This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          T3M4+5cKRKi53NyeMGzfMQbXFWxTBkPAg9AeI6zAc/E=
Subject key identifier:   19:80:9E:2C:CA:D7:F2:9F:00:96:16:0E:0D:05:B4:F1:14:59:01:83
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019AF12D1187179B251C74D8ADFB8658B7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:53 +0000
Files and hashes:         1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
                          2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 8OheOgGa2yhUAVGd8taX5DMJBPoJJJlTN1km7s3u0hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:11:87:17:9b:25:1c:74:d8:ad:fb:86:58:b7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Dec  6 01:00:53 2025 GMT
            Not After : Dec  7 01:00:53 2025 GMT
        Subject: CN=19809e2ccad7f29f0096160e0d05b4f114590183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:25:6a:0c:01:78:87:39:6b:90:bc:0b:a4:
                    d4:13:36:46:40:36:de:3c:3c:6a:ab:26:cd:31:a4:
                    22:67:fa:93:0b:11:8a:15:46:66:78:20:3c:3e:13:
                    7a:73:a4:c4:56:ef:03:33:76:bc:5c:a1:3e:3a:73:
                    bc:04:ff:67:c6:33:8e:d9:58:8f:a6:a1:0a:17:a0:
                    57:c8:9b:0b:99:ee:91:9b:f3:a2:99:3d:f8:8b:b3:
                    87:6b:bc:aa:38:9d:7d:cc:0c:f7:6e:da:a9:e4:cb:
                    08:08:01:4a:97:17:a2:1a:9e:6b:38:3a:dd:62:c9:
                    d1:bd:58:20:c8:4a:5c:67:22:95:de:b8:b0:68:4b:
                    1c:c8:10:53:24:86:16:a7:48:58:67:78:eb:9c:3b:
                    53:51:76:33:db:00:ec:ef:41:df:03:1b:46:73:95:
                    e7:d9:bf:04:a6:92:f9:e3:f9:b0:36:c8:3e:d4:fe:
                    86:1d:75:05:39:f2:cb:70:b3:9b:2c:a9:d3:c1:b2:
                    6a:0e:80:c9:0c:bf:9b:c2:94:49:d3:1b:b1:b6:4c:
                    6f:d8:2b:88:e2:b7:9f:13:36:c7:8b:8e:ae:6a:ce:
                    f9:b4:0b:c7:21:81:86:03:fc:0b:c5:b9:6d:10:75:
                    8f:e4:8b:ef:80:1d:aa:fe:37:e2:f2:36:9e:7a:d6:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:9E:2C:CA:D7:F2:9F:00:96:16:0E:0D:05:B4:F1:14:59:01:83
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:c6:be:db:c6:77:f7:05:95:22:9b:39:20:12:66:a4:d6:
         5c:f9:6a:56:af:9d:51:8c:6f:69:77:86:4a:39:c7:d5:e6:7a:
         ff:bb:13:0b:ab:b3:1c:52:f9:ba:b7:1b:8b:14:98:03:04:56:
         c9:61:e3:1b:f4:a6:40:de:2b:5c:32:78:4b:0d:fa:46:c3:a4:
         0b:b6:51:cb:b8:27:70:e0:68:e0:7a:9a:57:b0:5b:c2:66:b9:
         05:6f:0c:9a:59:12:6a:30:0b:44:86:38:60:57:ce:c8:c7:80:
         87:21:4a:db:08:d5:97:90:62:83:0e:5e:a3:c1:dc:19:21:9f:
         1e:a0:d2:eb:ae:61:98:dc:60:27:31:71:c5:e5:39:99:c0:16:
         7b:dc:be:7b:d4:49:ab:63:4c:a5:f9:d9:d0:20:25:05:e2:4f:
         e4:5c:36:b1:e7:8f:82:59:f9:e4:93:21:65:8a:60:c4:ca:0a:
         5a:9c:d7:f8:7d:23:ac:80:8b:4c:3b:8c:36:38:31:37:42:a9:
         c5:36:41:ed:e9:34:07:6f:ec:41:d9:66:0d:e3:2e:1f:93:92:
         c5:d9:19:04:28:02:1b:49:40:25:f3:00:66:e3:c5:96:3d:ab:
         c3:7b:cb:0a:ae:a9:4d:34:80:eb:b0:db:c2:af:dd:aa:3b:63:
         44:03:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:49 2025 by rpki-client