This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          nxXwSc6mjkCqiT4jEuOK0wTAe8igqZxUfjSpkEW6oN4=
Subject key identifier:   DB:54:67:B1:1C:9E:5E:50:15:0B:53:31:2B:23:0B:93:32:84:CD:1F
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       019AF276F209D63AA21F59E53D95E8237C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 07:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:12 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: lWJ+7h/QWciULV/YSXFoSfJIKeJMU7s1tAofnXkikRQ=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:f2:09:d6:3a:a2:1f:59:e5:3d:95:e8:23:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Dec  6 07:01:12 2025 GMT
            Not After : Dec  7 07:01:12 2025 GMT
        Subject: CN=db5467b11c9e5e50150b53312b230b933284cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:f0:81:4c:b9:97:c6:db:21:95:c7:f7:91:
                    26:f5:dc:13:dd:24:b3:15:5d:8e:49:84:64:9c:f9:
                    9d:91:83:a7:df:4c:9c:3a:2a:16:0e:e8:a7:a8:73:
                    0e:f6:26:c5:3d:b5:72:dd:52:00:e1:65:9d:26:e8:
                    61:e1:72:73:08:da:09:63:ae:14:b9:44:a4:31:b6:
                    d1:10:99:a8:01:12:29:b2:c2:96:5e:20:ef:14:1f:
                    fd:0b:98:b6:1d:f2:4c:72:71:24:2f:87:0a:88:da:
                    00:d9:c8:02:ce:3f:72:fb:f9:31:87:8c:07:51:1d:
                    7d:d5:f9:a1:58:ae:56:52:92:1b:35:59:68:0e:34:
                    92:bf:5d:da:a0:5e:0c:f3:d7:2f:b6:a7:8d:b3:1d:
                    61:d7:59:8f:28:be:46:f3:39:b3:73:cd:b7:51:65:
                    5f:7a:e2:d7:b9:55:85:8d:91:c9:64:35:71:7e:8d:
                    ac:44:73:74:ec:b0:41:c7:f9:8c:94:ad:61:96:27:
                    f6:9d:22:05:5d:59:c4:c9:0f:0e:dc:c9:75:ea:ec:
                    95:f3:ff:d1:c6:92:28:5a:a7:d7:be:a4:1f:74:a9:
                    7e:7b:8b:10:5f:b5:2a:e0:98:a2:bb:1a:bc:31:9a:
                    43:c3:81:52:0a:99:df:8d:6d:cc:80:27:0f:b9:cb:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:54:67:B1:1C:9E:5E:50:15:0B:53:31:2B:23:0B:93:32:84:CD:1F
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:cc:6e:e8:db:17:f6:de:b3:de:cf:5f:a5:94:49:2d:d4:
         b7:26:7a:c9:56:c5:06:c6:36:6f:c2:fe:fb:20:c9:23:ef:85:
         da:0b:3d:be:57:ed:d6:91:bc:d7:f9:3a:84:ce:9b:80:fe:d1:
         69:7c:6e:28:c6:3d:b2:e4:17:23:26:10:ef:23:78:55:a4:ed:
         9d:39:3a:81:76:06:eb:1e:62:a2:6a:d4:d9:ed:ef:14:3c:80:
         08:52:da:ca:d3:4c:d0:69:4f:26:58:02:8d:60:1f:f6:5d:6f:
         94:24:1f:5d:cb:a1:ec:0e:52:ba:64:e6:6b:ba:43:1a:e5:31:
         8d:d4:a4:98:90:52:4d:57:39:19:2b:42:0b:7e:33:2d:87:4b:
         54:b1:b0:73:32:c2:3a:6a:9a:93:1a:41:d0:87:a8:e9:62:d0:
         37:cd:55:f0:c4:7e:46:a0:5e:99:de:62:ca:77:58:5e:99:8c:
         e1:b7:3e:cd:6a:2b:3e:9b:9c:e2:15:6a:1f:09:21:2a:c5:04:
         46:12:7b:95:89:35:24:54:40:84:5e:93:f5:c7:d6:33:e1:03:
         e9:8f:ec:21:d2:9f:b1:4b:f1:58:a5:72:5e:a2:15:da:99:1a:
         17:2b:1d:9a:ca:25:d0:6d:36:7f:d1:45:1d:7b:91:7e:70:4b:
         7e:34:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:39 2025 by rpki-client