This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File:                     cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier:          cva102/1zwXDn0OOmwYRPVN+DzMFJ4auJPhCaf2TPGw=
Subject key identifier:   6C:AB:52:0B:39:46:90:B9:35:93:45:5C:94:92:EC:13:33:56:FE:9A
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer:       /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial:       019AF2098C4AEFD206C9FEE143ADECA6B780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 05:01:43 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:43 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:43 +0000
Files and hashes:         1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: SZLxXRO8hfvdI55AHi3IiKaOKFTMXz7L+6gv0fVNWXA=)
                          2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
                          3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:8c:4a:ef:d2:06:c9:fe:e1:43:ad:ec:a6:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
        Validity
            Not Before: Dec  6 05:01:43 2025 GMT
            Not After : Dec  7 05:01:43 2025 GMT
        Subject: CN=6cab520b394690b93593455c9492ec133356fe9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:14:63:12:ba:8f:e0:56:8e:70:bc:8f:b5:48:
                    ab:dc:3c:02:9c:9b:50:fc:6f:f2:36:42:7b:c7:cc:
                    ae:13:51:82:12:8f:8b:3a:99:9c:13:8a:06:ca:6a:
                    9f:8d:b7:4e:58:6c:c3:85:a3:1e:8c:e4:a7:7e:30:
                    cf:db:e9:67:95:83:9c:d8:10:36:ac:4a:e7:42:4e:
                    fa:2c:51:bf:b0:63:22:45:9b:67:b4:26:8f:90:fd:
                    61:a1:32:e4:47:70:0f:c0:c1:fa:16:47:e3:19:96:
                    ee:a5:86:b9:5b:ad:25:07:24:b0:b2:a9:99:20:cf:
                    d2:3a:b3:0b:12:1d:71:c6:d0:7f:06:8f:5d:e6:a8:
                    fa:6c:63:d1:21:b3:42:bb:30:ff:18:ae:91:e4:7e:
                    ad:3b:34:5b:87:32:bd:b9:0b:3f:57:21:58:be:e5:
                    7e:e7:32:9a:f5:9a:58:a8:ec:c3:b6:af:4a:22:36:
                    f4:25:78:bb:38:92:ee:29:2f:a4:06:72:65:94:25:
                    9d:4f:7e:4e:50:7e:c3:8c:94:7d:a4:5e:4e:73:58:
                    7a:55:00:2d:08:0c:f0:1d:19:cc:5b:d8:7d:89:6d:
                    d3:5e:f3:3f:4e:69:ba:6d:68:8d:50:b9:2d:e2:9c:
                    cd:51:eb:f2:3f:4a:97:c3:72:35:76:f0:bd:77:58:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AB:52:0B:39:46:90:B9:35:93:45:5C:94:92:EC:13:33:56:FE:9A
            X509v3 Authority Key Identifier:
                keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:61:8b:fe:5b:78:17:b1:00:8b:25:24:86:6e:16:c3:ab:41:
         82:e3:5d:39:cf:bf:b0:d3:08:c7:13:4d:3e:18:81:24:41:9f:
         2f:0a:64:15:6e:f7:cb:c1:94:ac:c3:7b:5b:8e:f0:90:8a:0a:
         c2:1e:f9:36:6d:fc:7e:ed:09:2c:94:69:31:a4:ed:69:bb:72:
         58:4b:47:d6:85:1c:c7:a0:ca:15:1a:cb:4c:2b:4d:07:e5:0d:
         67:66:23:be:59:71:e3:91:2f:9a:e0:b5:06:23:96:d1:c6:8d:
         20:70:be:7a:36:26:18:ff:d0:59:c0:50:40:f1:92:ef:31:a3:
         1f:6f:22:63:af:61:c9:91:10:32:88:e1:f3:17:e9:00:e5:7f:
         1e:8d:a4:3e:ba:ca:e2:e7:26:c9:da:c8:51:91:5f:57:79:c4:
         85:8a:73:1d:2b:bc:d4:30:31:42:28:4f:aa:6f:6d:b8:6d:09:
         96:30:dc:6c:ba:ba:bc:06:e1:1f:29:72:a0:77:51:41:63:d0:
         3b:28:d8:bb:40:10:9b:29:9a:19:4c:bf:6f:ff:d1:fe:e3:89:
         fd:42:87:60:05:94:34:9a:f8:25:16:23:b2:b2:5b:e0:67:fc:
         83:83:d5:9c:9e:bb:1a:e6:4d:4d:50:c8:85:76:83:7b:b1:52:
         bc:58:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:08 2025 by rpki-client