This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File:                     sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier:          SIJ+nj2YzqMXrVEirtwycWnKW1n+DYMXGcMxPA8ESNo=
Subject key identifier:   A3:FA:C2:C5:4E:0A:58:CA:EC:0C:03:8D:82:19:38:64:1E:16:45:B9
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer:       /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial:       019AF2096D171EB369709F3D07415969F260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 05:01:35 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:35 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:35 +0000
Files and hashes:         1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
                          2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
                          3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: eEo1SrLVfUp2Wnjua03+dRT2TF1iS+oJ95RmNoO8YAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:6d:17:1e:b3:69:70:9f:3d:07:41:59:69:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
        Validity
            Not Before: Dec  6 05:01:35 2025 GMT
            Not After : Dec  7 05:01:35 2025 GMT
        Subject: CN=a3fac2c54e0a58caec0c038d821938641e1645b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:77:d9:4d:e9:65:ac:0d:6f:4c:48:91:6e:
                    6c:32:5f:20:cd:4d:d3:c4:46:c6:86:a0:f4:e6:49:
                    8d:dc:e4:4b:0d:d7:96:ae:bb:56:02:c3:65:6e:e2:
                    91:c5:de:bb:2e:6d:03:2f:62:b7:0d:77:b0:d1:13:
                    ae:83:ae:8a:62:ea:3e:fa:cc:a2:0a:41:99:7e:d6:
                    51:b9:20:67:84:9a:29:f5:09:1c:52:c3:fc:b9:5a:
                    50:f2:8f:41:01:f0:43:77:4a:4e:d0:86:46:58:34:
                    bc:d5:ea:ce:92:af:02:55:f2:a4:e9:79:9f:1b:7d:
                    ad:b4:c9:f2:b1:10:8f:72:0a:b2:b3:b9:73:c2:fb:
                    9c:18:3a:8c:d4:50:da:2a:6e:04:c4:8f:83:14:f9:
                    ac:d9:79:be:9b:cf:72:00:8b:b4:eb:3c:33:97:1d:
                    e7:92:c6:64:da:fc:f8:58:e0:34:48:80:1e:49:c4:
                    f0:fe:98:ab:68:57:0f:a7:b9:cf:2e:6e:da:a8:15:
                    f7:80:19:e8:92:d9:d2:2f:dd:f6:65:40:d4:91:24:
                    cc:82:d0:38:87:6c:5a:9f:96:fc:03:b9:92:ff:2b:
                    93:1a:89:d1:1b:8f:9c:75:6a:b9:ba:e5:08:f6:25:
                    e6:f2:dc:d1:30:9c:08:dc:8d:7c:21:9c:74:24:3c:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FA:C2:C5:4E:0A:58:CA:EC:0C:03:8D:82:19:38:64:1E:16:45:B9
            X509v3 Authority Key Identifier:
                keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:00:c2:af:d1:a6:0d:19:6f:e1:c1:15:eb:4b:c6:f0:11:9e:
         2c:0c:75:63:81:a9:94:4f:58:62:be:ba:a0:78:b4:62:8f:d1:
         23:a7:a1:5b:b7:7f:2b:7a:e6:1f:2d:c6:65:90:6b:37:37:c4:
         84:98:94:e3:1f:4d:5f:b2:ec:f3:29:a1:58:c5:02:8d:a6:92:
         7c:d0:93:b9:10:14:d3:4e:00:76:b3:ea:57:6c:d2:7b:0d:64:
         4f:7c:62:52:3d:80:8f:35:43:3d:0a:11:59:20:3d:bd:5b:dd:
         c0:d4:fd:6f:11:75:1e:4f:c0:7f:76:c5:72:b1:98:8e:8b:a4:
         20:e5:09:ab:32:73:e0:58:6c:a4:d6:7e:17:9e:56:d0:64:f2:
         66:e1:89:d6:64:02:ee:54:f8:31:93:91:a8:7f:1b:a2:1f:6e:
         ef:5a:ee:aa:bb:c2:14:d3:c3:41:39:80:9e:77:3a:2f:05:87:
         b2:df:22:b1:17:8a:ef:88:51:aa:e7:97:c0:b7:35:a7:90:e1:
         68:81:f6:9c:8c:82:73:1c:31:3a:17:e3:9b:1d:84:31:06:70:
         c5:00:fb:ef:bb:68:5e:81:d5:51:9a:e9:6b:17:7a:bc:b0:13:
         2d:7e:9f:1c:79:be:e9:da:57:7f:f4:77:a8:23:49:e1:30:17:
         ac:a9:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:59:37 2025 by rpki-client