This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          G3329MErj5JFLbwziHAUUf4MyJrPoY0xM3b8x6HZTWo=
Subject key identifier:   3A:83:DB:52:36:49:09:42:11:13:59:4C:94:14:86:9A:22:81:36:36
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019AF2ADBEF6C372EBC3F145BF0352B0EAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 08:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:04 +0000
Files and hashes:         1: 1-eDQG0lW6qJaqnPl-W2D7USsJOU.roa (hash: o6geDpXzRfzq+KqGmBjgU8yJ/MMEJhEhk7nT0703UAQ=)
                          2: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: xBVvblSmIFjaI+4/dqtfhAJ6Tm4rPJqS+XoueI1DkOg=)
                          3: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          4: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          5: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:be:f6:c3:72:eb:c3:f1:45:bf:03:52:b0:ea:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Dec  6 08:01:04 2025 GMT
            Not After : Dec  7 08:01:04 2025 GMT
        Subject: CN=3a83db52364909421113594c9414869a22813636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:9e:34:59:82:18:31:88:d4:0f:ba:49:f8:
                    53:f0:2f:5f:70:de:a4:b2:0b:67:f5:c4:54:30:a9:
                    6c:8a:8c:0a:e8:e6:9a:e6:44:3a:b4:60:44:92:e8:
                    5f:c9:b2:2d:e9:a6:8d:7b:2e:65:c8:fb:4d:0d:f6:
                    8b:50:e5:1c:6f:23:8b:9d:e2:60:e1:0d:d8:e5:e0:
                    9d:61:17:b8:58:a6:50:21:52:25:76:43:08:a9:66:
                    8d:6b:35:f3:c0:f8:e4:3f:2f:c1:95:b2:a3:a8:86:
                    84:cf:0c:fd:10:e6:8c:f4:24:a1:69:7d:05:59:58:
                    ef:76:11:ee:18:22:79:2d:06:dc:b3:b5:bd:2d:96:
                    cd:73:9f:20:27:17:9c:39:4d:3b:1f:78:b7:cc:0b:
                    f8:29:6e:2c:28:57:cf:6a:33:ed:cb:8b:85:56:47:
                    f8:5f:34:00:22:cf:6c:42:20:52:c8:95:3a:9d:92:
                    02:7d:d1:cb:bc:10:01:e2:1d:1c:72:12:49:b2:87:
                    9e:8a:20:66:07:e0:eb:a0:a1:71:57:8d:4c:63:42:
                    e8:1d:16:51:16:bd:95:f5:85:7a:90:eb:2e:3b:5c:
                    f7:fc:28:07:8b:8a:02:42:4c:93:a8:e5:3a:4d:e0:
                    37:68:ba:0e:6c:c7:ed:7b:21:a6:f7:2b:13:ed:d1:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:DB:52:36:49:09:42:11:13:59:4C:94:14:86:9A:22:81:36:36
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b2:1e:28:a7:6c:71:d2:9d:6b:0d:3c:17:8a:af:38:ee:f0:
         9b:5d:0c:2a:2f:0a:6d:e1:3d:64:68:d7:a1:95:d0:ab:ac:7d:
         37:5c:aa:ec:b2:78:fb:49:fd:be:c0:be:e3:db:86:54:48:fa:
         7b:c6:86:af:9f:37:99:eb:53:ab:bb:40:d9:26:2d:65:dc:6d:
         50:85:32:fd:1f:55:16:2e:1f:0c:08:12:8f:73:b6:77:35:78:
         fc:e6:94:87:3f:5b:21:51:48:32:a4:59:83:c8:e4:15:ca:51:
         fd:c0:bf:ae:15:d9:01:67:79:6f:ee:9e:2b:bd:46:29:7f:7e:
         71:29:00:d1:1e:db:8a:62:0f:1e:e2:f3:97:17:dd:e5:1e:b6:
         11:2e:a8:ef:30:32:ff:a3:31:c2:bc:77:bd:42:6c:9d:00:37:
         56:05:3a:59:c6:f0:75:3b:98:15:0b:74:50:1b:bd:3b:95:2e:
         38:ab:4f:84:31:c1:d6:bf:08:49:60:6c:e7:75:2c:04:82:6f:
         ea:68:4f:83:5c:28:53:08:1c:51:f7:a6:6c:e4:56:74:e3:34:
         25:6a:60:3f:62:0e:b6:90:77:86:54:b3:06:ec:82:b4:54:0b:
         cb:24:e2:f9:60:28:75:50:c1:fb:53:df:ef:a6:68:63:91:a0:
         5e:65:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:51:40 2025 by rpki-client