This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File:                     0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier:          2b9YwjIOO7LTSJF1l9mMJ8elMcsSDjOakyZaAxs2Id0=
Subject key identifier:   DD:6C:F8:D8:37:46:12:CE:7D:E6:41:F8:DA:D5:D4:65:F3:32:78:DB
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer:       /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial:       019AF12EED3826595EBDEFE78D9A8557E186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:02:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:55 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:55 +0000
Files and hashes:         1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: bbXYxG7YSnPIMayW65EA/+DQhp9GFDY89F5gRYYmDn8=)
                          2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
                          3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:ed:38:26:59:5e:bd:ef:e7:8d:9a:85:57:e1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
        Validity
            Not Before: Dec  6 01:02:55 2025 GMT
            Not After : Dec  7 01:02:55 2025 GMT
        Subject: CN=dd6cf8d8374612ce7de641f8dad5d465f33278db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:63:dd:09:f6:f5:59:b7:27:1d:b8:2b:db:
                    1e:bf:54:e6:92:ae:5b:3a:99:7a:75:e2:5c:86:7c:
                    26:9e:01:29:0d:88:6c:57:92:d8:0c:1e:56:11:f4:
                    e6:6a:a4:84:d8:4b:80:33:ec:a8:20:01:3b:93:b9:
                    df:03:d2:80:da:4c:43:97:c7:d5:fd:ec:76:3a:a0:
                    34:d7:8f:ea:33:43:05:77:4e:4d:66:ad:de:f3:34:
                    e9:45:c9:03:2d:94:7b:e6:72:25:70:c2:ad:54:0a:
                    c6:da:88:49:a1:41:8b:c4:79:39:31:27:d1:00:c1:
                    e1:ec:25:b2:c7:2b:25:df:07:b0:91:8f:c2:53:8c:
                    e5:30:5b:38:be:db:5d:8a:66:dd:fb:f8:94:cb:73:
                    3d:a3:ce:f9:1c:10:83:14:69:c1:1d:90:87:4b:55:
                    c8:d7:ef:cf:32:3e:92:7e:69:1e:a4:47:46:42:30:
                    0b:e6:df:3f:94:73:c9:54:1d:f3:43:db:a2:23:f1:
                    82:02:a5:ba:a1:a6:0d:2b:39:d9:2d:ad:25:1c:00:
                    b9:61:7b:e4:70:46:b4:6b:dd:0c:d0:16:45:29:9b:
                    b5:b8:c2:e5:3a:d9:5a:0f:ea:f1:ee:b0:c8:44:38:
                    aa:0d:06:f5:59:7b:a2:bf:92:65:af:92:e5:f1:b4:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:F8:D8:37:46:12:CE:7D:E6:41:F8:DA:D5:D4:65:F3:32:78:DB
            X509v3 Authority Key Identifier:
                keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:4a:0e:7e:93:b7:10:17:8e:e7:89:e8:f1:8f:1a:12:5a:
         e5:62:06:9a:9a:e5:54:3f:e3:18:29:08:1e:1a:b9:32:4f:bb:
         76:1c:29:f6:91:b9:2b:c9:ce:df:d4:33:6f:85:d9:de:ef:69:
         1a:e3:ad:b5:9b:4e:dd:fa:95:5e:bb:e0:3f:7f:2d:6d:34:61:
         32:9d:39:cb:f4:1f:d8:a0:cd:4d:6d:df:b1:2d:79:b2:5b:6f:
         18:d0:fb:e0:43:b0:1f:53:4d:7b:b8:d1:1e:c0:6b:53:d1:81:
         1b:74:37:82:f2:79:87:29:f7:4f:82:b6:79:ff:a2:df:0d:df:
         90:19:a1:46:6e:c3:ad:bd:6f:55:e0:e6:78:0d:f7:e7:2f:47:
         6f:5b:f1:7b:3e:03:5c:a2:45:ad:6d:f2:11:99:3d:a5:48:69:
         19:6e:84:67:85:4f:bf:05:39:22:4d:1c:ac:00:b2:fd:02:d9:
         42:6a:ca:74:87:f4:f6:4f:de:79:74:0f:37:1f:77:66:80:57:
         53:46:5c:90:c3:2d:67:75:10:8b:0e:54:92:7d:9b:0d:86:2d:
         0d:d5:ea:d3:fd:cd:17:0f:17:e2:2c:b2:c6:93:48:73:11:df:
         1a:65:a4:78:5f:15:47:4a:11:f3:93:8f:c1:c1:1d:c5:e4:f2:
         48:dd:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:45 2025 by rpki-client