This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File:                     tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier:          3pa0WpvJe1Lj75H+M9xyLbJByqtCRFHYmZCd2vnthOs=
Subject key identifier:   9E:2C:34:FA:4F:84:50:F0:E5:61:4F:2C:4F:22:1D:3E:9E:1E:E4:6B
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer:       /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial:       019AF2766214DD3CFE1314E2268C2B284F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 07:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:35 +0000
Files and hashes:         1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
                          2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
                          3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: FA0mLitzWuvSEE0jXY+95LebgjwgRuAuBGRMEFQ1Eec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:62:14:dd:3c:fe:13:14:e2:26:8c:2b:28:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
        Validity
            Not Before: Dec  6 07:00:35 2025 GMT
            Not After : Dec  7 07:00:35 2025 GMT
        Subject: CN=9e2c34fa4f8450f0e5614f2c4f221d3e9e1ee46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:69:ce:f8:7b:ae:a8:a8:45:33:e0:cb:41:
                    6c:01:ba:4d:b0:e8:91:e6:87:2f:e3:a0:91:ab:4a:
                    82:7f:6b:42:15:1a:00:dd:68:ba:55:2c:d0:c9:e6:
                    9d:58:fa:5c:51:2a:f7:49:75:85:8f:ee:a9:96:fb:
                    51:3c:73:9a:c0:73:c0:82:9f:a8:ae:46:92:d5:72:
                    f3:e3:cc:61:9c:fc:d9:35:1b:83:8a:f8:42:2d:5c:
                    ed:d1:0b:13:2c:a9:98:61:07:09:e8:fe:90:f7:aa:
                    d4:0e:2f:c4:22:77:60:c5:51:e9:fa:25:29:a7:9b:
                    43:96:6e:d8:49:5e:eb:bd:10:6d:21:f2:14:92:17:
                    68:cd:8f:d6:07:bb:9f:2d:66:cf:f7:13:c3:a4:ce:
                    16:c7:39:ba:7b:e3:7f:64:43:19:ff:a7:e4:bc:b7:
                    4b:f0:c7:a1:53:c4:2b:b6:30:a5:14:72:41:3d:ed:
                    8e:b9:12:5b:5d:6d:dc:5d:5f:2b:c1:bf:56:4a:21:
                    22:13:6e:59:b5:26:b7:63:fd:95:99:eb:ae:b8:52:
                    d5:40:3b:ff:1e:d2:da:f2:8f:a1:fb:3e:b1:d4:15:
                    a8:fd:04:2b:28:39:5d:97:92:e6:ea:60:d2:55:d0:
                    54:9d:ae:d2:2e:52:50:0c:1f:a1:43:ba:6e:15:b6:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:34:FA:4F:84:50:F0:E5:61:4F:2C:4F:22:1D:3E:9E:1E:E4:6B
            X509v3 Authority Key Identifier:
                keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:d9:fc:bc:30:7d:d9:68:fd:38:7c:a7:e9:1d:0c:59:cc:
         17:d2:b2:bc:ae:f3:18:ec:42:53:b3:8d:5a:3a:ee:6e:92:11:
         9a:9d:bd:a4:e8:3d:15:6d:1f:e0:03:13:79:57:3e:16:9a:f9:
         a6:e5:cc:2a:67:85:ac:10:52:24:08:ad:e1:24:2e:15:77:09:
         89:f4:8c:4e:fb:57:ac:1a:04:00:31:53:a2:1a:36:26:84:fb:
         27:d9:8f:77:93:f0:d5:f2:47:e8:b2:fb:bc:73:5f:ec:59:c0:
         72:c4:ee:16:03:1b:2d:30:1c:2c:62:e5:7d:39:19:c8:75:b2:
         5e:12:34:83:fa:ff:c8:2e:f1:56:c6:80:2d:80:16:68:26:a6:
         86:5d:cb:81:ee:6a:8b:4c:d4:cc:42:7f:7c:04:0b:2b:21:f0:
         d0:68:79:fa:4a:3f:2a:15:2d:59:b1:a4:11:d4:38:b7:85:ff:
         66:c1:a9:87:34:94:9c:19:53:6e:57:28:b3:a9:d6:df:27:e5:
         66:6f:25:51:23:d6:fc:3b:09:1d:bb:b2:a5:c2:a0:34:f2:63:
         f8:49:0d:e6:7b:03:55:63:bf:d4:b3:9a:23:3e:99:f8:44:a6:
         32:09:5d:3d:54:f1:d3:89:a0:84:12:50:e8:9f:b9:cb:2e:b6:
         ee:33:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:18 2025 by rpki-client