This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File:                     0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier:          SV66HfEXsgQpTBjypxPjMWhEQ7t+BVFiRNmT8/f/o0Q=
Subject key identifier:   E1:61:53:30:1B:5E:28:1A:CE:82:FF:7F:97:A2:0D:F9:6C:62:A8:00
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer:       /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial:       019AF49BC86DAA60350176775164AC84FFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 17:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:41 +0000
Files and hashes:         1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: qj3y/93h0j0CssdJ4aPu9W5YbiZsHGqlqRJnAojDLrY=)
                          2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
                          3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:c8:6d:aa:60:35:01:76:77:51:64:ac:84:ff:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
        Validity
            Not Before: Dec  6 17:00:41 2025 GMT
            Not After : Dec  7 17:00:41 2025 GMT
        Subject: CN=e16153301b5e281ace82ff7f97a20df96c62a800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:a1:7c:2f:a0:99:61:d1:b0:11:72:9a:4c:
                    e3:0c:3a:d0:ef:f6:0f:2f:45:6e:7c:2e:83:01:46:
                    ee:15:fb:98:fa:2a:40:cc:c5:51:ae:93:23:5b:72:
                    bd:a3:42:76:78:f3:89:0e:21:93:bc:a2:eb:c1:9c:
                    36:ca:7e:19:1d:ed:5d:59:bf:3b:e2:ab:49:49:15:
                    56:d7:76:c4:73:3c:bf:e9:76:2b:0f:91:bf:c2:49:
                    a4:25:4a:aa:83:11:e6:d4:2d:77:dd:ae:bc:cc:eb:
                    51:6a:20:66:6b:f5:6c:6b:55:58:97:14:c9:23:8c:
                    75:52:8a:d9:55:7d:39:b3:23:5f:68:62:d0:d7:a3:
                    f9:96:93:ad:0a:96:23:ab:d0:73:c8:97:6f:9e:12:
                    0b:c3:37:91:d7:3b:64:a2:cd:e9:14:db:90:32:b0:
                    23:a8:e7:8c:b8:d8:12:89:26:93:20:d2:ff:cc:8e:
                    4b:95:5b:56:e1:a6:f9:90:06:b5:ea:47:e8:51:ae:
                    bd:90:32:74:b4:20:97:1b:07:81:ae:7e:b7:cd:83:
                    3b:b3:52:3d:13:71:90:30:85:96:44:0f:bf:8d:7b:
                    c2:9c:02:7f:82:ae:c4:0c:31:ef:a2:70:92:89:42:
                    70:d5:24:3f:16:ee:a8:61:ca:1c:96:60:25:cc:fb:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:53:30:1B:5E:28:1A:CE:82:FF:7F:97:A2:0D:F9:6C:62:A8:00
            X509v3 Authority Key Identifier:
                keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:e8:10:e5:a2:e0:40:78:22:b6:48:0b:d5:44:e8:63:ac:
         63:b5:5c:d8:ca:eb:6f:a3:92:24:bf:ca:27:45:3a:ed:18:ba:
         82:a4:36:d0:7d:14:d8:4d:23:d3:d3:a0:67:4b:68:b6:89:f5:
         9a:25:15:e6:f8:2a:b6:71:84:fb:62:6f:dd:89:cf:54:55:9e:
         2f:41:77:8a:64:23:6e:e3:80:a8:62:c9:4c:84:69:96:b5:29:
         8d:62:87:a0:f3:06:58:21:da:d1:d6:a7:2b:71:ec:03:05:03:
         8e:eb:15:bf:87:cd:59:9e:77:42:ec:cc:21:77:7a:9f:0c:93:
         b1:6d:0a:1c:43:cd:06:23:ec:fa:fb:a7:39:58:31:6c:3c:31:
         28:ef:68:32:e3:9f:44:a7:50:37:52:c4:fb:c3:a5:5f:58:e3:
         cd:b4:36:e3:a2:ef:96:10:04:59:18:f2:1d:b3:1e:d0:0f:13:
         c8:cf:d0:7e:7b:d5:7e:4c:17:51:e5:ea:9a:77:32:a9:74:a7:
         40:ca:2f:6c:25:34:7a:77:37:62:6c:ea:42:e7:84:37:30:a7:
         22:5b:4c:6a:7e:ff:64:28:e5:ba:fc:c9:1b:48:3c:94:f0:bb:
         5f:c0:2d:ec:3b:1d:e7:ca:0f:6f:e7:51:a4:6b:23:6f:bf:25:
         7f:c5:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:41 2025 by rpki-client