This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File:                     a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier:          xnXjQrHEZ5bhe+KIjjfYPAO7yRQa2BdraYyIHQody9I=
Subject key identifier:   B7:6B:9A:57:D7:84:A2:6B:07:BC:F0:D9:CB:94:D1:68:28:E6:E2:95
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer:       /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial:       019AF1647570AA60A3C93301B3AC56A0194B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 02:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:23 +0000
Files and hashes:         1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
                          2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: AsN9WLPtKTt54vw4wImF7m53eI87ehCpmdm1AFH/ibU=)
                          3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:75:70:aa:60:a3:c9:33:01:b3:ac:56:a0:19:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
        Validity
            Not Before: Dec  6 02:01:23 2025 GMT
            Not After : Dec  7 02:01:23 2025 GMT
        Subject: CN=b76b9a57d784a26b07bcf0d9cb94d16828e6e295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:9d:51:65:30:de:01:ad:49:07:36:9e:23:
                    f6:73:a1:4a:d2:9c:e7:7c:49:f7:47:bc:d7:d4:13:
                    a7:d2:4a:c1:ae:e2:12:f8:b6:fa:46:98:fb:38:37:
                    27:bc:bf:2e:ed:11:7c:0c:52:11:28:89:61:a6:75:
                    82:51:9e:af:fd:01:f8:fc:12:ed:43:fd:88:82:9a:
                    f7:8e:12:20:5c:09:77:0d:3f:d0:53:bb:48:52:fd:
                    82:eb:dd:c9:ea:79:67:66:b2:e3:04:13:c6:01:73:
                    f4:58:8b:26:ae:0e:a4:33:f7:49:7b:a2:df:09:cd:
                    b9:79:6f:cc:54:72:51:aa:25:1d:27:5d:39:a8:42:
                    3b:2f:95:fa:73:a0:4a:17:7d:dc:bc:d8:28:30:7d:
                    7f:a9:ba:29:81:c8:cb:5f:00:a9:02:c7:0d:13:fa:
                    9a:eb:ec:6d:b4:c6:00:19:6f:03:b3:dc:ef:bc:88:
                    7c:7a:f6:2d:a4:43:dd:e6:a0:dc:00:d5:56:f4:45:
                    f1:84:cf:c7:8a:1f:0a:41:51:3b:25:89:66:5b:2b:
                    e5:28:37:0a:91:84:91:a7:d3:08:c5:30:f9:61:6b:
                    eb:45:12:f6:41:cb:49:94:39:d3:55:c9:47:ba:37:
                    6d:3e:a5:6f:08:54:69:9a:57:54:da:5f:28:3c:f2:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6B:9A:57:D7:84:A2:6B:07:BC:F0:D9:CB:94:D1:68:28:E6:E2:95
            X509v3 Authority Key Identifier:
                keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:a7:69:84:db:ab:d1:97:e0:f1:b3:c5:c0:d0:ce:c3:9f:
         8c:fa:6b:88:a1:6d:2e:c9:22:8b:d0:80:71:40:13:21:a6:5d:
         2f:3a:d7:c5:eb:0a:b4:72:fd:b9:77:fb:1c:21:3d:12:35:cb:
         47:24:87:b8:ed:24:03:3e:95:92:5d:2d:54:bc:95:e1:b2:7e:
         33:78:c8:ec:df:29:72:c6:f6:9f:a0:99:d7:fe:6e:69:2d:f0:
         94:3b:45:86:83:53:d2:8c:03:aa:6e:96:8e:40:b8:14:f6:6f:
         b4:62:1f:d7:89:26:46:37:e0:8f:25:c4:e8:87:dc:16:8a:b0:
         ef:cd:25:02:24:7c:0c:20:09:bd:31:33:6a:c1:2d:18:48:99:
         db:da:a8:d4:c7:61:76:d5:f2:bf:73:0b:23:1e:bf:4a:17:1e:
         f9:4f:ea:1c:45:28:c0:00:f3:50:0d:a6:bc:c3:e0:e3:fe:59:
         7f:1f:7d:18:13:dd:97:1b:91:47:d4:0f:d4:3e:9c:27:e5:7f:
         03:a6:29:6a:f8:8c:a4:dd:45:94:b6:e9:f7:85:70:58:c7:18:
         24:c7:a5:65:00:13:08:9c:7d:58:c2:18:c6:1e:c3:79:54:46:
         45:c6:41:26:4c:5b:aa:97:9a:42:b1:23:3e:f5:a0:e7:45:6a:
         1d:fe:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:27 2025 by rpki-client