This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          pSbAC4aJSZFhKeVFFwTE2Dw2V4Ly5vj1zR2AkyVb0q0=
Subject key identifier:   CA:15:24:61:53:41:59:29:97:6C:E4:06:BB:DA:D4:D2:82:F4:88:B9
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019AF1D25542184A8A55505F48428E50B2C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          06E0
Signing time:             Sat 06 Dec 2025 04:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:24 +0000
Files and hashes:         1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
                          2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: 0WfHqIeqT36hEp8ciKvQ9LLkM0v7XD6yKg3kHq0pHas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:55:42:18:4a:8a:55:50:5f:48:42:8e:50:b2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Dec  6 04:01:24 2025 GMT
            Not After : Dec  7 04:01:24 2025 GMT
        Subject: CN=ca15246153415929976ce406bbdad4d282f488b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:81:64:2d:85:36:03:ff:63:e1:6b:3a:f4:
                    c0:3b:f2:61:9f:2a:b5:c8:15:f4:eb:9b:be:10:79:
                    86:c7:a2:99:85:2a:05:6e:f5:1f:35:bf:22:cf:a8:
                    a2:97:0d:91:70:2f:8e:14:f6:ed:17:3c:a7:d3:f9:
                    b0:af:33:b3:2d:11:3a:f9:bf:5b:e1:8b:46:2f:34:
                    32:e3:ce:3d:1e:e8:c7:c6:55:48:5c:5a:d0:38:d5:
                    1a:ba:ac:db:65:51:a7:6c:1c:d3:c2:ca:69:05:e6:
                    de:64:61:2c:f0:71:fb:aa:f6:1c:b3:40:96:9f:2c:
                    81:1d:71:b5:aa:57:96:5b:58:1a:69:d1:85:c1:80:
                    06:53:a3:f0:0d:77:3e:53:83:13:fe:d8:15:6e:68:
                    21:f9:4f:4f:9d:ee:2c:20:4e:e4:e3:b2:39:79:70:
                    de:7a:4a:9f:4f:67:17:13:04:40:a0:56:c8:5b:96:
                    f8:66:d3:2d:eb:fa:74:b1:3b:ba:63:58:d1:95:60:
                    90:e3:9f:85:a2:95:0d:74:81:8d:f9:67:3b:f1:6b:
                    a4:23:50:0f:3f:9b:fb:ef:26:bf:db:25:fc:11:4a:
                    8c:19:d2:8c:93:55:16:98:3f:3e:86:42:bd:ca:5c:
                    90:b0:42:c1:8d:84:c1:5d:13:5b:f4:6e:39:0d:9b:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:24:61:53:41:59:29:97:6C:E4:06:BB:DA:D4:D2:82:F4:88:B9
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:36:da:d7:f9:21:fe:c2:4a:be:79:46:e5:35:01:fb:48:15:
         aa:2f:4d:9a:c3:4b:25:05:32:0d:a7:89:40:95:8a:64:e3:c6:
         41:d3:c2:20:52:09:d5:ca:84:22:be:e2:07:70:1a:5b:80:15:
         e8:06:4e:11:47:53:61:1e:fc:1c:dc:f3:9c:89:5d:05:db:60:
         b4:ee:c0:fb:d4:5e:c1:13:7b:a4:aa:7d:41:0a:54:cd:96:5e:
         ad:44:d5:a6:d9:e7:2d:a0:b9:a9:06:99:d6:14:01:ee:68:87:
         af:9d:95:97:b9:a6:3a:db:d0:41:42:d0:15:bd:11:11:2b:a4:
         e2:b3:c1:ef:fe:79:57:41:7f:66:df:ed:95:a5:d6:8d:44:ce:
         44:b5:70:d2:e1:95:17:40:c5:48:eb:52:bd:d2:5d:6c:2a:fb:
         8d:fd:ba:d9:d1:7f:5f:39:5e:bb:dd:c1:3f:25:db:24:fe:cc:
         40:d4:6f:45:a7:b2:af:63:83:13:b2:0d:78:0a:89:2d:5a:5e:
         ad:e3:88:68:65:ac:6b:b8:14:bc:34:05:07:11:80:04:9a:63:
         29:33:c0:9c:2d:35:f9:00:d8:0d:36:b8:80:90:d7:d8:74:f6:
         4f:03:a4:f5:39:9c:13:0e:8d:de:1f:c8:9f:11:da:2c:e8:bf:
         fd:c2:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:54 2025 by rpki-client