This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File:                     RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier:          f9yIR1xAiqlY8LoK3ShVOAcxQrywrnYm8s4cFjpcCQQ=
Subject key identifier:   19:43:F4:D5:F6:9C:B5:D8:8B:C4:55:C5:33:C5:01:E2:64:50:3D:E7
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer:       /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial:       019AF2AD732494C382A9B94E05F2DBB3FB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number:          0EB4
Signing time:             Sat 06 Dec 2025 08:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:44 +0000
Files and hashes:         1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: LqhR4wOc+XAbgdkiaBUzg659FTYl2W9yuyNqg+RzHhk=)
                          2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=)
                          3: oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa (hash: S1aX3TBNextGznYBV2sBZ4ei/brLO4wIVRBwdKjAlXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:73:24:94:c3:82:a9:b9:4e:05:f2:db:b3:fb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
        Validity
            Not Before: Dec  6 08:00:44 2025 GMT
            Not After : Dec  7 08:00:44 2025 GMT
        Subject: CN=1943f4d5f69cb5d88bc455c533c501e264503de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:32:5b:a4:c3:7c:5c:80:e5:e9:9d:30:37:
                    d8:57:cf:86:44:8e:31:39:46:c2:41:5e:79:0f:07:
                    a7:95:df:16:db:0f:1f:72:2e:9b:de:66:91:f8:66:
                    4b:13:03:6d:d8:20:5a:fe:7b:e0:7e:ee:94:25:a4:
                    ae:b1:e9:6e:af:fb:9e:bf:7a:3c:8a:a8:6a:89:64:
                    8b:1b:e1:c0:25:91:b6:aa:d0:78:4e:b7:cc:2c:44:
                    b5:cf:4e:f1:7f:64:a2:8c:0a:92:d1:15:11:a8:89:
                    01:18:b1:e6:ec:82:cb:37:1b:f9:ab:11:1f:5b:e6:
                    cc:d7:87:6f:eb:c1:68:7e:46:19:64:d3:ff:e8:23:
                    d2:9e:71:55:20:43:ba:7d:65:fe:c1:99:27:46:3f:
                    7b:85:10:1d:42:2e:7e:90:d7:a5:cd:05:3a:7d:9e:
                    55:f0:3c:08:9b:04:f8:3a:cf:a5:a9:b4:05:a2:7f:
                    c3:12:2c:33:52:7a:26:f3:0e:d4:2e:0b:97:a0:2d:
                    e4:d3:bc:0c:53:4d:9b:52:43:51:66:e2:cd:5f:9b:
                    c4:71:85:af:93:37:4f:39:a7:b6:07:9f:90:de:a2:
                    e7:ad:09:eb:8f:87:75:41:f3:18:7c:cd:73:20:97:
                    e3:82:29:57:16:7b:6f:1d:c7:f1:b8:67:80:08:9d:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:43:F4:D5:F6:9C:B5:D8:8B:C4:55:C5:33:C5:01:E2:64:50:3D:E7
            X509v3 Authority Key Identifier:
                keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:de:5b:11:6e:17:7d:3f:7c:a9:05:23:90:04:48:1d:ea:
         a2:0e:de:a7:b3:75:49:21:d8:ca:ce:8a:fd:be:fc:4d:a7:20:
         a4:0f:45:84:f6:d0:7a:7c:36:99:8b:4f:df:6f:84:0c:26:1c:
         c2:16:c2:fc:a3:b5:6c:6f:7b:7d:82:87:91:5d:1e:a9:7d:2c:
         73:c8:55:32:fa:a2:a9:e9:20:6f:1e:f0:87:ed:0f:88:c3:19:
         c0:95:8b:4c:e1:52:f7:4c:9b:9a:c3:76:85:e2:20:c3:4b:2e:
         d3:00:23:e2:cf:9c:e6:34:73:57:04:2f:51:4c:31:83:e6:83:
         eb:30:c1:7f:8b:6c:37:b7:54:66:9f:7e:12:48:12:b2:37:01:
         4f:98:45:96:97:80:dc:96:72:5b:8a:66:09:95:52:0e:34:3b:
         11:8a:73:34:48:35:e1:6a:2d:b8:72:47:43:8c:aa:b0:d6:c7:
         7c:bc:09:8c:38:50:53:7b:6b:e7:58:e0:1d:04:b0:d8:c4:ab:
         2e:96:61:85:fa:e2:c4:8e:bc:e1:f5:5f:bd:a7:76:88:92:b8:
         13:a4:fd:f5:f1:09:6f:81:80:11:15:6e:d1:ea:25:1d:72:47:
         63:f6:a1:7e:16:cd:37:6b:47:f1:ad:fc:f0:ab:46:56:d8:42:
         7a:e5:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:02:45 2025 by rpki-client