This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          SV0f5LoQK2J2v9XF8YqUjMPPUSWMwkXy3lMmbRpngxg=
Subject key identifier:   EA:E5:48:49:51:8A:05:B9:1C:91:FD:1C:17:A5:98:26:61:8F:AA:2C
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       019AF12EBB5EB509CD56B11FC53813BA118D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          0CD3
Signing time:             Sat 06 Dec 2025 01:02:42 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:42 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:42 +0000
Files and hashes:         1: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: RS/mqNoj/FXM0nRMdvoe1u9SoTwfPA4iFgLVCWhUL9A=)
                          2: WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa (hash: iOllh5gi/7wnwzUfRzCTrEG6FgLIkJkLCK4mhZ+VRkU=)
                          3: hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa (hash: Qsefr5BUiMy2rqo2USmsjdMuNx9/rjIcX4pXPuOto6M=)
                          4: t1gHtFwa5agDSOfrfRir11uhmyo.roa (hash: YIC9w6VlHFB3KCLja0LdQ8JmLu/DL14I9GQCq+0Dsw8=)
                          5: tBwbvVkRx7tiigJvabZjuGdnpBY.roa (hash: d7Zp+BRTHnxt8s53ryw5c9y5CaJMgwW2OM5XwqLhxHk=)
                          6: tp85miaZEXw3Jo9EKI88rJNAxCY.roa (hash: w1A6qFijgoLv5j1rHfN1LVempKoIwt4pkO+GOzCoyds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:bb:5e:b5:09:cd:56:b1:1f:c5:38:13:ba:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Dec  6 01:02:42 2025 GMT
            Not After : Dec  7 01:02:42 2025 GMT
        Subject: CN=eae54849518a05b91c91fd1c17a59826618faa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:89:66:b1:9a:06:6f:c7:d0:60:a7:75:77:
                    97:ba:17:1d:9a:cd:de:85:dd:ab:c5:fb:7f:dc:b3:
                    6f:e9:3b:bf:5b:3f:01:b0:bd:1c:09:50:57:1e:db:
                    e0:00:29:7e:69:9b:dd:84:81:31:c9:54:27:7a:a9:
                    5c:6e:c6:bc:c6:36:5b:96:a6:33:cb:e2:34:51:e6:
                    f3:8f:0f:c2:35:2d:50:6e:72:b4:8e:26:a2:1b:1f:
                    1e:52:dc:8a:05:21:48:29:f1:9f:63:61:72:92:25:
                    ee:ed:c0:80:1d:d4:ba:5e:bc:66:b1:92:3e:50:02:
                    40:01:14:0e:20:8b:90:5f:28:b1:72:e2:e2:e1:30:
                    ff:7b:f9:ce:6a:18:68:78:9f:31:ad:3c:58:88:06:
                    58:ef:8d:6f:60:8b:bf:a1:f2:a9:cf:7f:d9:8b:ab:
                    d6:93:69:3b:14:64:9d:5f:8a:09:a4:6e:35:4e:a2:
                    96:76:10:a7:d1:a6:99:40:80:5d:55:3f:26:26:a9:
                    5a:bb:fc:94:90:26:d0:ac:2e:0b:cf:80:a3:82:4c:
                    f9:af:e7:7b:11:f0:ca:12:7e:66:8a:fe:30:22:a7:
                    45:2a:61:60:07:f1:87:85:f7:50:06:93:b1:3d:18:
                    8b:57:27:67:9c:e6:1b:5b:3d:7e:d9:50:38:23:a3:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E5:48:49:51:8A:05:B9:1C:91:FD:1C:17:A5:98:26:61:8F:AA:2C
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:6c:dd:c6:b6:d4:eb:43:25:b8:4e:45:44:e9:36:e4:78:
         a5:3b:c3:ab:a6:0c:d1:87:f1:11:3a:b4:66:29:47:33:c2:5f:
         ef:4f:3d:d8:10:7b:8f:b1:66:39:87:c5:6c:d0:ae:67:e6:da:
         1c:0f:08:8f:3c:a3:00:d7:2d:0f:ba:91:ec:89:17:1a:b3:e4:
         9f:15:ae:7d:a5:d6:46:f7:2c:01:fa:c5:4b:5a:cd:b7:87:55:
         cc:ed:81:5c:67:fc:2a:c2:e6:d4:21:ab:67:30:78:64:87:8c:
         42:4d:f2:73:66:b5:36:f1:c2:28:8e:b8:cd:94:3d:ab:b5:53:
         16:a0:5c:4b:7c:86:86:b7:cf:81:a3:38:5a:63:61:35:17:92:
         66:b0:68:8f:b0:c2:7d:35:c1:2f:d4:b6:a0:74:48:ed:4c:57:
         42:3e:42:90:e1:4e:33:17:66:b5:eb:04:92:b7:3e:5e:5e:27:
         f5:a4:f4:1e:6f:19:15:1f:da:3c:a8:8f:56:4c:da:2c:99:c2:
         23:84:5f:a9:a4:ef:52:de:8a:b3:d5:b5:36:15:a2:6b:75:bb:
         66:3b:21:a8:05:97:f7:71:ac:80:6c:5b:d4:bf:ac:f3:45:43:
         b2:73:2b:62:94:54:9e:f8:74:5f:23:2b:33:f2:d1:49:ba:ba:
         c1:3f:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:21:46 2025 by rpki-client