This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          3hDpOkHE1zGVwylLJNz9que8wESILibOh/sZ30Ga538=
Subject key identifier:   7D:76:30:0E:82:E4:8C:17:45:6C:4F:76:C0:97:76:64:2F:C2:45:DA
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       019AF0BEF9C156C544CE8144B3BC8C47400D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          175E
Signing time:             Fri 05 Dec 2025 23:00:38 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:38 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:38 +0000
Files and hashes:         1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: Rncn0FPVkpezk/pGoRaHzeiwMj+0gzRlE8MBh9aZ3B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:be:f9:c1:56:c5:44:ce:81:44:b3:bc:8c:47:40:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Dec  5 23:00:38 2025 GMT
            Not After : Dec  6 23:00:38 2025 GMT
        Subject: CN=7d76300e82e48c17456c4f76c09776642fc245da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:a2:93:45:11:0a:0a:7b:d9:ac:cb:23:be:
                    3b:9d:86:21:bc:9d:8d:27:0b:5c:af:79:a3:fa:6b:
                    05:d9:6e:10:18:f2:75:ae:2c:4e:5d:75:1a:fd:c9:
                    8c:8d:17:1d:b8:92:02:c9:1c:71:0e:41:4e:ca:c8:
                    cb:bd:3d:ea:61:cd:05:a3:dd:fe:b9:64:f2:0f:bf:
                    3f:ac:f5:52:68:5e:bd:cb:cd:eb:c4:1f:80:af:e8:
                    ea:1c:9d:66:79:d7:22:1c:8e:94:60:21:5b:2f:fa:
                    bc:6f:54:0a:24:10:08:7a:24:fa:09:16:c6:8b:e6:
                    54:38:f7:74:4f:bd:80:01:e4:70:bf:6f:2e:40:87:
                    49:27:f0:77:5c:72:38:1b:4d:33:34:55:1d:00:b7:
                    9a:58:87:62:b2:8b:d8:02:e0:ee:49:0e:d8:0a:ce:
                    27:de:39:27:1b:99:cd:c8:96:92:b9:41:d1:c2:10:
                    0a:8a:5c:68:c2:bb:23:5d:52:5b:41:58:4b:a9:32:
                    59:a3:29:39:08:b3:99:72:c0:e9:0a:70:82:75:cb:
                    e8:ee:08:4e:16:05:c1:87:1f:9a:1d:02:0b:fd:dd:
                    aa:d2:40:e7:48:3e:00:ce:1f:c7:a8:fd:0f:20:a6:
                    32:83:eb:27:e1:98:b1:69:7c:e8:3f:ae:43:fe:03:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:30:0E:82:E4:8C:17:45:6C:4F:76:C0:97:76:64:2F:C2:45:DA
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:6c:2d:00:17:ae:98:61:7c:6f:e2:18:5c:eb:68:ad:bc:
         58:50:7d:e5:49:41:68:67:ac:24:b3:f7:af:49:2d:f3:e9:87:
         a7:c8:09:51:cb:4d:15:73:8c:9a:d1:e8:0c:5b:f9:a8:ef:68:
         bc:4a:8e:29:87:8d:63:6c:ab:bc:45:e3:1a:c5:f4:05:d2:cc:
         38:ec:94:73:85:b8:69:48:c3:33:6f:09:94:1f:f6:15:0e:48:
         3c:7f:4f:04:37:03:1b:4a:d2:14:c7:3c:d8:f1:70:bb:cb:33:
         53:fc:4e:c2:f0:eb:95:fd:52:4a:c2:fd:c7:b5:ad:41:44:05:
         05:91:3d:61:a7:49:86:7b:1c:50:28:30:c3:4b:b5:84:c7:58:
         cd:3d:ba:69:27:73:e7:12:fb:15:32:8f:de:c2:3c:f1:3d:99:
         16:26:cc:d6:cb:7c:70:55:99:b0:76:53:4c:77:25:3a:a6:7e:
         99:69:e4:58:60:17:59:a8:54:26:5e:0b:d7:f7:a2:d7:da:44:
         60:85:ef:45:56:5c:c8:5a:6b:b8:3c:d6:a0:1a:90:4a:c6:b3:
         ff:35:34:44:35:d6:e2:2b:f6:3f:8c:93:a0:14:46:17:67:d7:
         ac:09:19:6d:1e:6a:73:07:bb:3e:69:ff:85:94:97:9e:89:88:
         24:1c:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:12 2025 by rpki-client