This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          EbqxssZMPUSoiMNh9C/1FDkJjDkclAlXYPA+UxTt18A=
Subject key identifier:   17:3A:1D:84:2B:3E:94:23:1D:5B:54:D7:B9:DD:EE:D2:4E:05:02:36
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       019AF12E139BB823956BF07AB0956B8C1E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          10E2
Signing time:             Sat 06 Dec 2025 01:01:59 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:59 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:59 +0000
Files and hashes:         1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: Kdc5cQmcxivVRblPnHsSI350N3fYCQDpO0FpKD0Qz+o=)
                          2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
                          3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
                          4: hMX16ycD_uk-plT2tgBVk_QRIts.roa (hash: BUm/1cBRJ7uJXrwWDMYU8YunYRBuyMSTCIxHnMPsW0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:13:9b:b8:23:95:6b:f0:7a:b0:95:6b:8c:1e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Dec  6 01:01:59 2025 GMT
            Not After : Dec  7 01:01:59 2025 GMT
        Subject: CN=173a1d842b3e94231d5b54d7b9ddeed24e050236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:0c:01:8a:5a:73:52:f2:a7:1e:6d:bd:ea:
                    a7:85:aa:cc:4b:cf:7d:82:fc:19:2c:a7:b2:39:70:
                    1c:7b:2d:80:68:a9:d1:f4:68:ee:91:3a:bf:68:5c:
                    d5:59:c2:a0:7f:0e:33:c7:08:37:e2:fb:50:fc:cf:
                    6d:45:99:96:75:e3:47:66:83:34:64:3f:bd:21:89:
                    46:4d:4c:8d:e6:72:25:51:fe:13:3f:88:56:86:4a:
                    56:ea:ab:75:e8:7c:cc:28:af:ee:79:8b:9b:bd:40:
                    b6:c7:7b:e9:dd:ac:ab:14:66:79:6d:1a:cb:b9:57:
                    a7:ec:c1:dc:b3:39:54:6d:65:43:be:33:9b:17:54:
                    c2:f9:c4:14:a1:86:3d:3f:e9:3a:84:36:3a:61:fa:
                    1c:6a:0f:29:70:6a:9e:77:a1:65:5d:74:38:22:1f:
                    00:d2:e0:99:7b:e1:c8:1c:74:ff:bc:e0:f6:9a:57:
                    65:b4:89:97:dd:40:5f:9b:8a:38:37:67:20:93:da:
                    68:60:39:a5:82:f9:5f:ca:3c:68:a5:e5:b6:0e:d1:
                    73:09:6e:63:3e:28:1d:e8:57:fb:6b:4c:84:21:ed:
                    3a:6f:48:d3:54:0b:f2:7b:79:4c:7b:58:88:32:7e:
                    40:1c:31:3a:ab:25:4d:e9:0f:26:8e:f1:67:ca:c2:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:1D:84:2B:3E:94:23:1D:5B:54:D7:B9:DD:EE:D2:4E:05:02:36
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:62:58:7c:27:36:7c:0c:7a:b7:e2:c0:a9:78:07:17:64:c3:
         6d:f3:21:c2:b7:78:5b:22:45:9f:75:46:77:28:04:cc:c4:7a:
         b3:99:b6:30:4c:71:af:f8:d6:8f:4c:35:f5:0d:bf:fd:bc:ce:
         a2:d6:75:7a:18:55:2d:fc:af:aa:ce:e9:e1:6e:d4:24:45:9b:
         50:fd:6d:97:20:c7:cc:30:b6:86:ca:29:1d:2b:81:47:13:d4:
         12:42:94:1f:c2:9c:b0:55:e4:e7:59:e8:2c:b2:d2:12:b4:2b:
         56:da:1b:2b:52:45:41:8b:ad:f1:ad:e1:dc:c2:eb:e8:ef:9e:
         15:2b:d5:82:d4:62:5a:8f:6e:fc:e9:f8:bc:8e:d8:c1:35:eb:
         3e:72:03:ef:48:23:8d:bd:47:3c:3f:21:82:5f:08:03:c1:2a:
         90:ed:b2:a9:e6:0c:0a:02:a8:53:93:95:37:c6:32:d5:e8:3a:
         ea:30:d2:73:ad:94:98:c2:70:cf:13:56:d0:91:55:05:d9:1a:
         8c:04:4d:bc:9d:c7:6c:8e:e8:af:38:8e:b3:e1:a6:aa:85:07:
         8a:df:bf:3f:aa:2d:29:5a:78:31:b6:cc:df:ca:d0:85:d7:ac:
         61:87:8c:4c:b6:6c:b6:43:f7:cf:bc:c2:9b:7a:45:4c:00:f8:
         20:70:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:22 2025 by rpki-client