This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          gniOvFvvEigiV7KnNNKwFzFtftWFD0x8inPD3eXGYz4=
Subject key identifier:   9F:B2:C4:B8:53:02:26:D7:7D:44:9A:DA:92:C2:99:8E:0A:F6:A1:1B
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       019AF050FD189A2C2228A1EB6A9BCFAF0020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 21:00:30 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:30 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:30 +0000
Files and hashes:         1: 3-Ja7oUVjGguwh6QaF2yeAfwhyM.roa (hash: nrUNLtMMNN8x4oqm05IG63Gk5IknemEKbhNaDnkCTrY=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: aj5CPzIacFypGmzIBVGHUwcFaMS9kst0Ity5rPc12lE=)
                          3: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (hash: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=)
                          4: adzPWtlHDTvsggmKWbe4TnrcvIk.roa (hash: n14P1Q6Wx2eq+iqMHqpfTj36nMIIclkcTcwOpIeBWTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:50:fd:18:9a:2c:22:28:a1:eb:6a:9b:cf:af:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Dec  5 21:00:30 2025 GMT
            Not After : Dec  6 21:00:30 2025 GMT
        Subject: CN=9fb2c4b8530226d77d449ada92c2998e0af6a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:58:04:39:8d:26:3c:dc:46:7f:06:d4:b5:
                    8d:b0:6a:08:32:d8:7d:82:1f:11:12:4b:ee:4c:be:
                    78:c6:0a:cf:d7:c7:76:f7:21:f3:93:cd:44:44:ca:
                    ed:0d:7b:3a:62:35:10:b1:8d:85:0c:83:1a:b3:b4:
                    e9:39:93:5a:4e:5a:b1:5e:3b:84:86:04:fc:9d:99:
                    83:75:0e:98:5a:e6:9f:3f:ed:2c:d5:d4:cf:43:ef:
                    d5:7c:46:be:a6:4e:bd:d0:bb:c7:c0:a6:d4:53:87:
                    5e:41:19:e0:80:df:4d:b4:89:23:fe:03:32:5d:74:
                    66:6e:06:fc:54:b7:bc:45:28:46:c8:db:91:0f:8b:
                    ad:db:61:b8:87:77:cb:6e:60:6f:ab:48:01:45:1b:
                    1d:c9:b8:1f:32:b0:15:5d:d7:fe:71:c6:ba:8d:b2:
                    36:3c:63:c6:b7:8d:1d:19:77:42:b2:a0:32:eb:a7:
                    08:fe:f7:f8:ad:37:ca:60:43:1a:ca:07:35:14:59:
                    ec:7c:94:6c:15:c9:0d:b4:a6:26:5b:2a:16:4f:c7:
                    d8:40:4f:77:03:0c:3f:25:01:81:cf:04:ef:1f:58:
                    63:6c:71:03:f3:07:c1:10:eb:fe:77:94:11:08:52:
                    bb:11:d3:c2:8b:5d:8b:c4:24:4c:94:b7:ce:62:1d:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B2:C4:B8:53:02:26:D7:7D:44:9A:DA:92:C2:99:8E:0A:F6:A1:1B
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:f6:74:54:00:1c:d4:5d:63:d6:aa:b3:0b:d0:29:da:0a:
         a8:83:09:b9:b6:d7:35:c3:69:22:72:e6:48:b2:88:fb:a5:ea:
         9c:58:7e:c2:07:79:68:43:a5:da:00:86:9c:bc:33:b6:10:84:
         f8:f4:07:30:2a:16:7e:d0:2d:0d:2f:73:2f:a0:9c:12:dc:4d:
         b5:1d:c8:d7:e0:e0:45:3c:34:b9:5e:cd:a0:a9:d2:d0:7d:f2:
         4b:fe:1d:5d:2f:35:38:43:d5:cf:5e:28:a3:ee:b4:93:6b:5b:
         36:99:a4:8c:51:64:75:32:2b:8e:e1:c1:08:f4:82:3f:72:84:
         5c:53:60:5f:85:03:46:09:09:e3:9a:c5:b2:49:61:04:16:bc:
         c4:b5:50:1a:bf:00:48:92:5d:2a:37:b0:39:a1:01:e1:4d:9c:
         d8:55:02:19:b8:b1:32:30:1c:fc:b6:8f:c7:cb:b8:d8:74:01:
         91:99:32:1b:a5:ab:e5:c1:99:1b:ba:f7:cb:a7:12:a1:df:f6:
         8e:91:ec:71:a9:f2:98:b8:77:5c:dd:39:36:bf:fb:c9:db:7d:
         71:80:93:cb:f3:57:8b:76:90:d1:63:be:b4:3b:72:6f:e5:7f:
         da:e7:34:15:6f:fa:7b:c1:8a:a6:33:e9:18:93:c0:0b:89:b2:
         85:ac:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:12:31 2025 by rpki-client