This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File:                     NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier:          IgruTobkaTVaLVddtJxHqyQUIgvn261N3XwzzBHxnI8=
Subject key identifier:   E9:41:2B:F2:B2:7D:F8:66:11:42:18:90:E9:08:B2:F1:8C:AC:60:DF
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       019AF208C69534F5B0BB7C161F0779473B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 05:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:52 +0000
Files and hashes:         1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
                          2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: 2WqjHQT4hMGnTNgOQr1sHMbcNEe/5sp1kGM0cEf1Rcw=)
                          3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
                          4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c6:95:34:f5:b0:bb:7c:16:1f:07:79:47:3b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Dec  6 05:00:52 2025 GMT
            Not After : Dec  7 05:00:52 2025 GMT
        Subject: CN=e9412bf2b27df86611421890e908b2f18cac60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:23:6f:6a:66:b6:9d:18:db:ad:13:fc:8a:8e:
                    50:3b:5d:92:bd:3e:23:db:85:27:52:e1:0b:90:ee:
                    cd:0c:fe:fa:4b:1b:7d:47:86:60:c0:5a:92:ad:99:
                    8c:d8:7f:d1:1d:09:95:cf:4c:8f:7a:55:98:1f:d7:
                    ae:8b:9b:ad:fa:24:d0:1e:10:3f:3f:da:c3:7f:84:
                    1d:ab:c2:1d:aa:ed:c8:f0:9b:3f:52:46:a8:60:53:
                    f6:c0:3c:11:8b:85:e3:aa:d7:2e:65:cc:47:8c:b9:
                    e7:72:02:7d:e0:08:cd:fc:de:37:76:36:13:ee:4a:
                    3d:70:e9:46:00:92:bb:a7:17:bb:17:b9:20:9c:86:
                    6f:91:9c:b3:b1:24:2e:5b:ea:93:0d:11:15:da:c5:
                    ac:09:62:e0:3c:b6:b6:22:06:aa:6c:7f:82:49:f1:
                    3b:fb:ac:a6:35:88:ad:9c:c4:c5:48:1f:b3:fc:48:
                    6b:e0:16:c5:8c:c0:37:e9:d2:02:13:ee:2f:d3:58:
                    45:fc:2b:f0:47:2a:e4:87:29:80:1c:96:8a:ba:99:
                    04:31:c1:78:ec:12:f7:9d:82:bb:8a:12:a4:10:5e:
                    0a:59:18:ff:98:b0:c8:b9:3a:9e:69:f2:73:a3:7b:
                    d9:d5:fa:68:2e:41:4f:06:8d:dc:3d:c5:6b:26:e2:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:2B:F2:B2:7D:F8:66:11:42:18:90:E9:08:B2:F1:8C:AC:60:DF
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:1d:75:96:9d:99:38:e1:fd:42:aa:e9:43:a1:83:91:fd:
         c3:59:94:af:89:0a:3b:b5:42:4f:c9:cf:4b:b1:a2:e1:e3:6a:
         7a:ed:49:0e:f6:09:71:78:b8:b9:f6:1c:cb:b4:5a:69:50:29:
         1e:1f:2d:39:c6:aa:b9:58:1e:cc:c5:f6:cc:c5:64:c5:7a:a9:
         ae:62:24:19:87:6f:20:24:48:0c:d3:d5:f7:19:7b:2d:ce:18:
         5d:b1:e9:20:91:ce:0c:79:be:4e:a0:09:c4:49:80:f6:ec:d7:
         8b:ef:06:f5:4b:37:a5:04:13:07:b5:b1:19:50:6c:49:ee:54:
         c0:88:92:9f:7d:aa:4f:6c:ab:4c:fc:a5:9e:a7:a8:b0:47:59:
         62:0d:80:b2:f3:1f:e3:03:11:64:dd:8f:5f:07:70:d6:98:57:
         e1:46:0e:e4:c3:a8:41:e4:8d:15:f3:dd:85:59:4c:80:18:09:
         59:a5:5d:83:ff:a7:b9:75:7d:09:62:33:a8:20:71:82:f4:96:
         e2:3e:aa:e8:13:0c:7a:6a:9c:1a:b3:1a:00:f9:eb:ac:45:5f:
         b1:19:c5:1b:8b:fd:12:45:b2:8c:d3:73:4f:55:0b:1d:0b:a0:
         97:38:64:81:8d:30:fc:30:fe:c4:74:3a:e9:e4:8a:8d:0b:d4:
         fd:53:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:15 2025 by rpki-client