This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          fPrqSGrGsOCJCQ9X5FY3UiSbo///PM4sv0RpsoYh7ok=
Subject key identifier:   91:53:94:CE:33:AC:AA:A5:AC:5B:44:A4:09:28:BB:42:7F:07:38:EF
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       019AF2768F37C5447DE85046CDF9AA81E178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 07:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:47 +0000
Files and hashes:         1: 1jmJ2HwhrLQ2gbaEWJqzaryRG8c.roa (hash: pO4VfZ/vbc6gNeT/zyuHOWdN7wKxeSrY9OMKhLOa++k=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: Epw5/ifP2vrgqIOTni8LEHt5zi0Fy25XJ+WhjcUxgrk=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:8f:37:c5:44:7d:e8:50:46:cd:f9:aa:81:e1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Dec  6 07:00:47 2025 GMT
            Not After : Dec  7 07:00:47 2025 GMT
        Subject: CN=915394ce33acaaa5ac5b44a40928bb427f0738ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:11:47:eb:c0:84:9d:2a:30:55:a2:ea:da:
                    84:89:73:f2:dc:9f:34:24:c9:0d:fb:1a:f0:32:bc:
                    63:56:73:53:bb:bc:63:37:43:b0:a2:aa:ad:79:4b:
                    2f:f2:26:51:2f:87:71:55:8c:0a:6d:b9:3e:00:15:
                    e6:d8:31:f6:b7:ab:aa:d0:7b:e4:18:05:53:5d:2f:
                    65:38:f5:68:86:b6:47:13:05:6e:d3:9f:dc:22:de:
                    de:9b:a0:bb:a4:f4:ca:69:ae:27:5e:9d:76:d7:df:
                    c6:ee:02:52:21:7a:c3:ed:1c:96:37:7b:12:46:da:
                    98:9c:55:41:d7:b6:92:06:70:88:dd:10:d8:aa:0e:
                    52:13:8c:62:e1:95:bb:cc:58:10:b3:9b:42:e0:7b:
                    71:5f:c3:e8:03:ca:bd:9a:15:78:7a:ab:9c:9b:f6:
                    74:92:c1:91:0c:b4:b3:a4:57:60:e5:31:28:c7:46:
                    1c:2f:48:62:fd:d2:d3:bc:49:34:ea:b3:d1:e2:8c:
                    95:2a:97:7d:4f:45:83:09:7a:f9:27:92:68:91:3d:
                    2d:b7:a0:aa:cf:57:c7:5f:8b:a3:48:3a:4b:4c:db:
                    6c:5b:5c:8d:1e:d3:c3:fe:88:96:d6:a9:87:35:28:
                    6b:bf:c0:3f:27:d3:5e:df:20:1a:0b:7d:2e:e4:df:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:53:94:CE:33:AC:AA:A5:AC:5B:44:A4:09:28:BB:42:7F:07:38:EF
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:75:fe:4b:85:2b:ea:83:c1:86:94:1b:27:80:90:c0:32:3c:
         f7:3e:9e:2e:e3:fc:b5:ea:25:f4:f4:82:ec:8d:3f:cb:82:f5:
         df:ea:ac:bd:11:3e:9e:bc:5a:2c:9a:c8:31:9e:31:7f:5a:ac:
         4d:c8:78:ca:f6:4c:aa:e1:92:ee:ee:51:21:4b:65:e4:6a:04:
         50:e4:96:ef:5e:3d:59:43:ee:bd:01:2f:9b:31:4c:ed:3d:98:
         c5:4f:ad:30:2e:a8:56:7e:38:0d:49:fa:69:2f:a5:01:14:4d:
         4b:c8:35:39:c7:03:39:f3:9b:00:91:a8:4e:7f:41:13:95:19:
         67:f9:8f:96:be:1f:d1:b9:c9:ed:60:19:c9:5d:a8:39:64:09:
         66:7d:c8:a9:cc:ff:a6:d2:2b:c3:5b:b9:b9:34:c3:05:6f:25:
         29:59:cc:f4:30:a0:4f:39:17:db:bb:aa:5a:97:fb:f2:40:b0:
         34:8e:b1:60:bf:9f:7b:ca:55:f8:a5:eb:63:ee:bf:a2:00:d7:
         7e:cd:4e:72:55:c4:73:35:17:1e:06:20:d1:1a:fe:b9:79:0f:
         4c:88:99:2d:83:f5:0c:a6:0f:a7:7d:60:29:09:45:fb:e0:4e:
         ba:ec:be:1e:8c:55:22:8d:66:fb:9c:19:dc:19:64:30:f4:1f:
         33:ee:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:03:06 2025 by rpki-client