This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          q2YGNedhBpWAp+dfaY6n03RGMTSHQ4FZ23t7bmp+W4s=
Subject key identifier:   57:95:89:08:FB:D7:9E:C4:7B:E3:45:C2:B0:69:D1:C7:55:A8:BF:D2
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       019AF509C2350AFEAE5353F0094A9995D770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 19:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:48 +0000
Files and hashes:         1: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: 9oocRW6xxVUeydw0tyUvn+eLds30GdpzozAtZDZLYWs=)
                          2: G7UCO8Vqg1runszmtQBQmkn8DqY.roa (hash: 5UbSXfgLxbMjgxcmGz7miCGa9V5+dL7nrdVkUhcTIyw=)
                          3: Naw5SESv6F-7xw8AlzszEkwan9U.roa (hash: Mbo3Jub5v2CNI5HfXQyreqoCmBqpJFtpKsAqTMduHgY=)
                          4: ZIeftz8g6-61T0mBa0ClKG58PyI.roa (hash: bAh6A9SIv0Nw80HjsuLV5ZZhtF7rRyou/1nJ2bbqVfk=)
                          5: d_85lmU1RpGhphRgrIhRhEl6fKg.roa (hash: VpMz8KT7GjSVAfis0Pkct4zgkIxNQjh2YesKqba5huE=)
                          6: i0b6D-rT2FVTM19LqLSh15LYCRI.roa (hash: eAyg6w88G2QnqmNNJFWUnwDhKYl0dByuSLnfnUOvCnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:c2:35:0a:fe:ae:53:53:f0:09:4a:99:95:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Dec  6 19:00:48 2025 GMT
            Not After : Dec  7 19:00:48 2025 GMT
        Subject: CN=57958908fbd79ec47be345c2b069d1c755a8bfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c0:68:13:f4:f3:a4:bf:61:e2:2e:51:25:da:
                    aa:c4:fc:0c:84:02:63:4f:c9:c0:c5:98:4d:8d:18:
                    fb:35:7a:ea:c4:55:4c:56:72:4b:c0:ed:9f:65:11:
                    bd:eb:9c:aa:52:5c:86:98:0a:29:f6:27:75:d5:aa:
                    67:c3:f7:64:3d:67:dc:87:ec:e0:cb:4a:e6:23:ad:
                    d3:3b:43:d7:7c:43:d4:d5:e4:e4:1f:db:9a:66:05:
                    45:cf:22:aa:06:f5:67:65:0f:f3:db:e0:49:07:f6:
                    31:80:ea:88:d8:2b:df:15:88:a2:8e:29:79:69:98:
                    58:14:bb:45:f2:df:73:5f:25:80:6d:7a:2c:50:fa:
                    44:9c:21:5a:72:5e:44:0d:ff:8f:35:5e:fb:62:ad:
                    0f:e1:64:54:b2:ee:0c:45:e5:44:c7:39:c5:7f:84:
                    88:17:01:bd:40:f0:e8:bd:91:99:13:62:48:40:a6:
                    38:1c:4f:94:13:3b:32:cf:74:ea:d4:9e:71:7a:b1:
                    52:3a:04:bb:f5:d9:ef:26:8a:57:a1:8c:ba:de:d0:
                    7e:8b:b9:07:d2:32:e6:35:fe:aa:62:95:d2:66:b1:
                    0b:d3:3d:75:c9:19:0c:c5:ae:81:2b:c0:b5:97:c4:
                    48:b2:c6:94:00:34:be:7c:c8:aa:9f:2e:09:b4:93:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:95:89:08:FB:D7:9E:C4:7B:E3:45:C2:B0:69:D1:C7:55:A8:BF:D2
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:f5:27:a9:ba:51:de:04:f8:05:a8:bc:1c:fc:ea:42:3d:
         5c:59:3e:e8:8e:b6:58:4a:f8:14:ba:49:64:a3:d0:af:00:8f:
         3f:b6:3e:82:87:f3:5b:a3:3e:89:10:77:8a:0c:bf:ab:27:9c:
         c7:0d:3f:7f:dc:97:96:3b:d4:04:37:22:f2:b0:16:62:35:82:
         a2:46:20:58:dc:31:d1:83:8b:1a:e8:ca:12:c4:fa:b4:de:90:
         9e:cc:9a:23:05:03:40:e3:43:e9:69:04:31:9b:2a:1c:51:34:
         94:3a:a8:3f:2f:03:60:74:00:bf:24:31:3b:f5:fd:bb:b3:77:
         30:8e:2a:82:38:fe:2c:7a:5c:56:02:93:d8:da:aa:34:7f:82:
         97:17:2f:9f:fc:18:fc:aa:8f:6e:e4:7f:2b:4f:7d:f7:33:23:
         81:5a:68:85:7d:21:ce:46:4e:c0:99:4e:d9:4d:dc:85:cb:73:
         9d:be:ee:fb:fe:b1:c4:3b:ee:52:08:1e:9a:5d:72:b0:66:12:
         c4:e7:b8:4d:8d:04:03:87:41:a0:b4:51:3e:ad:d1:4a:d1:ce:
         44:0d:4e:c7:c7:60:c5:e6:1e:b5:11:fe:8f:7a:74:8e:9f:ff:
         52:94:25:22:43:db:65:fc:f7:3a:12:1d:13:18:a3:cd:14:35:
         6a:56:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:14 2025 by rpki-client