This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File:                     Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier:          FKrzoL0oD++Bl1pgDDMJPzV5Jt0/Gw3SeJhiVYqCykc=
Subject key identifier:   93:62:A2:E6:1D:B3:BC:BF:14:D2:C1:8D:C5:65:7F:15:DC:4F:56:9A
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer:       /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial:       019AF276CD4248ED0C3A68AEF8A68DF56F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number:          0E87
Signing time:             Sat 06 Dec 2025 07:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:03 +0000
Files and hashes:         1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
                          2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: xtm27wN/8T1HGhwJG5ByVBfzWv73IdRWS7L7PHbZMlA=)
                          3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:cd:42:48:ed:0c:3a:68:ae:f8:a6:8d:f5:6f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
        Validity
            Not Before: Dec  6 07:01:03 2025 GMT
            Not After : Dec  7 07:01:03 2025 GMT
        Subject: CN=9362a2e61db3bcbf14d2c18dc5657f15dc4f569a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:bd:9a:a6:ed:4e:c9:08:3b:d3:20:78:09:
                    31:f1:8c:6b:b9:b1:da:53:b0:b7:44:77:1a:a7:98:
                    1a:0e:a2:51:48:da:87:28:86:5c:51:b5:98:da:81:
                    b8:a9:0d:e8:18:4f:b9:ed:d8:b5:f5:eb:9e:d9:a0:
                    87:fe:fc:bd:c5:d7:a6:0d:89:ce:4a:de:8e:98:d4:
                    56:90:04:7d:db:b2:39:4b:78:e4:94:85:da:88:44:
                    54:95:91:0a:9c:97:f9:55:5a:46:55:fa:fb:aa:7a:
                    56:2f:b9:04:b4:aa:8f:f9:61:c9:99:69:8f:13:b8:
                    bd:3e:78:02:8f:8a:dd:6b:9d:b4:86:4d:85:bb:2d:
                    d0:ec:52:e3:d5:05:d5:2b:78:68:d0:ee:49:ff:f6:
                    56:be:b1:81:66:32:aa:3f:5e:04:82:3e:17:4b:eb:
                    b5:90:d5:97:9c:3d:92:c4:ed:51:d6:c8:a5:32:be:
                    20:c9:4c:1a:ab:4a:f1:f5:fd:26:ce:36:04:4e:ad:
                    4a:d3:5b:6e:19:ee:62:01:61:c0:dd:45:9c:f6:c8:
                    5c:bf:a3:77:4e:e7:7b:a4:0e:09:d3:84:40:60:6f:
                    d4:3a:2e:8a:9d:97:68:6a:b6:b0:27:09:0c:d2:32:
                    4b:2e:72:dd:63:d0:9a:62:4d:ec:5a:b2:2e:6f:3f:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:62:A2:E6:1D:B3:BC:BF:14:D2:C1:8D:C5:65:7F:15:DC:4F:56:9A
            X509v3 Authority Key Identifier:
                keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:84:f4:7e:5e:06:47:c4:85:be:96:17:54:87:77:51:18:
         71:3e:c4:d2:a5:89:84:b6:19:81:c8:93:0a:ef:66:ac:a3:bb:
         c8:68:d7:24:1c:86:94:15:c1:2e:3d:4c:e7:dd:88:0c:d2:78:
         d8:a8:50:14:70:5f:ec:dc:3d:4e:7b:1f:d9:91:63:38:ce:09:
         13:55:a9:89:87:95:26:6d:5a:75:eb:e6:cc:67:ae:93:2a:9f:
         7c:ea:5a:fb:1e:8a:65:ae:94:b1:ab:d1:65:4c:b4:66:5f:1c:
         c1:c1:ae:9d:bd:13:d0:5a:a6:f8:24:9a:e1:61:42:7b:32:60:
         6f:eb:5b:44:80:24:30:34:01:5a:9f:99:b5:a2:0d:da:3c:68:
         42:4b:e9:79:5e:2c:94:6b:e5:cc:cd:45:65:86:1b:05:5d:bc:
         db:e9:1d:f5:88:97:09:86:d2:04:08:7e:4f:cb:ba:c8:ce:85:
         b4:69:30:e2:04:3f:0a:88:65:ca:bf:28:2a:c9:72:9d:70:ba:
         6e:73:e8:3e:fa:f1:2d:67:da:c5:bd:a4:f1:4e:e8:91:28:59:
         e7:e5:f0:23:ef:ec:e7:b0:f6:88:e4:70:8e:df:b5:84:cd:76:
         fd:86:34:82:0e:1f:9a:20:3d:1f:93:26:1f:8a:97:0c:c8:ae:
         9c:48:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:31 2025 by rpki-client