This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File:                     Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier:          5WMGY+qH9TXGjDYhBtmXUsumHuZQTTt10cB3dpfL938=
Subject key identifier:   9D:65:0F:D9:D2:0D:76:09:BC:24:A6:D4:EC:7B:8A:F8:9E:B7:32:DC
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer:       /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial:       019AF1641FFF8842E7F32805980C9ACE7A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 02:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:02 +0000
Files and hashes:         1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: 8C+FnhFH+MXbe9WFQFRBCDbDPdhyAw8qUDcw9Wn6Zvo=)
                          2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
                          3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:1f:ff:88:42:e7:f3:28:05:98:0c:9a:ce:7a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
        Validity
            Not Before: Dec  6 02:01:02 2025 GMT
            Not After : Dec  7 02:01:02 2025 GMT
        Subject: CN=9d650fd9d20d7609bc24a6d4ec7b8af89eb732dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:d4:85:1e:1f:64:b9:4e:b5:b7:e6:99:46:
                    c1:bb:fc:5d:79:3b:af:d2:b1:b8:40:9d:75:ec:25:
                    bc:59:18:ca:3c:eb:f2:c6:d4:2b:36:84:03:4d:56:
                    f9:c1:ea:ec:15:85:99:93:45:69:7c:c6:f6:43:9b:
                    52:6f:97:68:5d:e0:2d:8f:ec:73:7e:6d:82:6c:df:
                    6b:ca:09:26:87:28:d8:4d:45:53:58:0f:f8:28:5a:
                    fd:fe:33:18:91:1a:4f:f9:71:31:78:3b:4d:ee:fa:
                    a1:67:d4:9d:d9:98:e9:d8:b5:9a:69:d0:4c:a8:87:
                    48:d1:d8:42:3f:20:fe:18:6d:00:22:3f:b4:25:10:
                    d5:8f:86:fd:17:2d:c4:76:0f:12:c1:6d:bd:25:dd:
                    2a:d4:6d:12:99:ff:0c:92:e4:fb:55:be:36:37:c6:
                    06:f7:8a:2a:d7:20:f9:d4:12:9f:30:59:ee:7c:54:
                    55:8a:d0:87:e4:ee:67:ca:0f:a6:c7:5c:44:3b:35:
                    f5:02:e5:4f:63:4d:6d:5c:dd:20:c8:df:bc:f9:e2:
                    04:a3:01:ba:0f:24:83:c2:46:0a:5d:45:f8:84:b5:
                    ba:90:19:98:69:05:a8:c8:2d:5a:3f:a6:b8:22:61:
                    66:c4:b2:55:9c:cb:9d:ff:8a:f0:50:6d:48:c7:03:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:0F:D9:D2:0D:76:09:BC:24:A6:D4:EC:7B:8A:F8:9E:B7:32:DC
            X509v3 Authority Key Identifier:
                keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:d9:37:36:bc:a1:8e:12:a3:27:38:97:50:0e:57:04:62:
         3e:50:c1:83:12:2d:86:b6:3f:46:bb:62:40:a6:02:20:c2:d0:
         1f:90:c9:1f:db:46:d0:3f:07:da:66:e0:86:1e:5f:0e:b7:8f:
         dc:c7:37:5a:e3:1e:ef:f9:a7:6c:e2:15:ba:2f:fe:32:19:21:
         f4:16:1a:b6:5e:f1:4b:0d:00:0f:eb:de:b1:7b:32:82:e9:ed:
         42:51:aa:e5:f3:10:52:8b:71:c5:58:ba:db:93:d0:c2:f1:27:
         af:f6:5a:05:80:e6:2c:33:cf:eb:fc:d5:4b:23:26:46:3d:31:
         78:65:7a:8d:ea:92:5c:56:ee:5c:9f:6f:75:7f:c6:21:3c:8d:
         2a:71:9f:f3:21:6d:aa:37:74:df:f3:43:47:50:22:2c:b3:6a:
         00:31:a7:04:86:dd:b0:be:9f:ba:17:7b:0d:4b:0a:bb:0a:62:
         58:91:de:0e:05:cb:73:a6:87:3f:d9:4f:ee:c2:a2:2c:d9:f3:
         10:44:bc:19:47:88:28:06:27:1e:88:15:85:ec:6d:27:1b:40:
         9e:2a:24:ab:63:cc:ff:76:1e:04:9a:9a:7f:61:c9:d8:b8:ae:
         d7:32:e6:7a:ea:bb:9c:04:a5:10:db:9a:09:44:50:46:3e:67:
         1b:2a:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:33 2025 by rpki-client