This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File:                     564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier:          4Z+M54EzzhBINFTtQfjnjFRyCNz9nvrZZ3WZ7ap9rK4=
Subject key identifier:   41:10:D8:56:90:14:A3:08:6E:27:37:13:6D:39:BA:32:47:14:37:62
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer:       /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial:       019AF2768857481806D338CACFEDD9558A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 07:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:45 +0000
Files and hashes:         1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: XvOr3Mnnrz5aWD8AAFnU7Y9Bx9JYqvUDe0/cv6/IzzY=)
                          2: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (hash: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:88:57:48:18:06:d3:38:ca:cf:ed:d9:55:8a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Validity
            Not Before: Dec  6 07:00:45 2025 GMT
            Not After : Dec  7 07:00:45 2025 GMT
        Subject: CN=4110d8569014a3086e2737136d39ba3247143762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:62:71:d1:a4:16:c5:61:c8:db:64:bf:d2:
                    01:ab:67:bf:17:76:e1:dd:2b:3f:94:dd:3a:61:59:
                    a2:b5:6a:65:0c:fc:19:b5:14:4b:bb:fa:de:ab:86:
                    5e:68:f0:79:53:ff:b2:8f:d0:ba:38:6c:2d:4f:ca:
                    c3:51:7a:5a:41:46:4a:70:3b:dc:03:50:78:0f:11:
                    4f:8b:6b:53:7f:8d:9e:f5:2e:a5:64:a6:f7:68:5b:
                    3f:cb:01:7f:41:7f:be:f9:30:0e:2a:8f:bb:b9:53:
                    2c:e3:65:2d:2d:21:3b:4c:92:56:2a:32:92:f4:fb:
                    6a:e3:8f:a3:91:74:ec:81:dd:1e:53:4d:80:41:f7:
                    ee:0f:b9:2f:35:19:a2:24:27:6c:19:16:a3:30:06:
                    d1:ab:b6:89:14:bc:d1:52:93:87:c9:a8:91:66:15:
                    68:e7:2e:d5:f3:e6:a7:30:2b:c9:e9:28:70:10:f4:
                    fc:33:74:91:59:61:d9:ca:6b:3b:45:c2:a4:ae:f8:
                    65:5f:2a:15:24:ad:d6:f5:f7:37:f2:7c:86:c0:90:
                    2b:51:82:fd:0b:9f:65:84:0f:d8:43:6d:d1:dc:ae:
                    5d:be:05:45:df:3d:e6:11:e6:72:af:21:82:eb:1c:
                    63:94:d0:5a:d8:e1:43:ce:01:61:ba:d8:87:60:54:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:D8:56:90:14:A3:08:6E:27:37:13:6D:39:BA:32:47:14:37:62
            X509v3 Authority Key Identifier:
                keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:bc:3a:92:13:f1:8a:50:f2:1a:22:4b:e2:15:65:aa:98:
         05:08:a0:a7:e4:65:bd:00:c9:ff:a0:c0:d4:86:3a:75:2e:63:
         cf:b6:f6:fc:ef:3e:39:ca:eb:d8:90:86:09:c0:ef:57:f9:16:
         f7:d9:69:e6:d8:a0:6b:9f:e1:81:30:8f:9a:f5:90:a4:13:5d:
         12:de:4a:d5:d4:3d:b2:a9:b7:87:5f:39:4c:89:ab:89:7d:b7:
         88:eb:bd:b0:8b:35:7f:e4:21:c7:83:49:2d:e8:a7:53:a9:88:
         c2:4a:50:b6:c1:b6:2b:3f:6c:87:89:11:4c:91:0d:65:8e:57:
         8f:cf:15:13:9b:c0:81:2d:a7:39:06:fa:61:38:3a:68:2e:9f:
         26:38:37:35:e7:77:19:68:99:74:08:5b:e6:84:ca:99:b8:5a:
         ee:10:dc:15:c1:da:e6:29:2b:4b:bb:b4:fd:41:19:f5:c0:89:
         11:56:74:57:7a:25:d5:3e:c7:63:6f:8c:dd:1d:c6:c8:70:37:
         b5:4b:45:c8:fc:f3:a9:a8:87:e2:39:17:d6:f3:60:a2:81:ea:
         ed:90:aa:9a:78:37:cc:15:62:f2:a9:b9:47:85:3f:d6:65:81:
         57:f7:d4:74:69:13:0a:be:58:b0:8d:19:d1:8b:9f:6b:b2:68:
         84:e6:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:48:57 2025 by rpki-client