This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File:                     mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier:          RLZjyOUxKtl3JlLkMT1UFj2Iac8TLTYvaLPnQDNfkVM=
Subject key identifier:   AA:7B:F3:D6:A7:E4:92:BD:BA:94:E1:8F:66:07:32:DE:0A:91:45:9F
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer:       /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial:       019AF50ABA5C3261132A94741096D5772B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 19:01:52 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:52 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:52 +0000
Files and hashes:         1: FofuUHCsYy2TWoAryzf8NlyduYw.roa (hash: R69ugPfWWsxLjShfG0VPEFk8EHkq5i3Md6nRP/x8COw=)
                          2: TjOWAn9m61FkB31GdiLBvzbAI7U.roa (hash: aG8sOh3CvIOag2ln0Tel0Fs9xc2JzXQ51lpXRk6Hp0I=)
                          3: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: GC8pjR+WDiAx5/dDJEoiOg8sUBlZ9kuQ5pussYuI5HU=)
                          4: xxDRFOTla8N7tGZn7evy3dACgq4.roa (hash: TgmRLmPdu38ZIfbUlnhFYOpaX8B5Morn7URlc3ZpGIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:ba:5c:32:61:13:2a:94:74:10:96:d5:77:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
        Validity
            Not Before: Dec  6 19:01:52 2025 GMT
            Not After : Dec  7 19:01:52 2025 GMT
        Subject: CN=aa7bf3d6a7e492bdba94e18f660732de0a91459f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:dd:ad:de:12:8c:cd:7c:b4:e4:60:44:d0:
                    e6:2e:db:41:6c:9a:e7:fa:a3:6a:dc:fd:4c:22:0c:
                    cf:b3:2e:42:89:94:0a:fc:b7:8a:6e:1c:c7:97:f1:
                    df:31:78:0a:27:06:a9:bf:ca:32:a2:91:d3:c4:fd:
                    16:d1:d8:67:e7:a3:1c:b7:df:f1:64:2f:56:5a:8e:
                    d2:22:2e:78:24:06:1f:ca:e2:82:23:5d:63:e1:a7:
                    db:49:f5:dd:77:97:ba:02:ee:3d:77:ec:21:33:af:
                    f1:34:39:ef:e2:a1:a4:63:0c:b1:03:96:22:39:fa:
                    8d:49:f3:1f:7f:4f:a1:dd:9f:ca:6e:f9:de:3a:ab:
                    4e:1b:a7:a7:30:b8:bd:18:bd:b3:c9:e7:80:80:66:
                    33:69:53:a3:48:43:b8:a8:e8:29:eb:bd:b9:95:b1:
                    32:c6:d9:70:46:ea:26:86:1c:dc:45:5f:7d:d6:f2:
                    ca:19:d8:7f:28:49:ab:7e:9d:73:aa:a4:19:16:62:
                    54:c0:25:93:a9:2d:04:f3:3f:11:c6:aa:50:a0:42:
                    c4:e7:e4:f0:1e:9c:ef:9d:ad:01:06:5c:c1:1f:2c:
                    95:4e:ef:57:49:86:0b:09:9e:82:2e:09:68:56:f1:
                    d0:40:4f:91:81:a8:ce:40:72:86:b1:78:95:e2:8f:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:F3:D6:A7:E4:92:BD:BA:94:E1:8F:66:07:32:DE:0A:91:45:9F
            X509v3 Authority Key Identifier:
                keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:85:aa:f6:f4:84:6b:b0:a5:b3:2e:37:ed:01:c5:84:77:11:
         71:e1:78:a2:69:8b:fa:71:22:ed:e8:7c:c4:56:00:e0:ac:68:
         69:61:aa:44:ea:77:d1:77:bc:18:aa:78:93:69:19:da:55:56:
         1f:10:6e:9a:d2:0b:22:29:0a:17:2a:db:3e:2a:49:cd:ce:41:
         d9:32:31:03:8d:a7:70:c0:eb:d3:22:0d:9a:a9:d1:6d:ea:2c:
         9f:1a:a1:61:78:72:c9:c9:28:bc:a5:1c:97:46:77:f6:29:ec:
         86:6d:ec:09:d9:3d:60:42:5d:86:8c:cf:c4:6d:b4:0e:7f:c4:
         70:69:85:06:69:f9:1a:e7:cf:0e:ce:63:99:ca:49:ea:27:ec:
         70:3d:1e:c1:d0:59:ab:5b:1c:65:78:82:3b:d5:89:7c:2c:29:
         5d:a6:83:a9:74:de:c2:1f:39:96:44:ea:31:10:b7:86:c5:02:
         e4:3e:12:8b:42:ec:c1:b0:73:ed:b0:76:c9:66:c2:41:3b:aa:
         50:7f:26:81:70:01:6d:0e:6f:fd:48:b8:87:99:00:3c:ae:37:
         b8:0e:6d:e1:35:86:96:76:42:62:d0:f9:8c:78:6d:2b:1a:87:
         8e:3a:b9:89:80:60:aa:8c:f7:06:e0:0c:4c:3d:16:4c:cd:c5:
         2f:0f:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:12:04 2025 by rpki-client