This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File:                     IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier:          24/uZbp2DeT03NCXm2Znh2u40+IzGzJT50+tg1MTaN4=
Subject key identifier:   EE:3E:34:F6:68:55:66:59:BF:34:BF:CA:6C:89:34:07:7C:74:5A:64
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       019AF23F8562922E4FECFA009EAE0146FED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number:          1797
Signing time:             Sat 06 Dec 2025 06:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:40 +0000
Files and hashes:         1: 6w9YYZofXuAgxjk7hq0MFU5TxUA.roa (hash: psQbqp3Dv/axG/Fm+AyyjZW7+7TGZniv6yrpPXuxg9E=)
                          2: ICf1N54sWmgImkJZLxC93x14b6M.roa (hash: zUeR1FW2SRh6uc3sducJB/nBZ87Rzrh22r5+clJzpnU=)
                          3: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: /6f4ZPrUXrBdMDCxKTkDPvW9bDHg95RBcPfSk9V9JZA=)
                          4: NWZ6X9b-5hxEfJ9QrTP9jZ_zmYY.roa (hash: 8br5HNMvqSMJ3h3ONJIZMwSXpIgb/ZWSf4M8Oa8bT9o=)
                          5: R99dYNqYsBqUsChphTk93qUHPQI.roa (hash: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=)
                          6: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=)
                          7: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
                          8: q_DU4LpYW5iMWWvp18KMkPW4jyE.roa (hash: dS1YtoKx6Fr5PPMvDkPqkspr86D+De4f+k+4trrsOTk=)
                          9: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:85:62:92:2e:4f:ec:fa:00:9e:ae:01:46:fe:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Dec  6 06:00:40 2025 GMT
            Not After : Dec  7 06:00:40 2025 GMT
        Subject: CN=ee3e34f668556659bf34bfca6c8934077c745a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:00:78:32:01:8a:73:e5:ad:d7:9d:99:51:
                    bf:56:e8:1f:17:29:c3:a4:08:14:b4:ed:43:9d:d6:
                    9b:46:01:d5:30:18:e7:2c:36:bc:7e:4d:56:af:ba:
                    06:e8:33:1d:8b:6e:16:89:5f:0b:13:64:3b:2d:9e:
                    a6:75:19:a1:58:03:3e:43:7a:c0:b6:42:c1:8e:56:
                    6d:41:8c:70:1a:2e:a6:10:f5:83:a9:99:d3:1a:29:
                    98:0f:35:1e:06:d9:7b:3c:75:41:33:34:c2:b9:32:
                    72:7f:48:65:ae:4b:64:ea:b2:aa:dd:d3:23:3b:00:
                    ff:31:38:ea:22:50:35:15:fd:28:cc:99:9a:23:b5:
                    b4:e8:18:a4:67:6d:31:1d:71:9e:de:a8:8e:aa:11:
                    4e:8f:60:1f:51:36:7a:df:69:cb:52:ab:3b:c2:88:
                    87:ff:18:aa:42:c7:f6:64:47:a3:ee:29:d3:32:a6:
                    c9:e0:1f:7f:91:23:8b:4b:94:3e:a7:1b:5b:22:a0:
                    f6:45:39:b6:2e:40:06:59:34:c6:70:f7:a0:13:ca:
                    17:97:04:18:15:88:15:f8:a7:3f:d1:3b:59:bc:14:
                    49:a0:1c:90:a7:94:b2:94:da:29:bb:b7:bc:d2:54:
                    d2:24:d9:97:15:f2:83:e1:b7:57:b2:30:8f:1c:ab:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:34:F6:68:55:66:59:BF:34:BF:CA:6C:89:34:07:7C:74:5A:64
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:9a:67:13:b5:49:68:24:d3:5d:f0:7c:9c:5a:d7:4f:db:
         e3:3b:de:a3:49:f9:1d:a1:3d:67:50:ae:7d:0d:fd:70:da:f1:
         fd:a3:3d:3f:0d:c7:1a:71:eb:cb:4e:e8:36:90:86:56:2e:64:
         bc:36:66:83:62:72:96:04:0d:e0:8d:10:cd:4f:39:58:d3:1d:
         f1:fb:33:53:03:97:3e:0b:82:a1:ba:e0:67:01:1f:3c:58:ee:
         41:d8:74:b1:11:e2:a6:01:75:85:9f:57:fd:13:ac:aa:b0:ce:
         47:60:b4:3a:bc:d2:c0:c3:43:d8:80:ab:d8:ac:c0:98:bb:76:
         23:6d:b3:51:e3:4a:e7:81:dc:02:17:93:cb:72:c8:17:9d:99:
         1b:cf:bb:7a:fd:f1:32:07:4c:e0:74:0b:85:8f:de:3b:e5:72:
         4a:b5:9c:f1:55:75:4f:02:a8:93:9b:39:27:a5:00:50:d1:39:
         41:71:71:b4:04:be:f2:d3:e7:0d:1e:ae:dc:46:e4:3b:64:11:
         4b:2a:0e:b5:b1:d3:ba:56:5f:e4:99:97:34:6c:f1:b1:55:07:
         c5:e5:32:5a:10:6f:80:6b:c9:2d:96:65:50:c5:f5:54:df:b9:
         89:b5:60:44:ac:3a:0a:bc:63:e9:c5:14:79:ed:52:fc:08:c0:
         71:c7:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:28 2025 by rpki-client