This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File:                     i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier:          se1xwI13KKHdXTIfgvBtvH15A2DNrkVKQoC8Q3nse1U=
Subject key identifier:   BB:25:4D:73:4F:65:53:E6:54:0B:44:1A:00:62:91:C6:63:6F:90:B6
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer:       /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial:       019AF50A9B9E2D6AC903523E0F2793A9A99B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 19:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:44 +0000
Files and hashes:         1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
                          2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
                          3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: VfvBcKu9EaK0+0jtzHnE4+hmQ6vzrvSUn5gWWrdSa20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:9b:9e:2d:6a:c9:03:52:3e:0f:27:93:a9:a9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
        Validity
            Not Before: Dec  6 19:01:44 2025 GMT
            Not After : Dec  7 19:01:44 2025 GMT
        Subject: CN=bb254d734f6553e6540b441a006291c6636f90b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:af:ac:5c:d5:c6:c6:bd:16:f6:c2:d2:4e:
                    2d:38:1a:ce:c3:57:aa:04:fb:c5:d0:07:f1:a5:83:
                    6e:4e:75:8e:40:52:6c:e5:a7:2b:4f:43:58:d0:33:
                    9f:e8:6a:64:2b:f4:55:27:8d:5b:c2:49:48:39:a5:
                    02:39:0d:d5:85:0d:8f:d1:7a:28:33:31:f7:29:fa:
                    eb:d8:35:87:1a:86:e5:64:94:1f:2d:e9:d7:57:84:
                    29:ce:fe:56:4a:59:62:94:5a:19:af:24:09:33:0d:
                    59:8c:7c:3a:27:7d:7b:3d:10:79:37:1e:90:7f:49:
                    72:dc:1f:ca:8e:eb:8e:6e:38:6c:9f:b2:a3:c8:f1:
                    6e:03:37:1b:8d:40:dd:35:18:83:89:dd:f1:c0:67:
                    44:82:7a:57:2d:84:3d:8d:75:3f:a1:f9:44:dd:16:
                    2b:e5:47:99:63:52:8b:c5:36:a6:21:9d:12:9b:f5:
                    bc:e7:70:14:04:d5:78:8f:b0:5b:83:db:41:56:64:
                    80:21:f8:4d:98:2d:8d:69:99:a4:d6:c4:e1:10:73:
                    a9:39:13:3e:06:f1:d1:eb:63:5f:04:7f:38:6c:7f:
                    03:d4:06:dd:a4:a5:7a:7d:70:13:4e:a0:83:41:b1:
                    c2:44:23:ff:a1:4c:28:ef:63:89:07:87:cf:cc:aa:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:4D:73:4F:65:53:E6:54:0B:44:1A:00:62:91:C6:63:6F:90:B6
            X509v3 Authority Key Identifier:
                keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:af:07:2c:38:90:72:5a:2b:42:9a:b1:0e:5c:08:80:51:fb:
         94:e1:76:95:3a:46:f8:5f:6c:a2:4a:66:53:be:ba:dd:82:7f:
         6e:8e:ee:e8:47:db:6d:6c:fe:c6:ff:01:50:ea:b7:e4:44:00:
         44:c3:8a:30:f3:03:95:25:d1:36:87:f5:2c:10:ba:dd:6c:7d:
         41:ce:03:29:1c:e3:83:3a:11:39:26:9d:b6:c4:47:45:d2:a7:
         8d:33:b3:a9:f9:32:34:6f:79:50:df:a6:48:81:86:b2:18:74:
         44:89:eb:de:3e:68:1c:4e:08:af:d0:72:64:1a:ad:e7:37:33:
         88:bd:9d:99:36:fb:32:3c:29:c8:ad:ce:17:ce:3c:ee:ea:16:
         d4:ae:18:9e:9d:ae:58:bb:5f:1f:d3:00:c4:b9:16:0e:0f:3b:
         d9:97:dc:2f:09:3f:c8:b1:f1:0b:c7:22:6f:22:71:fe:1a:bf:
         1b:57:12:ae:3c:81:d7:a1:d2:d9:37:ab:a5:df:4b:d7:18:e6:
         95:02:f4:ac:ce:c5:c7:a1:b1:d1:90:b1:ad:88:5a:aa:75:32:
         2e:56:5f:4c:0b:92:d5:7c:10:26:7e:32:1e:31:35:43:ec:42:
         42:3d:64:49:65:26:39:05:6b:46:95:90:7a:34:b2:d8:f0:a4:
         85:ca:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:13:43 2025 by rpki-client