This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File:                     Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier:          znJB3K+qV5Zt/Cx+lb87eWYAT48x2Z+kah9NOWn8E/M=
Subject key identifier:   46:2B:EC:FC:EE:CC:7D:13:0D:AF:F1:6C:A7:EB:C4:C0:9D:69:20:84
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer:       /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial:       019AF209189139A81755BD6444651FD21280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number:          1520
Signing time:             Sat 06 Dec 2025 05:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:13 +0000
Files and hashes:         1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
                          2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: S9n36GBg3wGJ24ZVZ/JxCNC3JQ07VRRIlsi54njOUpo=)
                          3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:18:91:39:a8:17:55:bd:64:44:65:1f:d2:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
        Validity
            Not Before: Dec  6 05:01:13 2025 GMT
            Not After : Dec  7 05:01:13 2025 GMT
        Subject: CN=462becfceecc7d130daff16ca7ebc4c09d692084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:c5:53:32:c8:93:cc:6c:28:76:72:89:9b:
                    54:d4:8e:b5:b5:2b:64:7b:2f:4b:4f:ce:80:a9:73:
                    db:f1:51:81:49:07:42:73:3a:f1:bd:7c:06:3f:55:
                    db:de:58:e3:d9:97:6f:49:e7:66:2c:67:a0:64:7a:
                    c9:36:40:c4:74:8b:6a:67:fe:d7:3f:ac:bb:81:a3:
                    55:51:9f:89:90:ed:4d:78:50:f7:5d:ac:fa:42:1b:
                    c8:0e:6e:31:15:8c:bd:a6:1f:f3:89:13:99:dd:2a:
                    80:a0:e7:b9:f6:b6:e3:8c:f6:c9:9a:0c:f0:2b:76:
                    59:c7:d5:fd:af:69:c1:b2:c2:b5:54:93:24:36:95:
                    05:98:da:2a:21:51:73:9e:03:54:6c:70:0c:8c:c9:
                    e5:22:9b:87:02:7c:77:6b:48:e7:ab:73:f2:aa:9e:
                    ab:8b:21:3e:0d:3b:21:bf:4f:f5:c0:2c:06:e8:b8:
                    f4:7e:9d:d2:06:f6:15:4d:49:f1:9b:7c:13:7c:f5:
                    31:bd:a4:d3:65:55:15:5e:96:87:fb:27:27:dc:ea:
                    0b:b5:99:40:89:b9:77:64:41:a4:76:cb:63:ec:a7:
                    2c:fe:40:c2:e7:cf:ba:5b:51:91:4d:67:dc:b2:7b:
                    fa:00:eb:2e:9b:1c:61:26:f8:9d:bc:ec:62:54:10:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:EC:FC:EE:CC:7D:13:0D:AF:F1:6C:A7:EB:C4:C0:9D:69:20:84
            X509v3 Authority Key Identifier:
                keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:d6:c7:de:8d:17:84:89:ee:cb:c2:5e:fa:34:e5:57:83:
         cb:b4:26:ee:18:be:e7:79:0a:5b:2b:b1:ce:2b:c1:fc:65:ef:
         f5:05:45:29:62:dc:67:5b:7d:db:7d:ca:e9:2c:61:e6:1d:d3:
         96:79:69:05:e5:06:e1:b7:96:0d:9c:21:2d:9c:6e:71:ba:e8:
         d7:eb:6a:79:59:88:61:f3:73:bd:4b:1b:25:15:91:55:b2:c1:
         f8:62:26:ec:ee:52:ef:71:69:00:f4:b9:70:0b:7b:82:c0:08:
         b7:bd:eb:d0:7f:64:48:c4:c0:fb:5d:b6:68:67:05:ee:2f:bd:
         57:e5:1b:57:65:40:0a:62:6c:2d:1a:98:ab:bd:fb:c7:fe:ba:
         ee:3c:50:6e:f9:70:9f:c7:a5:62:4c:a9:37:7f:f0:39:e9:56:
         9d:17:0e:3e:58:6c:05:64:eb:2d:c5:7d:e2:9d:35:b9:3d:93:
         41:30:9c:98:00:17:09:de:de:32:37:20:5f:d8:41:14:e2:37:
         65:5d:ea:c7:33:5f:ce:1e:49:34:d0:d5:11:3f:e9:44:c5:0a:
         fc:94:b5:9f:72:4e:66:06:76:de:8a:86:03:f7:8b:66:4a:ea:
         15:6c:ff:36:7f:a0:c3:63:28:d3:e3:3f:24:6b:4f:7b:69:5e:
         4f:8e:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:03:35 2025 by rpki-client