This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          uJemM5XjhWTKvi+ehZCD+ynGHHpbqWbEd55cz+Ec6zI=
Subject key identifier:   69:D6:F5:A9:FE:65:C4:68:F8:32:37:88:89:0A:2C:5C:6D:0D:D3:73
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       019AF16438BC86716E5BEC37A8B159EB0A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          1751
Signing time:             Sat 06 Dec 2025 02:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:08 +0000
Files and hashes:         1: IVdpbiwp8sk6RWKPU9fU_W8afE4.roa (hash: X2lQta/XLPc+pnMfam2urh0+0omvloln8L5ZX9x6bhE=)
                          2: Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (hash: z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=)
                          3: ZZlHpEh3xq_erGKCvTsR5cenP4M.roa (hash: C4STcediFbKih1AYZM4S/g3j+Dxm18LPv+Tu0224VhI=)
                          4: detAd7FlOFGjTsX2k3rOLy2UQCs.roa (hash: cqEU+ACySIshfpJTQIUM63m1I8ih1IEP8SdQskz8PQk=)
                          5: hEIm6b1kctKQOBdo1EnRG1VjnyQ.roa (hash: Xo1DxXqBfY11s6cBh+ynDozHMZaWken4xmavWyHXw6s=)
                          6: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: T/JIFfVgKRU9SlCps3SiTcjEfefGenKabRUQyrei4xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:38:bc:86:71:6e:5b:ec:37:a8:b1:59:eb:0a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Dec  6 02:01:08 2025 GMT
            Not After : Dec  7 02:01:08 2025 GMT
        Subject: CN=69d6f5a9fe65c468f8323788890a2c5c6d0dd373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:47:ac:37:b4:30:a8:de:08:a8:37:85:8d:
                    92:4d:9a:7c:5e:03:79:5d:f6:53:3d:99:be:a4:0d:
                    f4:06:25:41:02:15:f6:d9:96:d8:8e:60:13:ec:77:
                    c1:d2:c0:3e:76:0f:fd:e5:53:01:f5:f9:fb:89:9d:
                    16:15:69:5d:11:2b:c8:3e:0a:17:17:2e:1e:60:de:
                    0f:45:50:f4:81:7a:63:63:f1:7f:2d:d6:b7:96:d7:
                    0b:df:7f:23:70:43:ad:18:55:d1:61:2c:77:d4:cc:
                    eb:13:9f:e3:e8:b4:71:ba:f3:42:8b:0d:40:82:9e:
                    b3:85:43:f4:7b:29:cd:03:de:e9:62:41:a5:94:0a:
                    ce:18:f7:fd:28:3f:89:d8:08:e5:de:e4:cf:ab:6e:
                    a1:71:e8:39:ed:32:82:ca:5e:14:45:dd:2f:ce:94:
                    f2:04:c4:09:9e:f7:5b:e1:50:3e:13:c0:e0:9f:f9:
                    19:a0:1c:e3:24:fa:60:18:f3:a0:04:4d:f8:0d:15:
                    91:a7:bd:9d:63:3e:e7:3b:ec:ff:8e:e9:9b:07:7e:
                    8b:8f:a7:d4:a2:8f:4b:b0:a1:88:54:91:53:02:5b:
                    01:7d:3e:57:12:90:d7:57:fa:8e:e2:46:b4:78:72:
                    4c:03:68:07:7a:86:39:85:29:bb:66:fe:64:7d:4a:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:F5:A9:FE:65:C4:68:F8:32:37:88:89:0A:2C:5C:6D:0D:D3:73
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:02:c3:4d:36:09:20:6b:35:44:f5:9a:43:5b:a4:ba:24:9a:
         32:09:9e:1b:49:ec:3b:ff:08:df:4e:15:94:9d:44:79:ab:cd:
         8c:dc:64:3d:7c:d0:e1:33:a6:ae:ab:03:a2:aa:f9:78:32:ff:
         7b:0b:be:39:49:b7:cf:96:c7:bd:6a:83:36:2f:9f:bf:98:a3:
         f5:2f:6f:97:0b:ee:ca:8a:c4:5f:95:07:84:14:22:69:3f:9c:
         1d:0d:b5:8a:f1:ee:b1:90:1c:e8:37:50:6c:f7:b7:0a:25:c8:
         97:e6:68:d9:9f:2c:09:d7:8d:35:0d:12:11:85:51:ab:8e:9b:
         b1:76:02:80:64:b7:b6:3c:26:d9:f4:35:38:45:db:9b:ac:37:
         10:d3:ee:11:5a:a5:1c:d0:b2:8b:f8:38:67:ab:37:45:03:23:
         d2:78:a3:4b:67:36:be:62:07:8e:da:75:ee:e7:33:8d:7a:0f:
         23:a3:50:f1:54:83:fd:33:65:ce:47:f6:76:e1:7f:36:06:32:
         43:fe:ba:46:aa:c4:f6:d5:89:25:a3:cd:e8:aa:bc:66:0e:0d:
         fe:99:9d:f1:f2:29:9e:d2:5c:2e:7e:26:0f:00:70:76:38:c3:
         a8:70:e2:e9:da:f2:9f:f3:65:c5:56:03:b1:2d:81:f3:4b:4d:
         e8:57:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:05:35 2025 by rpki-client