This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File:                     DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier:          zp9iD6XBvroLTYDTla8vZhSRoYrFaPy306gzLzGQXwA=
Subject key identifier:   EA:64:8D:3D:45:0D:5A:99:56:7C:8B:11:24:E2:51:06:99:E6:E5:FA
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer:       /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial:       019AF088A62B4B08918D87A7BCE7BDEFEB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number:          1760
Signing time:             Fri 05 Dec 2025 22:01:18 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:18 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:18 +0000
Files and hashes:         1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
                          2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: cPlQSRS+vzYEs4Q/31TPwmMqodu15wo4irQVR2J+eyY=)
                          3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:a6:2b:4b:08:91:8d:87:a7:bc:e7:bd:ef:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
        Validity
            Not Before: Dec  5 22:01:18 2025 GMT
            Not After : Dec  6 22:01:18 2025 GMT
        Subject: CN=ea648d3d450d5a99567c8b1124e2510699e6e5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:01:a9:09:32:78:e4:b5:ba:53:88:35:1b:
                    0e:6c:19:48:16:3b:7f:91:05:2b:e2:92:39:9f:f7:
                    be:0c:47:11:f8:ea:9b:1d:fe:ac:28:16:d7:17:cb:
                    fe:71:c1:1e:3d:fe:8e:a1:ca:52:04:21:2d:b2:de:
                    af:22:6c:c3:1c:41:09:23:c4:80:d9:9e:03:25:66:
                    f1:6f:e9:3c:4f:d9:56:c2:ff:ba:4e:2c:54:4e:66:
                    26:dd:fc:e2:98:24:67:ab:77:cb:d0:75:da:f7:5c:
                    6c:fc:30:08:f6:f3:bc:21:31:8e:54:48:f5:e0:4e:
                    25:6d:eb:7a:9b:74:c4:e3:ff:25:5c:6b:3c:57:d1:
                    a8:6b:85:a5:83:cf:de:aa:fa:5e:c6:13:fd:4c:a6:
                    78:35:c0:19:65:98:ae:95:63:14:94:b7:43:e0:11:
                    63:98:6b:e7:b8:73:b0:25:f3:6c:74:f2:d3:dc:28:
                    ef:bb:ec:57:be:59:6a:b4:57:2c:28:ae:46:fa:df:
                    36:0e:1a:93:59:a9:74:e5:36:0f:56:53:f9:92:f2:
                    6e:ac:27:84:6a:a2:b8:84:70:93:fc:6d:46:b9:9d:
                    0c:92:d0:bb:99:b6:d6:8f:4a:5f:d9:66:c3:2c:2e:
                    45:63:a9:f8:96:8d:3d:1d:d3:4e:d4:1c:ad:2d:a5:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:8D:3D:45:0D:5A:99:56:7C:8B:11:24:E2:51:06:99:E6:E5:FA
            X509v3 Authority Key Identifier:
                keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:58:2d:94:16:68:a1:32:68:a2:22:87:2d:35:0b:58:b2:9d:
         75:bb:9b:d4:16:c8:24:69:3e:80:06:83:d8:ff:1b:b1:79:d2:
         7b:4b:04:eb:88:07:8c:83:66:33:03:f2:07:4e:9f:a3:67:42:
         b8:e9:03:82:28:e8:2e:6b:ca:44:0a:a2:27:7c:a9:2e:63:39:
         9e:b7:b5:7c:e3:f6:cb:42:c8:d3:47:07:49:80:8b:80:75:36:
         60:ae:c0:4f:2f:8d:f1:20:87:50:10:cc:5a:db:80:29:19:8f:
         a7:08:4b:c4:ed:bf:34:af:ed:43:9a:a5:ce:6d:91:2a:54:28:
         af:4b:cd:65:d7:99:de:a4:bf:e6:dd:58:24:23:92:97:ab:a6:
         3d:db:0c:da:c7:ce:e9:58:34:3c:6d:d8:a6:1c:a1:5e:19:2e:
         56:54:f7:ed:8d:c1:56:d6:66:a8:21:5e:65:f5:31:c5:91:49:
         ce:be:c6:9e:44:c7:67:8e:85:0b:88:6a:35:ce:cb:9b:7d:2b:
         43:10:6d:72:b6:ec:10:cd:63:44:ee:46:b9:b7:3e:25:3a:d7:
         d9:a6:ef:da:d5:35:a7:3a:bc:2a:93:bc:b6:6d:c2:45:cc:6a:
         e0:c7:fe:01:60:d7:a9:47:58:af:6e:b0:88:44:75:62:f4:dc:
         45:01:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:44 2025 by rpki-client