This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
File:                     ABBUeN79UTt9iCKn2SBPh17VR9g.mft (raw, json)
Hash identifier:          FA4w7n2g/0EGEVTUt29Wf0TaXx2LVFq4k4fSOva4EKA=
Subject key identifier:   43:99:DE:D0:1E:CC:2F:F4:0B:91:6E:35:2B:C8:7E:4B:EC:D2:3B:61
Authority key identifier: 00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8
Certificate issuer:       /CN=00105478defd513b7d8822a7d9204f875ed547d8
Certificate serial:       019AF5E607478D8D27723F4438A33407D729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 23:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:24 +0000
Files and hashes:         1: ABBUeN79UTt9iCKn2SBPh17VR9g.crl (hash: Js39h6uGaXuv1+j3Ng+VAO8WxcBDobMjIhsErLhF958=)
                          2: dS05zkL9CP3GUqpj0_iCe3wFLlY.roa (hash: 1LEnQ3M0NnIsQstsFHtx+z0Hxt2rdc1JklK+0G91crQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:07:47:8d:8d:27:72:3f:44:38:a3:34:07:d7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00105478defd513b7d8822a7d9204f875ed547d8
        Validity
            Not Before: Dec  6 23:01:24 2025 GMT
            Not After : Dec  7 23:01:24 2025 GMT
        Subject: CN=4399ded01ecc2ff40b916e352bc87e4becd23b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:5f:89:fc:cf:22:0e:15:87:12:f5:59:cb:
                    09:7a:c2:76:3b:9e:76:0e:d8:2c:19:f9:49:af:76:
                    15:f4:77:ea:2b:ef:6c:96:55:c7:1d:ac:1e:a8:21:
                    37:8e:1b:0a:a2:b9:f0:61:80:5b:e0:f7:cf:3f:b8:
                    ce:22:97:71:b3:9b:99:2f:59:49:04:98:77:f6:a0:
                    fb:e0:b5:3e:2d:2d:86:c2:e9:11:27:de:03:93:fa:
                    46:e4:22:da:ec:ff:76:08:60:69:e9:ae:08:e4:13:
                    55:ab:cc:45:a0:71:97:67:53:0e:6e:0e:fd:b5:60:
                    7f:18:7e:ca:f5:80:9c:4a:6a:5a:34:65:be:72:5b:
                    c1:fb:42:87:d5:b4:a2:81:88:a9:2d:e0:47:0f:70:
                    a2:f2:bd:53:c6:32:4e:6a:26:24:bd:c8:3c:14:76:
                    bc:aa:d4:87:b2:bd:55:ac:9d:c0:53:a1:a1:52:d6:
                    2c:56:09:80:90:91:11:52:e9:35:50:15:9b:6e:e0:
                    6e:c2:9c:4f:1d:5f:e2:c8:15:63:21:f4:eb:4d:52:
                    f1:3b:0f:d6:eb:ee:f7:d0:05:57:63:ba:f7:f5:a3:
                    1c:6a:c8:dc:d0:54:6c:fa:1f:32:ea:8e:a1:00:d5:
                    b0:a8:9e:79:37:61:ca:f7:14:b0:11:5a:74:e9:fb:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:DE:D0:1E:CC:2F:F4:0B:91:6E:35:2B:C8:7E:4B:EC:D2:3B:61
            X509v3 Authority Key Identifier:
                keyid:00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:24:ab:6c:d1:c9:b1:c3:2d:e1:2c:01:b3:72:c9:fd:00:
         3d:6c:a3:6e:82:67:a0:c2:ad:8e:40:05:22:28:28:36:9c:a7:
         cc:bd:0a:5c:04:fd:2d:c5:ec:18:2f:43:3d:f6:9b:89:53:a6:
         7a:3e:80:33:f8:f4:8f:39:90:4e:ca:18:0e:97:28:7d:e5:e0:
         49:d5:72:2a:1c:ac:89:d8:4c:85:ec:03:84:f3:53:00:8e:c9:
         06:1e:76:08:37:e0:ff:10:ea:e8:02:9e:f2:93:e1:5b:3b:ce:
         77:46:22:dc:9d:4f:32:b0:15:7d:7b:87:d1:d3:4b:17:23:f5:
         75:5a:f3:16:82:55:f1:c0:8c:72:a4:05:4e:4a:7a:c8:72:a1:
         30:3e:4f:c2:48:b2:2d:da:69:89:37:a3:18:76:6b:10:1f:0f:
         d2:7a:03:a8:54:17:84:d3:54:4e:df:b8:bf:b6:14:ef:4e:19:
         d8:58:17:63:8d:01:cf:29:05:26:04:de:86:02:84:bf:9f:41:
         f6:2f:ce:4b:7e:e0:e7:ae:ed:3a:5b:cb:c1:e4:09:17:d1:dc:
         82:31:a0:1d:e7:1e:bd:51:ab:8c:8d:d3:c7:97:2c:b7:73:2a:
         3a:ad:92:18:1f:9b:80:38:0d:42:80:0d:3c:bf:4c:9d:66:fe:
         d6:ec:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:54 2025 by rpki-client