This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File:                     iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier:          CN5IwVJDwqGGZcDsZjttchUMk8IIno1oe+b+kJHXDVc=
Subject key identifier:   82:E6:78:1A:8B:81:2F:60:11:47:96:EF:59:F7:61:6E:F6:4E:B7:C9
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer:       /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial:       019AF19B4F60A24C0DA5352DD26A06DAB352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 03:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:18 +0000
Files and hashes:         1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
                          2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
                          3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: SE00Sea3KlhLizCYFmemu4qqRfRlImO6GZn6qv8CMEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:4f:60:a2:4c:0d:a5:35:2d:d2:6a:06:da:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
        Validity
            Not Before: Dec  6 03:01:18 2025 GMT
            Not After : Dec  7 03:01:18 2025 GMT
        Subject: CN=82e6781a8b812f60114796ef59f7616ef64eb7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:a8:d7:0d:95:c7:0d:1a:9b:32:76:f4:b0:
                    e9:5b:82:37:06:8d:be:ea:81:92:61:dc:4f:c7:c0:
                    70:6e:5c:b7:db:35:0f:aa:e6:7a:54:52:52:bb:9d:
                    df:08:10:18:a2:8a:fb:09:fb:cf:d3:e0:ff:99:42:
                    d2:73:8b:df:8b:64:d7:4c:6d:9d:6b:e3:1f:2e:e7:
                    b5:97:c2:ff:54:91:1b:43:bd:a9:51:b8:3a:d2:00:
                    17:fc:4a:38:e8:d4:e1:47:d3:bb:f6:ee:83:e2:8f:
                    68:8f:65:14:3a:b5:94:b8:82:9c:3c:c2:f0:7b:c2:
                    d8:c2:00:da:6d:88:8d:7f:21:cb:74:44:6a:ef:1e:
                    8e:03:6b:04:2b:13:a4:b0:20:ed:3f:59:d2:0f:6f:
                    56:20:90:42:dd:f3:9d:18:63:50:37:e9:67:f9:bd:
                    10:f5:0a:e2:8e:67:c2:4a:d5:69:0b:f3:1e:69:72:
                    0f:3a:3b:f7:b0:a9:00:30:44:29:63:24:90:2e:eb:
                    a3:66:d6:3f:37:89:ac:8d:01:da:c0:82:7c:9e:c0:
                    0e:48:49:0e:1f:97:f8:b7:c1:97:1b:22:1d:36:82:
                    cb:7e:d1:2c:04:8f:6e:0e:00:4a:d5:2c:c6:ed:54:
                    a1:cc:cf:6a:60:4b:da:bc:11:20:63:cc:ba:4d:1b:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E6:78:1A:8B:81:2F:60:11:47:96:EF:59:F7:61:6E:F6:4E:B7:C9
            X509v3 Authority Key Identifier:
                keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:16:c1:31:22:40:d2:21:4d:69:4c:d9:55:26:56:ae:cc:
         88:0e:1b:7d:1a:9e:00:a8:5d:49:d0:7c:87:5b:e1:08:6f:ff:
         f8:b0:05:ae:56:4f:28:9a:c0:d4:aa:2d:11:04:b5:a3:ec:be:
         65:e6:0f:60:9f:a4:d7:ff:c8:41:ee:07:76:fc:8a:1f:a8:aa:
         c4:1a:b7:6c:c0:a0:df:74:d2:55:ef:c9:a9:1b:ca:74:cf:7e:
         d9:8a:4e:44:bf:e9:84:f5:8f:1d:04:ec:92:d5:ea:5e:d7:88:
         90:ab:6b:66:fb:88:b9:ea:46:57:c8:05:cb:6b:cd:63:48:15:
         85:ed:f5:57:02:f9:18:ff:a4:17:5e:d5:a8:2e:fc:58:e9:94:
         09:d7:2d:56:12:ef:23:b0:03:83:7d:57:63:64:45:35:7f:92:
         7b:90:b5:e1:5d:bc:f2:43:f8:a3:2b:1a:3a:b7:64:1a:63:21:
         b2:61:7d:e9:86:1a:85:34:41:0e:b8:74:8b:c5:b4:1d:d3:a9:
         6d:bf:ce:74:be:7f:d0:89:57:31:8b:68:90:21:ac:86:ea:a7:
         4f:57:d0:5a:15:55:b5:98:29:3c:ee:65:66:87:28:71:26:2d:
         8e:ae:ba:fd:75:e1:12:44:cf:0a:f9:56:03:66:86:87:7f:96:
         ac:9f:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:04:51 2025 by rpki-client