This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          YbSHg4wudwublE1apwYONDppvKe2WR9UaX2p1CMb/88=
Subject key identifier:   D2:FC:20:0F:5A:93:3B:CB:27:C2:08:90:45:A1:BC:A3:53:09:B6:80
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       019AF4D2941CBFA23DAC8B892DAB5E0B63F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          1783
Signing time:             Sat 06 Dec 2025 18:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:32 +0000
Files and hashes:         1: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=)
                          2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: 2EbR4Rr3AyasdZbp9gP56S9Rsqywbl2jdulbkrBtOnE=)
                          3: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=)
                          4: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=)
                          5: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=)
                          6: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=)
                          7: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=)
                          8: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=)
                          9: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=)
                          10: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=)
                          11: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=)
                          12: xYF8GskQRTruWnq0Q7-vo_GqfiQ.roa (hash: cnwhIOGst+6jb701ygWNYFM0wdy5cssALvw1jcPBdd8=)
                          13: ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa (hash: apVZ3JWIKH9e8JcSsM1dtB933XqOFmvSIVqu1auN2Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:94:1c:bf:a2:3d:ac:8b:89:2d:ab:5e:0b:63:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Dec  6 18:00:32 2025 GMT
            Not After : Dec  7 18:00:32 2025 GMT
        Subject: CN=d2fc200f5a933bcb27c2089045a1bca35309b680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:5f:90:e0:09:bf:c8:d4:d5:20:a6:fc:50:
                    60:cd:1c:f1:d9:8e:15:f3:ba:82:4b:f3:7c:41:d8:
                    35:01:f6:ea:b8:6a:4e:ab:9f:65:87:da:06:61:77:
                    16:e9:3b:d2:11:c5:01:4a:92:70:8a:c8:30:29:35:
                    82:a7:cb:6a:fb:17:3e:1f:e3:8a:75:8f:fe:c2:7f:
                    9e:a9:d4:59:c1:ec:b2:fa:0f:24:6c:d9:33:1a:2e:
                    1d:97:b2:10:34:8a:58:e7:cb:05:3d:06:c7:e7:c8:
                    2f:34:ab:b9:7c:79:3b:23:5f:90:52:d6:9e:90:a7:
                    dd:ce:69:6e:13:46:6a:5a:4d:20:a0:eb:b7:43:50:
                    c4:11:26:ea:b3:6f:4e:af:26:0f:3d:c3:55:a0:0e:
                    1c:21:d3:9b:3e:53:70:30:7a:e3:ab:d4:7a:ec:44:
                    a7:85:91:da:34:0b:1a:46:a8:78:ce:d0:57:97:16:
                    ea:25:2e:c9:36:47:b9:79:c6:85:3c:ef:04:47:fc:
                    07:e0:80:9d:6b:9f:7f:d5:96:a5:6b:25:91:91:63:
                    35:50:01:f4:36:ba:30:a2:da:b4:c9:04:fb:76:f9:
                    4d:68:52:ad:f0:ad:b3:13:cb:d5:26:84:29:f3:ce:
                    f5:ae:f2:4e:f1:97:7a:c0:96:14:85:59:18:a3:7e:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FC:20:0F:5A:93:3B:CB:27:C2:08:90:45:A1:BC:A3:53:09:B6:80
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:c4:6b:5a:9c:bf:28:91:a3:d2:e0:ab:d0:ef:9b:d4:d9:
         bb:e0:d9:cc:0e:a0:4c:1e:e5:fb:7c:39:5c:2e:cd:c2:29:6d:
         83:2e:50:5f:68:cc:bc:e2:cc:df:a5:ec:10:76:d4:51:a6:ec:
         36:f5:96:4b:ad:5d:33:8a:a1:24:e8:6f:d5:5f:0d:35:bc:b0:
         e3:50:c5:a1:db:a4:05:f7:83:f5:50:ff:19:8f:df:a8:96:3e:
         bf:a3:0a:35:10:9a:08:70:1c:83:f4:05:ca:b6:fd:c8:8e:5c:
         cf:cc:46:09:93:a8:99:dd:b8:20:9c:2a:8f:5e:f4:fa:11:d7:
         cb:7c:ea:b7:23:f9:5d:08:36:d6:a4:aa:3e:ab:dc:4e:75:6f:
         ee:40:c8:bd:54:c2:50:d0:bd:1f:ef:19:c0:c1:39:2e:f4:40:
         f6:2b:c2:3f:9c:1e:19:14:41:50:1b:99:ba:6f:e8:0c:69:b0:
         85:d6:bd:18:c2:e4:7f:26:41:49:16:cb:1d:a1:b6:55:d0:0b:
         65:db:47:08:2e:c8:7c:60:1a:d5:61:8a:61:55:4b:88:27:71:
         2d:31:7e:aa:c3:99:d6:ea:f7:01:c7:e3:5f:d0:a7:0d:55:c8:
         47:72:11:18:9a:d1:ba:71:d0:01:14:24:a2:3b:a7:56:27:55:
         30:80:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:47 2025 by rpki-client