This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File:                     152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier:          IIZYu/LYRoJXajE5GhtpKlud7LHBumstqOJMl+5Tojs=
Subject key identifier:   01:D6:39:EC:1F:92:4A:69:C2:45:49:6C:D5:1A:B9:42:BA:D3:BE:28
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer:       /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial:       019AF276BD71F8A509D29C532CB5C0921D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 07:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:59 +0000
Files and hashes:         1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: xmo6hEenxwSef5PQ0qXgUn44BRN9aSo2bQYGzP/t8uU=)
                          2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
                          3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:bd:71:f8:a5:09:d2:9c:53:2c:b5:c0:92:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
        Validity
            Not Before: Dec  6 07:00:59 2025 GMT
            Not After : Dec  7 07:00:59 2025 GMT
        Subject: CN=01d639ec1f924a69c245496cd51ab942bad3be28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:68:d5:0c:38:97:29:a5:d8:81:a6:ab:75:
                    ac:80:43:a2:c9:9d:bc:81:56:b4:91:22:2e:c9:8a:
                    65:23:67:ee:c2:55:ce:39:d7:ee:7e:f8:79:4e:81:
                    ca:de:f8:6c:71:f6:0a:28:73:a5:2d:8a:9b:e9:6c:
                    32:f6:5a:d4:e8:e5:cb:c9:c9:fc:e1:b8:57:7a:f5:
                    e1:30:09:dc:da:da:e3:51:85:82:b7:60:63:b3:71:
                    1e:74:50:f3:ca:41:83:d7:8e:9d:db:6d:0f:45:bb:
                    41:36:db:02:49:e9:cb:f0:ba:16:3d:33:2a:d5:08:
                    f1:f2:7d:cc:49:c3:a9:6f:a8:13:91:f1:ff:b3:41:
                    7a:90:5c:38:f9:10:43:de:f2:f0:91:0e:0b:9e:96:
                    e3:96:11:71:c7:60:35:df:b1:68:36:df:17:5a:c4:
                    97:8d:75:0a:62:21:0e:b8:9b:01:f4:f5:b0:4d:78:
                    5a:6d:33:90:80:80:39:e9:f6:a1:37:32:a6:2c:51:
                    1b:15:20:57:37:1c:91:05:87:af:39:dc:4d:bf:a7:
                    a1:5a:f5:76:03:1f:61:1b:a2:ce:46:6a:c7:7b:40:
                    13:0e:cd:e2:00:3d:9a:f9:be:01:81:f1:aa:96:4a:
                    d8:21:b2:7d:6c:e2:cd:3a:f2:26:df:04:7b:b2:37:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D6:39:EC:1F:92:4A:69:C2:45:49:6C:D5:1A:B9:42:BA:D3:BE:28
            X509v3 Authority Key Identifier:
                keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:74:09:01:6a:70:c8:eb:6c:4d:42:7a:32:f3:31:bd:1e:
         fe:1f:41:eb:e1:39:8b:55:7b:28:0f:1c:fc:32:e1:b3:76:f2:
         be:e4:41:be:44:ce:30:59:f6:37:d4:61:e5:7b:12:bc:02:f9:
         fd:48:5c:02:1f:8b:1a:f1:da:e9:da:ff:9d:10:d3:df:f2:28:
         b9:90:d0:15:08:5e:2a:14:3c:c4:45:82:8b:07:45:a9:df:bc:
         06:84:3b:0c:41:c5:eb:09:23:bc:36:10:65:61:79:ba:09:ad:
         29:36:44:53:ec:d4:00:bf:d3:62:4f:d6:8f:8b:d8:1e:f7:28:
         29:2a:92:34:48:a4:b5:48:ce:d7:6c:14:e2:19:53:4d:3a:35:
         c0:70:14:bf:bf:91:a9:7b:7a:46:52:e8:c7:58:1c:c6:39:6f:
         b3:e8:1d:8a:4f:58:22:06:8f:3e:24:06:85:6a:83:44:2c:7b:
         a0:5c:18:fe:cc:84:70:2d:91:d7:67:cc:66:1e:b4:ae:82:ba:
         c9:4b:d9:31:54:ef:ad:c3:4a:03:87:fd:db:f8:a2:da:a3:6b:
         06:f6:b6:e2:88:b2:6b:b9:47:b7:92:28:57:1a:0f:00:51:ca:
         8b:35:18:c0:ef:9e:2a:58:80:67:72:f1:83:cb:81:20:c4:fc:
         b2:31:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:20:46 2025 by rpki-client