This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File:                     mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier:          tCzlfE135qTcYXYSGIlxN+HgyQwQb+wIFNXU7+wOwKA=
Subject key identifier:   7D:23:0E:B8:B2:7F:C2:3A:76:86:31:48:C7:6D:D4:12:44:AA:75:EC
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer:       /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial:       019AF12DDB0B3FD0DCC77493A88C3C1FAE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:01:45 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:45 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:45 +0000
Files and hashes:         1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
                          2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
                          3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 7ZFcAcjmkqljDb73e5EwifW5g+QB9EBkjWJDdmhruww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:db:0b:3f:d0:dc:c7:74:93:a8:8c:3c:1f:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
        Validity
            Not Before: Dec  6 01:01:45 2025 GMT
            Not After : Dec  7 01:01:45 2025 GMT
        Subject: CN=7d230eb8b27fc23a76863148c76dd41244aa75ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:90:61:1e:74:6d:e9:62:6d:13:ec:15:06:
                    ba:bc:ee:1f:19:1d:55:32:97:c3:7d:e0:66:75:6e:
                    b4:39:20:01:52:4c:03:01:2b:dd:5d:1c:7f:7d:84:
                    80:8f:b6:b6:b1:86:9c:89:d7:9e:9a:46:5b:9c:10:
                    eb:72:95:db:7c:43:09:b9:75:c3:ff:77:9e:f0:ac:
                    d4:76:85:8e:dc:6a:85:14:c5:7f:36:f5:18:2a:36:
                    83:56:b4:fc:c1:97:22:51:5d:0c:68:28:83:8a:a6:
                    cb:c7:61:40:89:5c:1e:06:6f:26:4d:1a:56:90:3e:
                    17:05:47:e7:5f:a7:09:d2:3a:fb:55:5d:ac:b6:89:
                    e1:80:89:58:a2:97:aa:1d:ec:a1:85:0c:c4:f4:12:
                    79:b2:c4:84:0f:64:d9:9d:dc:9b:87:68:c4:f1:11:
                    7d:e8:9f:c7:82:64:a1:6e:11:e0:ba:66:8e:c1:c5:
                    03:ff:04:11:c7:5b:e9:72:ef:ca:9d:53:0b:bb:1a:
                    52:11:a6:ee:19:17:7f:6f:17:93:bd:e8:eb:ec:4c:
                    fe:a6:5e:8e:c7:02:2e:a6:ed:dd:88:e7:06:72:d2:
                    33:e9:67:9e:d3:a8:44:3a:13:15:95:3f:1d:57:b9:
                    ba:26:13:28:1c:22:22:90:43:38:20:4b:cd:ef:da:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:0E:B8:B2:7F:C2:3A:76:86:31:48:C7:6D:D4:12:44:AA:75:EC
            X509v3 Authority Key Identifier:
                keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:c0:73:e2:29:51:46:b8:1f:72:7f:1a:48:f3:af:da:d5:
         d3:04:4d:d7:1e:7d:6b:41:f2:c1:cc:18:af:66:d4:90:a5:d2:
         4c:d4:53:b2:b9:d2:78:c0:ea:af:b7:1a:1b:08:02:01:e4:6b:
         14:38:8e:54:5c:2c:2f:7b:07:dc:c3:90:07:3c:ae:fc:4e:2a:
         c6:86:dc:57:a1:e3:2a:a0:1b:61:16:64:63:02:a2:3e:4a:6b:
         b4:db:11:6b:b7:3b:a7:2c:55:8f:6d:2f:b8:3e:4b:58:eb:72:
         50:a9:61:ba:3a:54:82:f5:9c:ab:d9:42:4e:28:09:50:1c:71:
         b4:9a:f1:84:92:90:df:1d:e0:61:83:62:d2:53:d0:22:86:91:
         5a:38:7a:5f:86:30:ad:9b:bf:af:1f:2f:f7:95:02:b2:74:2a:
         ad:14:7c:70:18:a1:02:ca:ff:4e:85:b1:99:9a:b1:61:ea:36:
         e1:55:9d:d8:c3:df:de:da:a1:0b:f0:b5:4a:b2:31:42:b3:27:
         01:ad:28:29:d8:91:5d:d0:a6:c3:6b:84:e3:a6:9e:aa:af:85:
         9b:ff:3e:a0:3a:1f:be:d5:41:0b:25:5c:dd:e4:b3:69:e1:13:
         ed:7d:b7:36:34:fe:0d:4d:60:65:46:16:f7:5a:69:0a:4c:86:
         51:7d:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:07:43 2025 by rpki-client