This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          sxvIreFsIZAXo62kC/Lv9i8tZWJEmpwjZtEkIg1gWPg=
Subject key identifier:   B5:FF:C3:0D:58:CB:A7:AE:41:4E:C6:7C:9F:30:65:57:50:1E:83:AB
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       019AF3C022E739EDEE2C0A0F6905DB1E95AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 13:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:46 +0000
Files and hashes:         1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
                          2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: MJIe6n0ce3A+rJmBDeWBPwJHXp9dSKdh2vRgaIqX9hM=)
                          3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:22:e7:39:ed:ee:2c:0a:0f:69:05:db:1e:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Dec  6 13:00:46 2025 GMT
            Not After : Dec  7 13:00:46 2025 GMT
        Subject: CN=b5ffc30d58cba7ae414ec67c9f306557501e83ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:7c:d6:31:a4:e2:a2:43:89:25:3b:ea:0c:
                    18:bc:05:8c:91:b6:85:b9:d4:dc:9a:4f:88:b1:cd:
                    e3:9d:21:52:5a:f9:4e:7d:bf:d3:7c:dd:5c:0d:fc:
                    6c:af:7a:bd:fa:14:06:2c:51:0d:48:db:61:9b:93:
                    d4:11:77:f1:ed:3a:c7:e2:55:fa:d8:2f:5c:e1:af:
                    33:dd:2b:99:08:a9:ce:f1:b8:48:40:a1:e0:4a:59:
                    5a:4a:37:f7:61:6e:cc:f4:d4:86:52:95:76:fc:43:
                    ed:84:9b:33:2e:7a:36:0c:28:1c:b4:48:a6:cb:17:
                    71:ae:8c:1e:b8:9e:0c:a1:89:db:e2:fd:93:ff:3a:
                    98:5f:ad:12:93:7a:76:ca:49:54:6f:9c:9c:77:d2:
                    43:56:cd:04:f2:49:f2:51:9f:64:29:87:73:25:01:
                    32:de:b8:7a:e1:d8:6f:a0:c7:de:f9:b7:19:cf:cf:
                    99:39:9f:22:3b:e4:f3:67:d9:08:60:b0:0e:d9:66:
                    38:ee:30:72:b1:2e:39:cd:ee:c2:75:86:61:db:0c:
                    06:59:83:70:07:ea:a2:65:63:03:bf:fe:6e:16:18:
                    81:f9:e3:79:ab:c4:15:a2:f5:af:c9:ed:f8:41:aa:
                    6c:e2:f6:49:4f:a2:fe:d9:e4:c4:e5:7d:98:b7:cc:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:C3:0D:58:CB:A7:AE:41:4E:C6:7C:9F:30:65:57:50:1E:83:AB
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:db:58:ef:2e:e6:a3:c7:67:1c:f3:89:73:a1:5f:40:3d:
         b5:97:64:7c:9d:7e:c8:37:7a:4a:1b:d8:6d:37:95:a5:41:ae:
         94:cf:b0:dc:fb:4b:49:ba:e3:5f:e0:e1:90:46:80:7b:82:e3:
         a4:e4:47:b9:2d:e0:4c:0b:5c:d6:4b:7c:57:54:32:33:51:ab:
         89:51:8a:dc:ae:ff:72:79:8d:73:48:f7:e3:59:57:be:7d:fe:
         1f:fa:fa:89:8d:c1:85:09:35:63:b2:18:05:7b:9a:4a:fc:09:
         85:3a:ac:4b:e5:8c:2f:b4:50:8a:23:a7:e0:12:82:90:4b:ce:
         c5:d4:8d:af:fe:26:35:c2:c5:65:cd:25:7b:63:af:3c:aa:7c:
         83:da:06:2f:18:f7:89:2b:10:c0:52:d1:9d:c9:1b:dc:1d:7a:
         cf:e5:6c:92:44:b8:4a:08:97:a4:5d:24:eb:e2:6c:a6:bb:85:
         00:d3:6c:f7:01:7e:95:fc:1f:78:00:ff:20:96:e9:a7:b7:ad:
         7f:c2:9a:cc:bf:c1:21:28:8d:d2:8e:1c:cc:a7:db:f3:3e:e0:
         36:61:17:4a:dc:74:b7:51:26:00:7f:72:62:64:15:66:41:7b:
         12:d3:5b:b5:2c:3e:1b:4b:17:e1:c9:7c:7d:db:0f:7d:f9:a4:
         ad:de:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:49:05 2025 by rpki-client