This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File:                     S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier:          Lzw5rXwikQSO/UlzV1BPYSOMsUCIh84oVflOivboFYw=
Subject key identifier:   E7:11:F9:50:5B:4A:F4:06:0F:5E:07:E4:C0:D9:69:55:8E:AC:14:68
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer:       /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial:       019AF01AB216287EA706F689E5B57DDDE666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 20:01:12 +0000
Manifest this update:     Fri 05 Dec 2025 20:01:12 +0000
Manifest next update:     Sat 06 Dec 2025 20:01:12 +0000
Files and hashes:         1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: hXhasAXpULMFRcX2nZ6GZJZfaaqp1ohQ0EHJ6e01e6Q=)
                          2: c4N6Dzbu5kdIWMEW0ityTPeoKwA.asa (hash: gZyC1G0jy4VVzBtjmMqoQl9JxZxTvwDrJdjGiklu/qU=)
                          3: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:1a:b2:16:28:7e:a7:06:f6:89:e5:b5:7d:dd:e6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
        Validity
            Not Before: Dec  5 20:01:12 2025 GMT
            Not After : Dec  6 20:01:12 2025 GMT
        Subject: CN=e711f9505b4af4060f5e07e4c0d969558eac1468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:c6:49:ea:24:38:89:b9:2a:ed:4a:4f:51:
                    2b:91:40:1a:69:39:1b:e1:16:a8:cb:ae:0e:47:31:
                    e6:49:19:13:04:8e:8f:25:c0:a3:14:0e:a5:cc:0e:
                    bd:08:cf:d2:10:ac:82:e2:2a:5a:30:39:b1:d9:3b:
                    fa:d9:94:a6:b2:09:f5:5e:9e:65:fc:b8:4d:55:b6:
                    ca:0a:94:a5:5a:8b:37:d0:73:1a:7c:76:2b:88:14:
                    13:d5:2b:90:fd:87:cf:ee:14:f7:c6:e3:16:f5:79:
                    25:44:36:4b:b4:b3:32:a5:6f:2c:a7:8a:ae:97:45:
                    46:3e:83:23:41:79:db:83:9d:52:44:ba:b0:2d:56:
                    40:65:2d:fb:c0:6b:f0:a5:1a:15:cc:72:d5:35:fa:
                    c0:15:70:4c:85:7c:2d:0f:b2:b7:78:d3:41:95:b4:
                    9a:f1:d5:82:82:53:0b:d0:81:cb:57:e9:8e:2a:c0:
                    55:50:cd:5e:4a:39:4c:b2:34:7e:56:cf:f5:04:db:
                    0c:5c:0d:f1:fb:bd:c8:00:76:d5:5a:2b:cd:c9:87:
                    72:3b:80:bc:de:58:b4:57:85:6f:62:7d:f0:1e:d3:
                    e1:87:e8:13:80:79:c4:f0:91:30:93:36:27:84:d4:
                    fa:1c:99:3b:1e:9a:41:22:2d:e3:04:dd:fe:27:10:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:F9:50:5B:4A:F4:06:0F:5E:07:E4:C0:D9:69:55:8E:AC:14:68
            X509v3 Authority Key Identifier:
                keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:8f:4b:26:09:61:14:7f:2b:d7:cb:37:6a:65:2b:dc:67:
         a9:65:f1:fb:3d:36:c7:32:2d:9c:2d:51:44:43:61:d8:d5:5b:
         c0:c3:0b:62:d3:90:da:24:88:2a:1c:2e:a2:6d:a7:ec:2c:ce:
         30:31:95:71:e3:0e:15:d3:07:8d:b0:81:6e:63:5f:1b:5e:b7:
         57:f0:1d:7c:80:54:3c:9f:1f:0e:24:8a:e3:44:8d:1b:2d:94:
         2b:37:56:b0:2b:d1:88:79:f2:e7:50:a1:e8:e8:7c:b3:25:c7:
         5b:9f:c9:fb:1a:ee:eb:9d:48:b8:8f:74:dd:c9:49:6e:79:77:
         0f:c0:0f:8b:7c:9b:11:7c:63:82:00:a2:13:d0:69:60:4f:36:
         85:87:29:e9:66:49:e5:3f:7a:72:89:5a:8f:e1:df:9a:a6:bd:
         b8:05:23:68:19:5f:cd:d8:fa:36:a2:5f:c5:27:b9:ad:2d:c6:
         ad:3e:31:a5:ea:ae:a2:6c:68:d7:04:1a:6a:3b:a7:aa:e3:50:
         ca:39:4c:d4:37:14:b7:ec:d7:86:c3:35:5c:c9:89:22:e0:2c:
         22:55:6c:f2:0d:7d:8c:32:31:1f:cb:27:18:e9:48:7c:13:bb:
         dd:c8:4b:fc:98:75:7e:46:09:7f:95:db:37:57:2e:59:39:fa:
         a9:d2:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:51:15 2025 by rpki-client