This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          jK3ePi+q/1HICcAripU3mHt7nuThaGE99H0zSeMBDLw=
Subject key identifier:   74:5A:DD:1D:72:92:BA:E4:C0:47:E2:60:CC:A8:8C:57:5A:61:15:A2
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       019AF19AA9534E43AF47E9D56C8C23CB4355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          175D
Signing time:             Sat 06 Dec 2025 03:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:36 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: CKSqoI9P/W6YuwpzJH9/wg5bPHQoptsTJhT9VJGJUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:a9:53:4e:43:af:47:e9:d5:6c:8c:23:cb:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Dec  6 03:00:36 2025 GMT
            Not After : Dec  7 03:00:36 2025 GMT
        Subject: CN=745add1d7292bae4c047e260cca88c575a6115a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:87:68:b8:4b:db:e6:fc:a2:75:63:9f:e4:
                    1d:ff:a0:db:0f:e6:96:b7:f1:f0:ac:d4:da:d8:1c:
                    38:bf:d1:06:66:33:55:fb:22:09:a7:c5:e9:84:e4:
                    4c:c7:0d:69:4c:60:5e:aa:91:6e:0a:cf:38:8b:d5:
                    ec:d9:2c:e5:2a:8f:d8:5f:36:12:46:e6:d2:cb:53:
                    62:00:7c:32:32:34:58:41:72:c5:2f:af:27:cc:62:
                    35:96:8f:26:db:a5:1d:16:be:ed:e7:bf:b1:2c:e1:
                    16:d6:bc:74:50:07:24:9b:1e:81:e1:9c:04:50:90:
                    6c:9f:8b:42:22:de:b4:0a:8a:02:93:9c:9a:b5:65:
                    a7:a1:d3:87:09:6f:67:4e:5f:72:0f:6d:db:30:40:
                    29:9f:83:79:44:b1:8c:15:d1:dd:23:d2:19:6d:5e:
                    97:ac:c6:a3:3f:e5:f7:f2:4f:d6:75:e0:48:d2:dc:
                    db:1e:1a:74:b8:b1:eb:f7:50:54:35:f7:99:50:79:
                    f9:88:6e:43:58:8d:2c:5d:4e:6c:23:a8:c8:ad:cf:
                    61:3b:1a:e3:da:05:2b:e5:73:d1:9b:1a:1f:2f:98:
                    71:39:45:59:3e:50:27:18:84:01:92:16:e4:ba:5a:
                    d2:49:49:66:96:03:68:2b:a5:4f:2e:4c:7c:e8:1a:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:DD:1D:72:92:BA:E4:C0:47:E2:60:CC:A8:8C:57:5A:61:15:A2
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:cb:e2:f3:8e:3d:f4:d3:47:10:ea:e0:2c:e6:26:cc:83:
         da:34:5c:2e:18:b9:18:ae:1d:50:49:a8:c6:fc:c2:3e:80:53:
         f0:5c:58:d8:49:e2:1e:ed:2b:b6:3f:0b:43:a9:56:9a:35:54:
         a4:3a:3b:f0:15:72:4f:ba:50:66:84:a3:76:a9:98:74:b8:93:
         1f:08:83:31:ee:78:03:cf:59:7c:6b:62:88:da:27:38:e1:6f:
         74:5a:fa:5a:18:14:38:d8:a9:9a:ac:3e:d0:32:05:d3:57:b0:
         90:ee:db:cc:ba:3f:2c:21:7a:c1:79:f6:54:2c:8f:ac:18:58:
         7c:19:92:06:c3:d7:11:c3:52:72:b8:db:c1:0b:71:c7:ee:e2:
         93:f9:23:47:cf:af:8b:63:67:d3:d7:6a:28:20:be:fe:51:05:
         36:34:da:f0:e8:07:a8:ee:8f:28:45:b2:fc:8b:66:46:93:1b:
         19:bb:bf:15:81:b0:0d:6d:ae:e8:54:38:3a:49:c8:64:6a:11:
         14:e0:79:47:96:8d:49:22:96:52:3b:43:13:7d:1f:02:95:15:
         91:81:c1:b2:41:0e:90:2c:cc:33:26:22:7e:1b:b8:8e:ad:12:
         6a:e5:6b:41:4c:8a:5f:7a:e5:36:56:96:f5:ee:f5:47:ef:dc:
         d0:5b:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:31 2025 by rpki-client