This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          GTopQyShdGQ3VWMVRBD1WGFH2mTXf0JT6kBSXHyOnbE=
Subject key identifier:   A6:11:25:B4:5E:87:7A:B8:5C:C9:18:E8:BC:05:22:2D:73:2E:FF:8A
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019AF3C003346FB849934D86A9AB9FADFCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1791
Signing time:             Sat 06 Dec 2025 13:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:38 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: U0ahsFDx5u0UK2eywjGAnw5EwfqVY53uBaJijCxJsRI=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:03:34:6f:b8:49:93:4d:86:a9:ab:9f:ad:fc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Dec  6 13:00:38 2025 GMT
            Not After : Dec  7 13:00:38 2025 GMT
        Subject: CN=a61125b45e877ab85cc918e8bc05222d732eff8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:af:36:ec:76:6a:96:34:64:fa:56:29:6f:
                    79:94:46:36:69:bb:ba:87:13:a7:a8:80:11:77:d6:
                    63:6b:44:6a:5f:17:85:b6:52:aa:4f:b3:7f:38:fc:
                    cd:5f:3b:a1:34:51:e3:54:a7:2a:43:99:f1:03:36:
                    b4:51:1c:49:72:c1:09:8e:59:8b:0e:12:70:90:4a:
                    15:7d:00:0e:6a:a2:90:7a:cb:42:03:e0:48:da:9d:
                    7d:fd:a7:93:ac:b4:fd:f2:a6:77:f5:f5:e8:ea:60:
                    14:ce:05:3a:11:5b:86:4d:25:56:51:05:48:c7:98:
                    ad:6e:2a:d2:2b:47:be:bc:ff:06:bb:70:59:6e:30:
                    b5:79:05:d0:9c:07:79:cd:50:55:15:5d:81:5b:f0:
                    2f:78:69:1b:7f:07:f5:60:34:a1:2b:1a:0b:01:80:
                    84:db:7b:e4:1b:c8:a0:90:21:07:8a:bb:45:f4:eb:
                    18:80:87:c8:ec:a4:a2:d8:f5:53:5f:66:a9:6c:39:
                    29:c2:04:a5:59:82:f2:9e:b6:91:87:1c:90:a6:01:
                    ae:d8:3b:52:6c:2b:83:ba:b8:5a:49:0d:f4:2b:c5:
                    a9:b3:18:94:8e:fa:9a:cd:8e:13:41:2d:aa:34:7d:
                    3c:8f:35:6c:18:96:c1:c0:53:d1:41:3d:49:65:50:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:25:B4:5E:87:7A:B8:5C:C9:18:E8:BC:05:22:2D:73:2E:FF:8A
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:f3:75:c3:08:dc:30:46:17:e6:40:05:53:ef:e6:db:fb:
         d1:ef:a9:21:c8:c6:de:b8:d0:c8:79:2c:3a:d8:b8:81:f1:2d:
         fc:d9:05:26:3b:b8:87:e6:bd:88:df:55:27:5f:40:55:89:45:
         29:2e:11:67:da:c2:6d:91:5a:fa:4d:e9:22:00:36:b5:87:25:
         8e:a0:8f:1d:13:60:4f:2c:62:dd:a5:a0:fd:18:a6:2b:cc:6e:
         0e:5f:39:53:7f:37:3e:74:d6:7b:15:2c:81:f3:f1:0e:08:d5:
         d1:08:17:3d:60:dc:61:a7:8d:76:37:39:70:be:a2:99:8d:1f:
         f1:1b:91:98:f6:dc:ce:a9:b5:65:53:11:75:18:37:c7:9c:10:
         22:29:16:b4:fd:c9:26:bc:3e:a6:1c:42:a4:c5:54:20:2b:d9:
         eb:03:cd:e5:51:db:41:de:e9:d3:9f:f7:bc:8c:cb:00:6f:35:
         85:e4:51:c7:87:b3:e8:3f:bc:df:de:e4:e6:f0:c8:16:39:88:
         ec:3f:22:87:e6:2e:dd:80:b0:00:68:5f:02:0b:c3:1f:1c:b7:
         94:7d:3c:bd:98:cd:5a:8a:1d:06:9f:6d:47:9a:08:b5:a5:d7:
         f2:a6:c0:00:bc:45:b7:c7:96:e0:63:fb:90:f3:24:75:c8:c5:
         c2:3c:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:41:44 2025 by rpki-client