This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
File:                     Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft (raw, json)
Hash identifier:          AcjZGcrwjJoSQKKc/n0e2PyJ4JMdcmS0YwS/kUjbmbE=
Subject key identifier:   8D:B6:F6:A7:E2:B1:63:93:36:E7:4C:80:39:2F:01:24:EA:C6:EE:44
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       019AF163E4F94C7CD0253BD58CD8D181F616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
Manifest number:          1657
Signing time:             Sat 06 Dec 2025 02:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:46 +0000
Files and hashes:         1: FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa (hash: j140J+F2FieGPuclb2mIxRwUBHdQxhpr5HBQnLeYiuY=)
                          2: QwwF_wEdyDROs6QadM_Il4CHbmo.roa (hash: wIhy46sTXD8c4yrBC6xzFGpvCG5G7CsjAqGsWxX4VHQ=)
                          3: Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl (hash: nzBCelVPfOGBRXbbobT9Uo9fqTEHhM2SoKaTYL8RWw4=)
                          4: fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa (hash: 28gFmZmHqptl7sCCfNJhDhWI9ZQKOET/7qvAVv/S5j4=)
                          5: mff-npQ0Pu3sROiTHEOvBwZLWRA.roa (hash: f88UK+EoUCTbzRw+OKXdLM0HrAMwpmJb1NPAp9nu2IY=)
                          6: xATH_4DImK8fd5hc84k_g1PniNs.roa (hash: WRPuSYa86Ir4oWe89J036B9Z8F9HC0m1Vigt9eZnloE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:e4:f9:4c:7c:d0:25:3b:d5:8c:d8:d1:81:f6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Dec  6 02:00:46 2025 GMT
            Not After : Dec  7 02:00:46 2025 GMT
        Subject: CN=8db6f6a7e2b1639336e74c80392f0124eac6ee44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:f5:79:b3:b8:2f:1b:51:b3:f1:77:0f:d6:
                    56:73:fb:75:c1:f1:e6:39:1f:93:c6:b2:dd:c5:00:
                    23:b2:2b:26:82:1d:6f:f3:b7:56:f7:ac:26:7f:e5:
                    3b:67:10:b7:4f:86:d5:67:fe:7d:8f:51:4f:99:59:
                    dc:b2:01:2e:f2:73:02:a2:ce:3c:3c:1d:e7:62:66:
                    c0:d5:c7:15:03:88:94:97:6b:d3:5b:3d:16:f5:6b:
                    73:bf:56:96:c3:dc:8e:fa:b3:4e:6e:68:cc:0b:9f:
                    5e:4d:3d:9b:63:3f:22:7b:72:43:9f:36:a8:06:96:
                    7e:32:e7:fe:8e:2b:69:b2:dc:e3:60:a5:1d:a0:2d:
                    2d:c9:4a:a6:57:b0:c2:23:8c:db:fe:b6:2c:81:29:
                    46:6f:56:82:c1:94:e7:91:b1:90:0c:be:2d:35:fb:
                    b8:7c:7a:52:f2:ac:a0:21:e8:da:2e:97:0d:49:cf:
                    31:c9:31:f0:ed:c8:ed:e1:a5:6a:f3:52:15:ac:11:
                    ab:3c:41:83:fe:57:bf:9d:7f:c8:7b:aa:f0:8d:33:
                    60:57:43:45:11:07:d7:df:c2:8d:8f:d6:0a:18:15:
                    a8:b2:cd:e2:eb:fd:59:f0:45:6d:11:50:cf:3a:48:
                    bc:ee:11:53:e2:7d:dd:66:4a:93:57:51:6e:b7:86:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:F6:A7:E2:B1:63:93:36:E7:4C:80:39:2F:01:24:EA:C6:EE:44
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:21:96:b5:60:d1:a8:d7:c8:f4:d8:82:0c:ba:19:e3:43:49:
         32:82:dd:f2:c3:60:c7:53:8c:7d:2b:be:a6:49:87:75:9e:e6:
         51:95:95:e1:1d:00:00:05:24:4c:ae:ed:d8:d7:d6:64:0c:1c:
         27:fd:46:66:7c:57:37:d3:46:2c:00:6a:08:c8:72:0b:62:4e:
         70:db:67:88:0b:75:51:3a:4f:4e:ff:18:01:07:33:31:2d:bf:
         1f:22:a0:5f:82:07:50:00:15:bc:2a:b2:9a:33:b5:f3:d9:d4:
         9e:9f:ac:55:65:d6:85:48:cf:c2:30:cc:71:7f:92:3c:a5:71:
         74:ef:68:a3:bb:7a:89:4b:51:f2:4c:c0:f3:b0:50:87:2d:1a:
         14:f8:ad:5e:25:09:dc:42:69:f0:0a:fe:95:7c:be:a9:c4:82:
         6d:89:85:f8:8b:91:c5:9b:f8:03:10:d2:16:2e:a6:ee:f9:53:
         a1:f9:fc:c8:27:33:8c:7b:e2:3e:fe:de:46:f4:4d:c7:8a:c5:
         7c:bc:b0:a2:64:2a:98:a1:84:f7:16:98:23:90:ed:dc:54:37:
         8a:bd:58:28:0e:c1:de:f6:ba:88:e7:25:98:41:3d:02:00:77:
         a5:13:c7:fb:b3:89:7c:32:f4:0a:24:15:62:ab:b0:ea:8b:64:
         6d:02:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:35 2025 by rpki-client