This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File:                     aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier:          9sr//jM089DcU54WBHucu36OaQw1ggNTZK1La6czpjw=
Subject key identifier:   57:F7:46:21:63:6C:8D:B2:B4:C1:8C:BB:3F:1E:8A:FD:C1:86:70:90
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer:       /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial:       019AF23FB0CC553FF291459AC91CEDB859E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 06:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:51 +0000
Files and hashes:         1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
                          2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
                          3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: SbegZrguH3Fokoysiw7efSVkkqV87crhC3Pvj00qjqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:b0:cc:55:3f:f2:91:45:9a:c9:1c:ed:b8:59:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
        Validity
            Not Before: Dec  6 06:00:51 2025 GMT
            Not After : Dec  7 06:00:51 2025 GMT
        Subject: CN=57f74621636c8db2b4c18cbb3f1e8afdc1867090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:2e:51:c9:60:44:a1:9d:35:78:17:3b:07:
                    33:f1:3c:3d:4c:fd:25:c6:bc:1c:63:cc:5b:b8:47:
                    9e:61:68:15:21:d9:28:d0:7c:9b:60:c4:0c:c0:a9:
                    1f:97:25:22:3f:cc:eb:5c:b7:23:22:f7:cc:f5:13:
                    5b:6e:f6:a2:0a:1f:25:8a:7d:d3:10:d7:d3:9d:1a:
                    ca:b2:ec:44:e9:8e:82:d7:ee:96:02:15:9a:40:09:
                    53:8a:38:99:7d:1e:28:75:64:6d:98:45:ed:94:ce:
                    e5:93:f8:63:84:c9:b8:73:45:18:d9:2d:fb:e8:8c:
                    8e:12:a8:06:15:27:58:90:37:35:3a:14:de:78:d9:
                    6a:9d:73:cf:b7:f2:15:88:7d:7d:ec:0d:ee:41:eb:
                    bd:6a:f8:23:5a:94:c7:ee:a0:99:fe:a1:28:64:fe:
                    fa:c8:32:6b:b4:3e:e7:3f:c1:a7:f4:82:15:f2:f0:
                    13:69:a6:78:b0:d2:10:7e:d0:c3:c0:fb:e6:3a:ee:
                    38:8d:aa:0e:ac:1c:31:14:d5:1e:05:cb:f8:c9:30:
                    20:b5:6e:03:1b:24:76:84:e5:ea:52:e4:9d:ee:7c:
                    98:77:b1:6e:42:82:18:7b:88:e1:b5:fc:c8:6e:02:
                    2e:8d:08:4c:fd:d1:e0:49:3f:1b:d2:3b:16:71:a9:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F7:46:21:63:6C:8D:B2:B4:C1:8C:BB:3F:1E:8A:FD:C1:86:70:90
            X509v3 Authority Key Identifier:
                keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:b8:55:3a:16:7f:c4:ab:3d:22:ad:5a:fb:03:c6:86:f0:
         86:25:49:2d:68:a5:f9:8f:d9:fa:7b:10:b1:f1:7f:8e:5e:8b:
         a0:8d:61:78:98:4f:f3:e9:ff:a2:8f:67:30:bd:ef:c3:17:ee:
         01:e6:b0:a2:88:4d:c6:ee:6d:03:1a:a4:3e:03:0a:4f:33:51:
         e6:8a:09:0c:d8:1a:52:0f:77:91:7d:79:d9:7f:77:0d:c6:8c:
         f9:9d:dd:92:bc:10:1e:66:1b:2f:a9:e2:0c:b0:96:d8:a8:d5:
         77:c7:05:52:da:39:72:ed:44:06:91:f3:96:8f:6e:a0:26:5f:
         f6:27:bf:7d:07:1b:86:22:36:24:15:cf:84:b0:e3:72:cc:62:
         b6:6e:d8:5f:a5:46:85:39:29:61:71:8c:df:33:85:66:6c:7e:
         a4:d2:c1:e8:79:8a:df:b6:52:a1:b9:b1:2a:2d:79:c8:c4:ab:
         7f:1f:01:fe:30:ad:68:08:c6:81:e1:f3:dc:af:0f:9a:16:5e:
         fe:a8:70:f9:80:7e:08:ad:1b:f3:95:72:9a:5a:b9:0f:e5:7e:
         f0:15:0a:39:3d:f6:7a:14:91:87:7d:68:b2:2b:14:a6:f3:2b:
         ba:b9:73:f8:9b:ea:3e:59:86:93:0b:9f:b2:b9:22:a8:7b:1c:
         69:35:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:56:30 2025 by rpki-client