This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File:                     AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier:          0cD6Uer0419Wte1D7YGbGviIbKJxaPnUEAnqoKN8JgQ=
Subject key identifier:   81:0E:CD:2F:3B:B2:89:20:4F:37:B8:40:DD:4F:D6:A1:40:30:58:63
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer:       /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial:       019AF68A52C7BA1BADB8C7DE8AF741E266CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number:          0260
Signing time:             Sun 07 Dec 2025 02:00:51 +0000
Manifest this update:     Sun 07 Dec 2025 02:00:51 +0000
Manifest next update:     Mon 08 Dec 2025 02:00:51 +0000
Files and hashes:         1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: yHaP86QwfQsPc4/bojAM7h/86Dlk1T42h6oyCq2MGeU=)
                          2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:52:c7:ba:1b:ad:b8:c7:de:8a:f7:41:e2:66:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
        Validity
            Not Before: Dec  7 02:00:51 2025 GMT
            Not After : Dec  8 02:00:51 2025 GMT
        Subject: CN=810ecd2f3bb289204f37b840dd4fd6a140305863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:9d:21:97:53:46:95:cb:de:64:de:f7:34:
                    ba:44:54:8b:5d:f3:44:16:a4:9b:2e:43:49:1e:b1:
                    bf:ce:2d:1d:9d:96:6f:ab:e5:d9:7a:b2:b5:7c:78:
                    a6:08:b7:25:73:9c:35:62:d0:7b:a7:16:ee:05:a8:
                    28:96:95:a0:fa:2e:7f:88:6a:6b:c8:ae:81:8d:74:
                    55:cb:fe:9e:8f:42:28:79:ef:1f:a6:9a:b8:b4:10:
                    ff:3a:f1:23:3e:07:c1:fb:b7:8d:e1:26:39:5a:fc:
                    c6:70:7f:8c:4b:30:b5:dc:21:c5:bd:cd:92:62:0c:
                    d3:a5:4d:8b:f6:74:fc:03:d1:4f:1c:f2:83:d0:16:
                    ee:17:7a:81:72:92:ee:eb:49:78:11:85:06:96:99:
                    bd:e9:a7:21:89:21:5e:15:94:33:6c:66:6d:74:b6:
                    b8:ee:89:09:5f:b8:0f:31:a0:3e:83:c3:3b:f3:d9:
                    1e:72:dd:90:b4:a6:29:aa:c0:28:6e:6b:53:17:0e:
                    1e:8a:5b:e0:a6:a7:5c:89:bb:4f:7c:6e:a3:a7:56:
                    8b:d4:8d:f1:c1:52:6a:40:32:cd:a9:f8:87:08:66:
                    39:f3:c0:ef:e4:57:dc:a6:d3:31:5f:cf:ba:75:20:
                    cb:2d:43:27:d5:2e:fe:be:9a:f4:b9:da:18:78:e7:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:CD:2F:3B:B2:89:20:4F:37:B8:40:DD:4F:D6:A1:40:30:58:63
            X509v3 Authority Key Identifier:
                keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:c9:d1:43:f6:66:4a:dd:78:78:94:c3:90:8c:9d:d9:54:
         17:79:3d:c2:a0:bb:a9:98:03:7d:93:dd:27:75:0c:1e:30:6d:
         26:7b:c4:3d:72:83:00:dc:4d:52:f8:49:4e:e1:ba:95:7d:f0:
         98:d8:a5:d1:01:13:58:fd:87:61:53:07:ba:c6:9a:b0:ee:97:
         53:75:2e:0c:b5:21:9b:dd:3d:63:e7:23:d5:8b:dc:a7:8b:2e:
         d6:37:ec:6d:ca:15:a6:7d:c3:6a:ac:cc:00:57:03:04:45:e5:
         4e:ae:c4:34:33:3a:c9:6f:8f:92:d4:01:0c:3e:b8:bc:36:66:
         a7:b4:1e:ff:1c:fd:62:d0:61:62:b4:82:d9:8b:95:e5:2c:ba:
         d2:12:29:bf:da:72:18:58:41:0b:ed:10:a7:13:7b:d2:7a:f0:
         98:83:c6:ad:5d:24:09:c1:fb:f9:43:4e:c3:e3:92:49:10:01:
         54:01:e9:9c:30:0c:10:be:e4:85:c0:ea:5b:60:24:ff:08:64:
         ec:a5:7d:3a:d3:6e:64:fd:ba:65:0c:81:43:ef:a8:ba:5d:b1:
         31:1d:9e:f3:31:e1:fc:33:5f:b4:31:bb:85:8e:4f:2d:2c:86:
         19:11:52:85:05:65:db:74:e1:a6:ed:c1:bc:88:ec:3f:9c:43:
         1e:27:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:00 2025 by rpki-client