This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          AaNeFh765WRyqXd7aKtVuCt+JasyDcKf8SH+2Timpyc=
Subject key identifier:   C6:9B:AB:55:5F:CD:9F:26:30:12:05:3B:96:58:0E:FE:81:19:B3:12
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019AF23F6E938D1DD604C34799EFF3D2739C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          1775
Signing time:             Sat 06 Dec 2025 06:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:34 +0000
Files and hashes:         1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
                          2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: GJCg7OeSHoRH4BqN9SLNOQwu13VxGa1BM3i6s96DUZE=)
                          3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
                          4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
                          5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
                          6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
                          7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:6e:93:8d:1d:d6:04:c3:47:99:ef:f3:d2:73:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Dec  6 06:00:34 2025 GMT
            Not After : Dec  7 06:00:34 2025 GMT
        Subject: CN=c69bab555fcd9f263012053b96580efe8119b312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:93:71:50:b5:96:3d:f8:e5:6c:3b:69:b3:
                    fe:58:38:41:74:12:7f:19:60:85:cd:34:65:6f:4e:
                    f5:d9:fb:82:c9:a5:cb:52:bd:29:ed:a4:e7:55:2c:
                    ad:95:6e:23:62:da:e5:4a:6f:a3:62:3e:bd:cd:da:
                    fd:01:24:00:ce:b2:44:a2:15:6b:33:0f:9d:9d:8b:
                    c2:41:58:05:5b:75:5b:c6:a6:c3:74:9c:0c:79:52:
                    f2:2a:aa:df:ab:c0:50:b4:e6:48:fe:8a:b5:fe:0c:
                    08:8c:45:4a:54:02:47:59:2f:d7:7e:d0:e6:0e:7c:
                    4a:44:8a:b7:af:9f:34:61:7f:28:0c:9e:e4:e5:d3:
                    36:70:ff:f2:1c:4f:d6:03:69:e6:43:f3:43:de:d0:
                    df:d5:c3:93:b6:5d:5d:fe:51:12:34:98:05:42:b5:
                    cc:44:a6:a9:a1:fd:d8:52:bb:eb:0e:be:79:af:8f:
                    d5:e5:71:c7:69:b5:24:43:6f:58:5a:85:9d:b0:fe:
                    f8:08:cb:63:57:55:3f:ea:fb:1e:4e:71:18:f2:c4:
                    a0:a0:47:bc:91:24:7c:d0:e4:11:8a:54:60:dd:b4:
                    f1:22:fd:ca:ba:a7:69:09:63:41:26:85:68:49:76:
                    3b:12:d8:ea:ff:ec:fd:0b:f9:e9:8a:50:7b:12:bd:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:AB:55:5F:CD:9F:26:30:12:05:3B:96:58:0E:FE:81:19:B3:12
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:19:d5:0d:bc:bf:27:d2:a4:15:94:dd:66:27:41:ee:8a:37:
         f7:0c:c5:2a:d2:9c:f5:88:b5:0e:20:80:02:a3:e8:a9:dc:dd:
         a0:2c:01:9d:76:4b:7a:2d:c1:c4:17:b2:3f:65:06:63:79:d8:
         f8:eb:64:4f:07:07:38:14:21:44:40:66:62:6f:db:67:27:af:
         ab:71:d6:24:a3:ce:a9:0e:7c:9b:c3:25:49:c1:5c:bf:21:33:
         d0:e4:11:85:7e:2b:ad:9e:d3:89:74:d0:bc:72:a2:1b:e5:0b:
         fb:25:df:77:f6:49:a3:06:3a:04:71:35:08:c7:d9:67:c4:4b:
         94:1b:1a:c3:c1:a3:de:54:70:0e:c4:4a:11:1f:29:dd:92:61:
         ab:29:6c:4b:9d:ba:a0:6c:67:35:8d:29:b6:be:99:41:55:40:
         b0:93:4f:52:2d:17:6a:15:dd:45:a5:18:47:87:d4:e8:db:f4:
         dc:72:28:43:16:43:08:ef:3e:08:6a:57:ef:06:63:d9:82:ce:
         ba:06:59:60:a0:71:d6:63:49:78:92:1e:34:f3:c0:e4:36:57:
         80:6a:05:32:50:2f:e4:7d:4e:e7:fa:01:84:37:91:13:d1:c6:
         bd:c5:1c:c4:08:9c:83:9f:ff:09:b8:25:42:8d:66:67:98:79:
         14:35:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:32 2025 by rpki-client