This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File:                     hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier:          tZpv8m/dALB/Jb7OO8UjbBsORfraF57NuIKUoq6759A=
Subject key identifier:   A6:61:CF:1F:B2:EA:46:B8:71:4A:AB:37:3D:B4:C2:0F:3A:ED:77:FB
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer:       /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial:       019AF208C779C81883F6F28D1F0BA203A092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 05:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:52 +0000
Files and hashes:         1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
                          2: XebRYOITfzcAbcv2WQiIUJzp9IY.roa (hash: /LlV1c2jBHdUzm3m7BbrQfvi7DnfI/2A+wzHJz5/0Eg=)
                          3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: /mUOyH5RoxPDYLa7rR5M/QKA5B3d50g233J/My12iwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c7:79:c8:18:83:f6:f2:8d:1f:0b:a2:03:a0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
        Validity
            Not Before: Dec  6 05:00:52 2025 GMT
            Not After : Dec  7 05:00:52 2025 GMT
        Subject: CN=a661cf1fb2ea46b8714aab373db4c20f3aed77fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:0e:1a:97:d9:4d:bf:f2:e8:27:b0:3f:00:
                    fa:73:10:4b:22:46:0b:8f:4b:bc:4b:93:04:20:21:
                    ca:90:a8:92:ed:fa:a5:07:3f:6d:59:0a:1e:4c:33:
                    4c:90:86:25:88:18:8c:88:3e:b9:ec:bc:ac:d3:05:
                    98:e0:d0:b9:9c:c8:8b:95:c0:87:8b:f3:fe:36:8c:
                    6a:08:f6:59:7c:9a:49:ef:1a:16:62:00:9d:30:ed:
                    ba:bd:e1:14:00:7f:c4:e0:db:d2:5b:04:b0:7f:ed:
                    f2:a4:52:b4:14:7a:a2:c7:02:88:5d:9a:ad:92:8b:
                    69:71:f7:72:22:77:6b:d3:92:5d:4f:b0:60:3b:19:
                    fb:1c:12:54:09:ae:a1:31:16:07:46:8f:0e:ae:70:
                    8f:91:37:c7:e9:da:d2:29:b4:d3:7d:30:77:6a:78:
                    f5:a1:40:91:b5:9b:53:ee:4d:17:63:be:19:8d:ed:
                    9e:1d:12:c3:ee:02:61:6f:08:9b:44:4d:20:46:30:
                    74:c3:4f:a4:4d:c7:97:85:b2:85:a4:d7:7e:64:d2:
                    0b:14:39:15:f6:31:df:e8:7c:f6:9c:85:66:c6:6d:
                    b8:8f:12:46:8d:4c:4b:7f:52:ff:36:f1:61:ed:22:
                    21:28:75:d2:fb:57:94:db:52:74:3b:a0:d9:ef:9a:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:CF:1F:B2:EA:46:B8:71:4A:AB:37:3D:B4:C2:0F:3A:ED:77:FB
            X509v3 Authority Key Identifier:
                keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:22:95:84:e5:24:04:af:c6:91:d8:b9:9f:92:74:c3:08:a6:
         09:0a:6b:6f:c8:f7:c1:df:c5:7c:4d:0c:1a:68:7f:63:d7:0b:
         39:da:67:1a:69:3a:3f:48:e2:36:bd:ce:02:70:75:cb:08:cf:
         05:20:b5:bd:bd:b4:f4:43:1d:26:9d:0d:2c:b2:00:c4:50:68:
         b3:be:ea:92:6a:f6:fa:b0:ea:df:e5:5b:ac:3e:a0:46:4d:d5:
         2e:29:c8:73:84:90:c3:2b:8a:a9:44:6e:40:27:4a:01:88:df:
         8d:05:0d:d8:f2:3b:ba:f8:c5:ed:5b:8f:3e:5d:77:9b:b9:67:
         70:d2:1c:8c:88:a8:28:3e:48:1f:9e:b2:2d:12:4b:4e:e8:d5:
         2a:13:5d:13:9e:19:dc:8c:2c:b9:87:26:d9:ef:96:2e:b1:b5:
         fc:2e:b3:2f:1c:97:e9:81:65:28:e6:8f:42:01:04:23:8d:68:
         df:fc:a2:c9:64:6e:c8:7d:8b:06:4c:52:2d:4d:94:bc:c0:81:
         eb:09:b0:2d:3b:bb:ca:24:d6:d1:42:ad:42:3b:d1:b2:d2:5d:
         5e:82:74:b7:b0:b2:bb:c2:7d:4a:b2:05:f8:62:70:00:70:c9:
         37:2a:ed:1e:ea:d2:5e:c1:7f:09:8f:c9:fb:c1:99:b9:d0:64:
         a5:4c:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:26 2025 by rpki-client