu 18 Dec 2025 10:00:55 +0000
Files and hashes:         1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: UZJjH0ccXbmJVbAkvsZh6NNf2D2MzCACAodV4ZPTpiA=)
                          2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:c1:6e:b6:14:fa:1e:90:1a:59:0d:08:2a:82:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: Dec 17 10:00:55 2025 GMT
            Not After : Dec 18 10:00:55 2025 GMT
        Subject: CN=f813918b5eb44abf09e9e588b9665e851e054930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:2d:c1:89:48:b4:1a:d5:23:0d:b3:23:a6:
                    09:d8:e9:71:a0:b5:bb:2c:e3:2d:83:1f:03:37:d1:
                    c1:53:3b:82:ac:bf:b9:16:ce:41:e6:fb:65:a9:70:
                    cc:fc:2e:27:ed:63:82:14:39:13:b0:10:82:a1:4f:
                    fa:53:fe:e4:83:03:e8:ab:d2:9f:fa:dc:75:f0:f3:
                    98:b3:91:f8:41:3e:31:d9:bc:29:eb:9a:7a:58:b8:
                    e4:b4:f5:65:41:a5:e4:c2:7d:53:92:e8:9e:78:71:
                    29:a9:12:23:0f:26:73:a0:5f:c2:96:36:ff:44:ac:
                    3d:95:ca:dc:f2:fe:cb:00:a0:a3:08:c1:ce:d5:f8:
                    0f:52:5f:8e:3b:fb:6b:a7:e0:bf:80:c7:c5:5d:23:
                    c1:ca:fb:a9:13:fe:2d:00:6c:ef:e6:6b:e9:ca:a5:
                    82:06:c1:d1:df:36:be:65:66:01:29:ad:24:24:ec:
                    0d:12:05:2f:d3:0c:b6:8a:5a:43:18:ca:2f:ff:a3:
                    de:e2:f1:fc:2d:a1:95:c2:8b:fa:88:97:39:a8:90:
                    0f:b2:5f:aa:e5:21:bf:d7:34:e7:84:fb:79:97:1a:
                    23:62:20:63:c9:4f:64:7f:46:40:90:b6:69:bb:4d:
                    26:f5:b4:1c:37:15:f5:69:66:7d:4a:24:70:24:27:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:91:8B:5E:B4:4A:BF:09:E9:E5:88:B9:66:5E:85:1E:05:49:30
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:0b:8c:01:f8:bd:87:04:4e:7e:89:5f:d6:40:c4:69:08:
         f0:f4:56:8a:1f:0e:7b:e7:a5:cb:85:29:64:1a:75:0f:33:1a:
         c0:17:c5:09:8f:34:84:91:fb:e0:37:de:d0:d7:95:9e:9f:4d:
         04:40:52:67:97:51:99:05:06:c8:9a:39:e9:38:74:f9:cd:80:
         40:0a:34:ea:95:35:39:4f:bb:d3:ee:61:5d:5b:d5:e7:5c:ee:
         bf:92:c6:c1:cf:b7:5e:95:09:d8:e8:5f:56:06:62:29:13:ae:
         f2:05:5d:23:c3:3d:31:f9:96:d2:76:2a:41:37:79:48:39:49:
         eb:dc:c2:45:3e:da:57:dc:1b:35:42:67:b0:b9:16:15:fa:b6:
         b8:c7:fe:65:fb:21:fb:e5:cb:1d:96:d7:8a:3a:08:18:71:5b:
         1a:0f:66:5b:f7:0e:28:e0:68:2a:92:22:e9:77:d2:15:04:83:
         fb:27:2c:ff:9e:28:e6:fa:a0:ed:c1:59:a9:e9:ac:3e:4e:30:
         e9:92:86:b4:e3:1c:11:fc:d5:28:65:dd:6f:79:97:08:01:9f:
         b0:b7:4e:3c:6e:f4:6a:b6:9b:ef:f8:58:dc:f0:ec:b2:c2:57:
         61:d0:8f:64:d0:54:0e:04:37:cb:86:68:10:d3:47:c4:b5:3e:
         b6:1c:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:41:36 2025 by rpki-client