This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File:                     BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier:          am8B4VyLVnM58rcNPN4zbd8rbMTwY6u9wWpR0JSD1iQ=
Subject key identifier:   4C:99:E6:5C:06:28:53:50:56:30:94:AD:50:3A:AD:42:50:34:6B:3C
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer:       /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial:       019AF1645ECAA3A0F3689C00BD99A7A7B33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 02:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:18 +0000
Files and hashes:         1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: enJx1H5ApUxcrfDNNaTqczKGHimJnZSvFXjkikxhN38=)
                          2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
                          3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:5e:ca:a3:a0:f3:68:9c:00:bd:99:a7:a7:b3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
        Validity
            Not Before: Dec  6 02:01:18 2025 GMT
            Not After : Dec  7 02:01:18 2025 GMT
        Subject: CN=4c99e65c06285350563094ad503aad4250346b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:81:79:cd:72:4d:6b:10:60:ca:9a:2d:3c:
                    67:8a:48:cc:c4:d4:21:1f:88:87:1b:2f:bb:b6:47:
                    7a:05:33:83:f5:31:7f:d5:08:f0:da:97:c3:4f:cf:
                    f4:0b:2c:00:32:34:9f:e0:dc:cc:35:d5:cb:eb:8e:
                    85:c0:a6:4d:ce:ab:a0:d1:68:e7:98:9e:26:c8:85:
                    37:67:27:a5:7c:fc:37:a6:89:ce:41:74:b7:97:df:
                    21:5e:7b:e7:47:93:22:8e:c5:fd:c7:b8:71:d7:67:
                    46:b9:b7:78:19:e2:3f:3b:98:3b:13:37:a0:88:a7:
                    84:fc:0e:1a:5a:e8:78:1e:53:ef:25:38:3b:72:2a:
                    94:71:cf:2c:bc:f8:b9:62:b4:5b:de:c5:11:94:0a:
                    13:a0:1d:d8:6c:72:6a:63:52:16:e7:04:2f:dd:f1:
                    d1:a6:05:cb:75:3c:b5:c9:5e:ef:29:6d:b5:ee:cb:
                    57:fd:02:b0:23:5e:3a:a8:7d:ae:7a:e5:c9:5f:5b:
                    a3:00:17:b7:91:ba:41:c1:88:aa:01:9b:37:9e:e9:
                    8c:94:5b:94:65:9a:0b:f2:78:b5:f1:8e:84:df:b6:
                    07:2a:78:8b:a4:2f:b8:63:e5:88:2c:92:c2:0e:a6:
                    eb:f8:ba:90:95:b5:c1:1e:8c:6d:e6:6d:5c:09:d5:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:E6:5C:06:28:53:50:56:30:94:AD:50:3A:AD:42:50:34:6B:3C
            X509v3 Authority Key Identifier:
                keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:78:64:ef:04:e7:21:ad:05:3c:3f:11:19:04:a4:91:7a:31:
         1c:33:87:cf:f2:fc:56:cd:e8:46:20:fe:70:61:57:61:b6:e6:
         69:80:53:b0:3a:a8:59:23:81:1a:80:1e:46:a3:6a:91:9c:13:
         a4:dd:08:bd:69:4a:c1:8a:9a:11:0d:4b:5e:c2:72:83:35:3e:
         e7:8e:ca:68:85:4e:e6:04:42:2b:1e:e7:c0:70:20:62:fb:95:
         5a:a3:ea:77:28:67:c9:a7:d5:61:53:a8:70:e0:3a:e8:a2:bb:
         b1:63:68:86:89:18:e2:a7:e8:4a:ba:27:91:39:cf:f0:8a:2f:
         08:7d:33:32:12:b5:8f:d2:00:9a:25:1e:9e:39:7e:b9:33:3f:
         80:38:9e:67:62:b3:7f:3a:13:be:0f:4b:a4:1a:04:9a:6c:3e:
         82:57:61:fd:b6:67:fc:fe:22:a7:c4:45:a7:9d:ed:91:ef:a4:
         c7:71:25:1e:b0:e3:19:34:a9:f5:a6:55:d8:f8:a0:88:6b:22:
         ee:e3:b6:58:88:8a:85:fd:03:ea:82:4e:76:b2:96:2c:4a:a9:
         c2:3d:59:00:2e:00:85:56:9e:e4:da:19:a8:6a:86:b9:f7:6e:
         f8:1f:6a:c9:b8:27:b4:85:72:1d:2e:89:93:d0:0a:1d:ac:56:
         90:46:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:09 2025 by rpki-client