This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File:                     rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier:          tneSlIbzuq742YvSzaqE5F5tXqvWcagrByinw0R3HvY=
Subject key identifier:   C7:3B:93:76:EB:CF:26:54:5C:77:2E:E1:6A:2E:4D:56:43:80:84:9C
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       019AF5E5EF7EAE98F3562D5C07DAF8AAF943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 23:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:18 +0000
Files and hashes:         1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
                          2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: 5U1gHaWBd/gyrvqogyOb6hTwQIpogBw1ZBTV9LJz4fE=)
                          3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e5:ef:7e:ae:98:f3:56:2d:5c:07:da:f8:aa:f9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: Dec  6 23:01:18 2025 GMT
            Not After : Dec  7 23:01:18 2025 GMT
        Subject: CN=c73b9376ebcf26545c772ee16a2e4d564380849c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:e9:1f:8a:fb:c2:3d:25:e7:a5:98:49:3d:
                    8a:7b:26:07:1d:07:aa:57:41:ab:df:e8:c9:d4:55:
                    4a:ca:96:da:2c:1a:b9:43:41:cf:63:ff:53:85:68:
                    ac:94:06:1f:c9:1d:fd:d1:96:d3:9e:a4:2a:ed:88:
                    4b:2e:84:51:9e:6f:84:27:8a:c4:72:9c:fd:f9:1e:
                    cd:d4:ea:72:16:18:0c:16:76:2a:a9:84:44:55:b5:
                    c7:c1:65:53:22:60:3d:45:03:fe:d5:4a:1e:3f:c8:
                    cf:f5:03:60:0b:87:75:af:0a:26:be:6e:1c:72:86:
                    75:b2:75:cf:31:02:23:4f:6b:37:b3:bb:63:5c:98:
                    77:b2:f3:45:87:7b:43:d4:c9:c7:b0:e7:1d:c2:1c:
                    55:97:db:f2:06:81:09:49:2f:85:2d:b6:f9:e3:b9:
                    67:23:6d:77:c8:4d:d8:e5:7f:80:17:78:f8:6d:69:
                    a2:06:7a:56:5b:0b:0d:ee:10:29:d2:43:70:59:75:
                    af:fb:89:36:a8:98:10:e8:8d:71:78:c0:e9:1b:5b:
                    7f:f2:a6:9f:87:56:aa:c8:c9:a8:8d:fd:7b:8a:1c:
                    38:cb:9c:a8:4e:0e:80:b7:85:66:28:f8:5c:d0:ad:
                    99:40:26:b2:3e:8b:af:0f:9c:fa:fe:a9:73:00:0c:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:93:76:EB:CF:26:54:5C:77:2E:E1:6A:2E:4D:56:43:80:84:9C
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:de:c7:e1:5d:da:a6:61:14:4d:ab:6d:1b:5e:6b:9b:15:
         97:2b:6b:bc:3e:61:5e:2d:ef:74:f1:f0:ed:c1:07:09:88:8f:
         4b:c9:7c:24:71:c4:5e:55:79:30:f9:0c:4f:05:ff:f9:40:34:
         c5:eb:89:63:fd:d7:bf:68:df:39:0d:c7:9d:f8:97:f4:b6:1a:
         a5:51:c6:0c:1e:50:12:de:04:a1:5a:e8:2c:3d:84:49:ed:71:
         ec:99:c4:49:bf:a3:81:29:df:16:0d:95:2f:23:f3:b8:f5:ea:
         d6:d3:bd:88:c2:ee:52:b8:e5:d0:0f:a5:1d:80:7f:71:b8:99:
         73:9f:08:8d:16:a8:91:5b:79:ba:8c:27:bc:3e:84:6a:d8:fe:
         e0:bc:10:58:56:a5:21:8f:bb:89:22:22:17:78:59:47:68:60:
         d1:bc:f0:e3:39:6f:90:73:af:25:8b:02:8d:14:ee:db:21:f7:
         76:e9:cc:0e:7a:02:6e:db:69:6f:c3:16:00:7a:3e:3e:4e:14:
         be:38:9d:d8:9d:a3:a9:7d:81:91:51:2d:6a:4b:12:32:6b:d8:
         61:69:6a:d6:28:9b:2d:71:85:88:5d:21:b2:ab:90:ea:a8:07:
         e7:de:4d:49:1d:f4:b4:1b:35:5e:92:05:e5:f6:3c:82:0f:26:
         e7:5e:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:49:58 2025 by rpki-client