This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          2jTEezekiThVds8fIdkBddHvlorHwpwobqxiaKEzw28=
Subject key identifier:   35:86:2C:F3:0D:0E:09:5E:33:05:D0:6F:17:A1:F7:B6:73:85:FC:8E
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       019AF19B56F3BECF106F19F517945ACF37D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:20 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: acfoew29NGOND0TAMdVfWtlGUDtuNDdbLuc8YvmcFHc=)
                          2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
                          3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
                          4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:56:f3:be:cf:10:6f:19:f5:17:94:5a:cf:37:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Dec  6 03:01:20 2025 GMT
            Not After : Dec  7 03:01:20 2025 GMT
        Subject: CN=35862cf30d0e095e3305d06f17a1f7b67385fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:53:7c:47:77:86:b6:c9:1f:f0:9d:95:43:
                    8e:85:2d:96:ad:56:e7:69:43:ba:3d:f3:0e:af:b9:
                    2c:f8:3d:aa:81:11:1a:6a:26:b6:89:1c:94:46:5b:
                    87:bf:39:5c:8a:dc:87:f5:52:77:25:af:9e:bd:9a:
                    1c:a4:13:4d:ce:db:e5:f6:cb:16:d6:e8:67:8d:17:
                    a9:ba:98:ac:e7:41:59:e4:44:7c:ac:4e:4d:f4:3d:
                    51:10:40:54:83:1c:f8:11:ac:17:78:9c:6a:f2:35:
                    84:44:5e:21:5b:c3:aa:ce:6c:7d:69:8c:c9:16:7d:
                    dd:d0:d4:87:fb:9d:94:e9:a5:db:b4:1f:95:a1:37:
                    7c:4b:c4:3a:b8:52:73:91:df:f7:4e:6e:fb:16:69:
                    bf:d9:49:65:8f:8f:cd:e9:15:25:e5:44:8d:6b:fc:
                    96:23:7b:09:84:5d:f5:e2:ef:f6:86:e3:70:b3:1b:
                    fe:a4:08:16:e8:36:45:bb:5f:c9:0b:22:a4:b8:e3:
                    d7:2a:8d:a9:74:57:f2:2f:de:8e:d8:b6:c1:7b:ab:
                    fb:40:36:c7:b9:7e:1b:84:99:32:bc:58:f3:4f:4e:
                    31:67:64:1b:88:37:97:56:bc:6c:d0:b4:78:a0:6f:
                    38:5b:3c:7b:5f:f1:af:37:6f:8c:58:cb:b2:3c:74:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:86:2C:F3:0D:0E:09:5E:33:05:D0:6F:17:A1:F7:B6:73:85:FC:8E
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:83:56:6b:20:62:a4:1d:5b:c3:4e:e9:82:73:64:54:a5:40:
         cb:75:3b:a1:b2:cd:6d:0c:89:f0:65:43:b3:62:55:c1:77:d3:
         00:40:3f:38:76:9e:e6:76:49:8f:cb:c8:54:b5:51:37:ee:48:
         9e:ad:e9:50:99:af:85:4d:78:de:2b:53:0a:0e:9c:ca:6e:45:
         ed:94:f0:ac:34:42:d1:05:97:37:dd:e1:b8:93:fa:dc:03:7d:
         51:7d:ea:d3:02:72:3a:29:78:ad:38:98:68:59:f0:1f:47:49:
         64:14:d0:23:8f:c7:ea:9e:27:a6:9c:ca:72:d6:f8:29:07:4a:
         ab:60:17:e5:95:c6:4f:c3:ba:aa:32:66:da:ac:c1:48:b6:a5:
         06:44:a7:f0:69:3c:75:d8:45:ae:3e:07:b9:dc:e2:b8:ed:6e:
         e6:c8:31:03:df:94:9d:34:bf:2b:27:e1:9f:d6:ba:7a:6e:5a:
         d1:23:a3:2a:81:ad:4e:f9:67:2c:9f:8a:9c:d2:28:e2:a7:b4:
         9f:3b:c7:48:7b:fe:37:6f:46:5b:53:e1:9c:df:ae:b4:8e:48:
         aa:d5:55:57:59:88:fa:54:a7:66:72:1f:76:3f:b1:a8:fd:8b:
         95:8a:b8:59:53:75:86:06:f9:1f:a4:61:d0:85:51:bb:2d:70:
         51:97:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:28 2025 by rpki-client