This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          6bZ9zo+C0zm4XbcCXlv95kIW52XFzhVyZ+NVXSdBOVU=
Subject key identifier:   34:54:22:CE:8B:92:CB:E7:75:0B:0A:5D:4C:71:95:22:D1:7F:41:36
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       019AF276DAE2B2A4F41756B98462BED97916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 07:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:06 +0000
Files and hashes:         1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
                          2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: DZcJ5SmlG5aTVTCf1jAnrimnXh6mCp7Mk5vZ1m9IhV8=)
                          3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
                          4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:da:e2:b2:a4:f4:17:56:b9:84:62:be:d9:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Dec  6 07:01:06 2025 GMT
            Not After : Dec  7 07:01:06 2025 GMT
        Subject: CN=345422ce8b92cbe7750b0a5d4c719522d17f4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:78:3f:da:3c:d1:e6:6a:9a:9c:c1:76:cf:
                    d8:33:59:84:5c:99:15:27:6f:78:3e:b4:0e:d2:02:
                    a5:1d:31:9b:1b:c6:81:94:30:94:70:b6:2e:d7:63:
                    3c:96:3b:49:dd:b0:95:85:0c:a3:bc:c5:7a:ea:73:
                    75:4f:b6:6f:1b:81:3c:79:30:5f:ea:24:bb:7e:69:
                    7b:a1:86:56:1f:7c:49:2f:15:94:64:9a:6c:d0:b7:
                    a7:5e:3e:fa:27:2a:1c:58:8e:f2:f2:54:b2:03:5b:
                    33:45:de:38:bf:66:3c:85:85:09:3e:83:af:b5:db:
                    2a:2e:a2:db:84:c1:de:43:d2:9e:a2:81:fe:63:e3:
                    3f:72:17:9a:37:72:bb:ae:ec:c1:4c:da:07:29:0a:
                    65:41:1c:48:d9:86:fe:e1:d1:ec:41:78:97:1c:2b:
                    ec:c0:15:32:e8:e9:24:a3:8e:a8:68:33:06:fa:38:
                    3f:12:35:75:0a:ca:f4:a3:9c:cb:0b:03:ac:ff:d4:
                    dd:c5:92:8a:5c:ee:29:5e:be:fd:a3:e3:53:d2:d7:
                    9a:32:6e:77:73:e6:9f:e3:5c:b2:7b:bb:c6:f3:28:
                    94:09:d9:5a:fa:4b:3d:83:c8:65:21:d7:c6:cb:ea:
                    3e:76:26:10:a4:d9:7f:e8:d9:a7:d0:58:a6:f0:af:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:22:CE:8B:92:CB:E7:75:0B:0A:5D:4C:71:95:22:D1:7F:41:36
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:e5:f4:d6:7c:d7:e3:38:eb:64:cf:ec:5e:c4:79:a8:f1:
         78:6d:35:85:5e:13:85:2f:4c:ff:6a:65:54:58:ff:7d:36:97:
         59:8d:3b:09:25:8a:29:ec:67:d6:26:a8:3c:83:71:17:18:93:
         db:35:3b:bd:e8:c6:5d:48:5c:fb:8c:d2:f8:a6:ee:61:85:41:
         26:09:de:be:53:72:6a:98:c0:9c:32:a3:2e:85:66:02:6f:62:
         f8:63:6f:f1:46:5f:f7:d5:ff:6d:c8:6c:38:59:c0:ea:0e:51:
         eb:35:0e:ef:9b:cc:9e:dc:15:d8:86:c1:1a:09:ea:95:87:bc:
         b9:73:8c:7d:0d:a6:c9:d3:a0:ca:d3:dc:de:1f:45:f0:6e:1c:
         5a:33:cc:b3:8c:d0:22:38:25:9f:ca:10:2c:ad:33:41:dc:13:
         17:76:aa:5f:c9:dd:fe:cc:1a:72:a2:81:18:29:02:28:8d:97:
         4c:a0:c8:eb:93:8f:fc:f0:bb:85:50:b8:2e:c6:3e:79:34:de:
         48:3d:5f:79:3e:a7:cf:b3:79:9c:92:08:9c:4a:ac:40:af:62:
         47:5c:94:b6:2f:00:be:92:55:e7:77:50:f7:81:f6:ec:6c:38:
         12:7e:7c:71:83:94:25:7d:6b:aa:c4:88:b8:e5:e7:62:36:62:
         0b:5c:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:09 2025 by rpki-client