This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File:                     k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier:          3xqZfmjnFFC2j/Xg36qdGHsKiW/PkrKjH17LE+7IdgM=
Subject key identifier:   F3:E3:48:A4:DC:E9:6A:7D:F2:AD:B2:BF:86:E2:0B:F6:57:97:B9:6A
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer:       /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial:       019AF209A2FFC26A3CCF18946BD958135F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 05:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:48 +0000
Files and hashes:         1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
                          2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
                          3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: IHx2Q9M8S7k1vVRQ3avrTwGufplzoffCngA82J6ZlTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:a2:ff:c2:6a:3c:cf:18:94:6b:d9:58:13:5f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
        Validity
            Not Before: Dec  6 05:01:48 2025 GMT
            Not After : Dec  7 05:01:48 2025 GMT
        Subject: CN=f3e348a4dce96a7df2adb2bf86e20bf65797b96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:5b:bc:5f:99:5b:f5:22:94:18:38:97:a9:
                    23:b9:4a:36:e5:66:83:51:79:0c:df:fe:74:32:01:
                    ae:52:bb:c6:dd:70:b0:b0:ea:01:64:26:34:03:83:
                    07:e7:1e:82:f0:b1:0e:5f:83:3e:fa:33:da:91:1d:
                    b3:20:e2:a2:2a:e6:e1:ee:8c:88:da:6e:d0:0c:8b:
                    a4:1e:f8:f1:97:cb:3d:9e:6e:85:43:7f:3d:1b:31:
                    40:f7:35:92:7d:ce:af:db:e9:41:f8:e6:91:10:3d:
                    17:0f:e8:79:e0:b4:39:f8:95:f8:68:76:63:c0:db:
                    73:87:69:e9:5f:29:43:2f:12:46:3d:fa:24:db:26:
                    f6:2b:ce:7d:24:fd:6f:a2:2a:60:c2:82:05:4d:a0:
                    10:39:06:e5:d7:77:df:1c:8c:7d:31:d4:3e:6e:88:
                    e2:8d:bd:1d:fc:9b:1a:c3:b6:65:2f:64:b6:60:bf:
                    54:bc:dd:12:82:e7:56:40:bb:02:0c:23:46:4d:9d:
                    3a:ab:2f:25:ef:0c:bb:d7:7e:35:29:ff:35:12:07:
                    4f:5d:18:7e:0e:dc:4a:00:6a:fa:e1:0a:a1:97:84:
                    e3:bd:54:b9:b5:f3:d4:12:d2:36:f3:e2:01:af:f6:
                    d2:d9:49:80:8c:73:8b:e1:49:a0:ec:62:18:ae:88:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:48:A4:DC:E9:6A:7D:F2:AD:B2:BF:86:E2:0B:F6:57:97:B9:6A
            X509v3 Authority Key Identifier:
                keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:1b:50:4b:f9:0e:c6:b4:68:a2:28:11:70:f7:45:43:3d:
         9c:c7:52:32:44:76:e9:a0:5e:3b:25:9b:27:6c:09:5d:53:5a:
         c6:33:78:66:e7:f3:06:3b:91:61:ac:b5:94:03:7c:d1:93:f2:
         22:b0:be:70:9b:69:33:8c:66:eb:5a:d0:1c:1f:b2:36:37:b9:
         3a:16:34:0b:d2:c8:af:c1:d0:de:e3:a8:e3:d8:8c:14:b5:c7:
         55:75:45:6f:27:c9:61:b9:3d:4d:9e:ab:74:77:1f:43:c3:57:
         24:74:a4:8b:e2:4b:25:cd:ef:44:cf:ce:ce:0f:22:c1:6c:c1:
         dd:34:3b:48:7a:a3:e8:c1:32:4a:80:00:51:2f:53:bd:50:92:
         ab:5d:c9:ba:f4:42:2c:f5:f6:b5:63:fc:3e:58:a6:b0:05:68:
         02:a1:58:06:9c:db:ef:e8:14:7d:9b:b4:94:43:73:a2:a4:eb:
         69:76:37:6a:36:99:15:00:fb:ba:d7:f9:e5:f8:51:a1:7d:33:
         b3:3f:78:22:6d:83:37:36:de:4c:e5:34:09:93:7c:24:e9:1c:
         e9:48:74:f6:90:ba:9b:20:fa:f7:6d:3d:96:a0:6c:b5:ca:75:
         fc:06:02:43:25:05:87:b6:96:59:d8:29:31:85:98:ac:47:ee:
         38:08:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:36:38 2025 by rpki-client