This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          wxDdDwK+YWdRBfPJpIVl3eE6cTbLUgmPYk9hI3kgaUU=
Subject key identifier:   E7:61:A2:A4:BD:C6:8F:25:C9:EE:0A:AF:8D:23:2A:3B:E4:35:EB:20
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       019AF8E78BDEF66EBDF243BBD7D753F5189E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0AED
Signing time:             Sun 07 Dec 2025 13:01:55 +0000
Manifest this update:     Sun 07 Dec 2025 13:01:55 +0000
Manifest next update:     Mon 08 Dec 2025 13:01:55 +0000
Files and hashes:         1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
                          2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
                          3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: nVf0qaAzi28KSTp1whIvqTaPK20BGUYNrVGygpMkUiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f8:e7:8b:de:f6:6e:bd:f2:43:bb:d7:d7:53:f5:18:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Dec  7 13:01:55 2025 GMT
            Not After : Dec  8 13:01:55 2025 GMT
        Subject: CN=e761a2a4bdc68f25c9ee0aaf8d232a3be435eb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:89:3c:58:b7:11:e2:6f:1e:d6:c1:45:a6:
                    09:3b:36:cb:29:92:83:23:9f:e6:fd:25:a8:f6:98:
                    87:75:92:a6:39:b6:6f:81:71:fc:2f:ca:70:c8:90:
                    c4:08:c1:3e:39:a4:33:b6:e9:fa:78:6d:75:88:dd:
                    3b:8e:6d:3e:e3:60:8a:b6:92:9c:9a:6e:54:3d:69:
                    48:c5:4a:1b:38:8e:2e:4e:f8:1c:a5:70:ef:91:40:
                    82:84:7c:ba:d3:f3:c4:12:f6:9d:80:47:70:8a:4a:
                    7b:c4:1b:93:b5:28:2a:be:a0:8a:98:f8:df:b3:53:
                    50:28:50:1d:0a:80:7d:76:6e:6d:05:34:2b:85:99:
                    b8:06:60:b5:05:22:20:17:8d:72:52:ab:20:6c:8b:
                    f5:42:17:c6:15:3e:de:7c:45:48:35:01:d8:86:f9:
                    f7:b6:11:6d:db:84:b7:bf:2b:c9:4d:02:5a:27:05:
                    23:7a:93:ed:2b:b0:f6:2c:6a:8f:b5:d5:e0:89:50:
                    71:b5:82:7b:5b:36:c2:ff:aa:92:f8:f0:6e:8a:6c:
                    4e:00:52:9d:0e:34:e9:17:0a:a2:73:1e:71:42:85:
                    03:8a:05:32:ba:bf:5f:6f:8a:5f:62:e1:a5:e3:83:
                    7c:e9:9d:64:93:6b:cc:74:17:8c:16:41:15:d6:1d:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:A2:A4:BD:C6:8F:25:C9:EE:0A:AF:8D:23:2A:3B:E4:35:EB:20
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:1e:df:d3:42:5d:8b:55:f5:1c:e1:a5:86:6c:30:69:b8:
         79:b7:95:33:6c:5b:1a:f3:64:61:b4:80:7e:81:94:61:22:fb:
         29:bf:21:78:95:c2:4c:54:ea:88:d9:02:2b:68:b0:17:56:8b:
         72:ab:f1:f4:43:57:eb:e4:24:36:53:b4:1e:53:ea:e9:b9:00:
         10:4f:d3:dd:3a:86:a7:de:3e:09:c2:b3:29:ad:af:96:8a:3b:
         31:e4:2b:94:3d:d1:f7:f1:27:cb:b3:29:f0:87:50:f3:58:ca:
         d5:7f:ce:9b:0e:25:41:43:ba:5f:e3:b7:d4:f6:b2:de:5b:5d:
         9f:f4:de:d5:c9:0b:80:bb:92:1e:48:2b:c0:88:49:0e:3e:ee:
         cd:2f:80:c3:3e:02:3f:13:a8:a1:19:fe:8b:ce:d6:ab:8e:d0:
         a5:bc:1a:17:d1:f5:fe:05:9f:95:56:da:cd:bf:75:03:db:17:
         1b:20:ea:ed:c4:8c:a6:90:91:91:0d:d7:62:d4:18:fc:34:1d:
         5e:04:df:c9:01:06:ff:ba:df:bd:b6:a3:75:48:cf:ba:47:db:
         11:19:d7:cf:78:39:df:76:ec:3c:6d:23:26:3e:3b:54:8a:2b:
         51:cc:a9:b5:cb:05:9e:af:30:9b:74:3d:72:ff:88:49:74:e7:
         6f:22:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:29:40 2025 by rpki-client