This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File:                     pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier:          z6UWiiddo53WAxrJ0YL7sLQtt/n3uXVhKXYH/D+a3Q0=
Subject key identifier:   E0:73:64:02:A6:EE:6E:23:FE:0D:69:C3:81:6C:E0:4E:81:03:D3:1E
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer:       /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial:       019AF12D138669F734AE98B44017BE312E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number:          0DAE
Signing time:             Sat 06 Dec 2025 01:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:54 +0000
Files and hashes:         1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
                          2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
                          3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: 1YhiGS9emGM9clJMMvl6x7QhhvhtD9mkocIx9ihuoeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:13:86:69:f7:34:ae:98:b4:40:17:be:31:2e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
        Validity
            Not Before: Dec  6 01:00:54 2025 GMT
            Not After : Dec  7 01:00:54 2025 GMT
        Subject: CN=e0736402a6ee6e23fe0d69c3816ce04e8103d31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:5c:c5:cf:2c:28:4e:d1:1b:51:2a:30:8a:
                    b8:51:7b:6a:d0:ec:00:ab:b0:1a:b3:18:23:cd:30:
                    e9:b5:52:2c:36:a0:74:f6:2f:68:d6:6c:27:d2:ac:
                    a3:bd:60:63:4f:cc:a2:32:35:4e:20:c9:38:9b:ae:
                    3c:8c:c5:68:da:79:32:a4:ba:b0:f0:50:e1:cd:20:
                    c9:10:05:f1:71:3e:bd:ba:e9:a3:70:12:5d:2d:db:
                    88:06:ee:f9:c2:c8:8f:03:9e:75:8f:3e:7b:1b:8a:
                    df:51:74:2b:c4:de:09:5f:2e:06:1d:1f:6c:48:72:
                    77:f5:40:77:cf:34:b7:c2:30:96:2a:04:c0:34:82:
                    dd:3c:5b:c2:42:24:f9:ec:32:aa:86:f2:66:67:3d:
                    00:84:06:e4:f4:76:64:36:1b:d1:0f:4b:b2:16:b9:
                    3c:e0:d8:e7:f1:cb:bd:45:7c:f7:ea:79:11:6b:2f:
                    fa:0b:52:f0:fe:13:25:6f:04:4c:ec:d1:0b:34:3e:
                    3a:3d:a5:73:3a:93:0a:a8:13:e9:9a:7a:ce:d0:bf:
                    fb:d6:0b:f0:24:a2:37:5d:78:1b:77:60:a8:31:6d:
                    f9:99:e3:c4:eb:47:4e:3c:cf:db:54:ee:f5:08:77:
                    d2:09:62:09:8b:3a:c6:76:48:c5:68:3d:7f:5b:ad:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:73:64:02:A6:EE:6E:23:FE:0D:69:C3:81:6C:E0:4E:81:03:D3:1E
            X509v3 Authority Key Identifier:
                keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:4c:bf:f1:16:24:6f:95:93:a6:6f:0f:72:1b:77:5d:7c:
         90:39:b0:cc:be:a5:70:86:99:b1:4b:da:07:22:70:2a:c1:d4:
         5f:01:ed:27:00:5b:bf:3e:1d:b9:79:10:56:d9:96:62:a5:7e:
         d1:f4:0b:29:73:40:f2:12:cb:2f:6f:3a:b3:03:6b:34:ae:94:
         c4:44:00:74:7c:73:67:3a:02:e6:f3:c1:54:66:5e:62:d7:d3:
         8e:5b:d8:f6:a8:8b:d0:68:3d:5f:05:00:d3:de:ac:cc:1a:29:
         0c:d7:f5:4b:7b:28:e5:72:e4:92:51:77:6b:79:27:dd:a8:f7:
         5b:49:02:6f:99:59:92:71:d1:b4:2e:74:a6:85:d5:86:e8:e3:
         7c:72:58:d5:b5:97:6e:02:e0:f9:ce:e8:ed:9b:9a:e8:da:dc:
         c0:83:8f:2f:a2:ce:b7:58:a1:72:7b:d9:36:88:61:11:3d:e2:
         43:ea:df:6f:53:ac:03:9e:9a:e3:3f:b0:f2:d5:41:3e:eb:47:
         80:cf:a6:82:dd:2b:11:9a:fc:3e:b5:08:71:94:18:74:c4:3f:
         d3:96:b2:66:a6:ee:3d:54:e3:b9:64:00:ee:d3:5a:f4:ff:9e:
         d4:88:e9:2a:f7:5b:c0:72:d9:41:2d:e3:0f:60:b7:4e:17:50:
         d2:0a:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:20 2025 by rpki-client