This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File:                     tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier:          mFddfeFXZWq01bNQBw9gBhQECMbzLb+KIHZM59IqvUM=
Subject key identifier:   61:E9:2D:82:B9:19:E7:6C:6F:22:EE:B7:6A:6B:34:2F:4E:1B:E2:F0
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer:       /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial:       019AF12CDA21880A20D15B0F80796F40CC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:39 +0000
Files and hashes:         1: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (hash: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=)
                          2: nqcCNlWOaxzBS6V_iRpEwkk-xD4.roa (hash: Gy/3kP+ajUDPG4gJRX8IeeeYoZRygtkW+d5aOEOQInk=)
                          3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: EV8SK7dJ6/fexJgm/270f3oRmrV7gZscd0dKjxt+09o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:da:21:88:0a:20:d1:5b:0f:80:79:6f:40:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
        Validity
            Not Before: Dec  6 01:00:39 2025 GMT
            Not After : Dec  7 01:00:39 2025 GMT
        Subject: CN=61e92d82b919e76c6f22eeb76a6b342f4e1be2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:3b:0c:e8:f2:db:7b:9c:75:ad:73:ec:42:
                    4e:7f:1a:28:41:c5:36:19:6f:d8:ed:d8:9b:d5:58:
                    ab:ee:a4:cc:44:f2:b1:61:fb:5a:e3:7d:64:dc:63:
                    61:ea:2f:df:2b:90:43:14:19:d4:ee:8a:d2:cf:21:
                    de:39:ca:dc:b9:fb:ce:fe:42:23:ce:d1:6c:df:07:
                    cd:05:20:c1:66:bd:2a:73:42:72:8a:70:4e:3f:bd:
                    ad:40:4e:10:c9:5c:ff:57:bd:41:9f:2f:20:6c:70:
                    ee:85:9c:cd:df:dd:dc:cd:7f:a7:18:20:43:d9:b3:
                    19:58:a2:d4:0b:46:19:7e:73:25:c1:9f:31:11:ba:
                    5c:f7:f3:48:47:a1:73:38:82:84:70:49:58:ad:d8:
                    6c:b8:9a:39:25:3e:5b:1c:c8:ec:f5:4e:3c:35:b0:
                    97:f5:77:ab:ac:a4:19:93:30:05:d4:5b:ba:28:3a:
                    f2:e9:96:af:2c:8f:de:3e:89:b2:0e:cc:ef:29:0f:
                    3a:87:46:6a:b2:70:05:74:34:22:35:6e:10:41:dd:
                    6b:6b:5e:e7:f1:ba:a0:3b:27:83:ee:81:1a:0b:07:
                    9d:af:43:f8:c6:d3:a6:e3:c1:2c:d5:bf:02:12:5c:
                    27:6c:19:fe:f9:b1:3b:1b:aa:ce:f1:a4:74:f2:57:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:2D:82:B9:19:E7:6C:6F:22:EE:B7:6A:6B:34:2F:4E:1B:E2:F0
            X509v3 Authority Key Identifier:
                keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:9c:be:41:d1:4e:7a:98:e7:bd:49:f6:fb:45:9a:54:77:
         38:6a:9c:82:5d:d4:cb:49:90:95:28:50:4c:2c:62:ed:0c:e5:
         66:6e:dc:04:0b:28:6a:b5:6d:e2:70:da:12:48:7e:d0:d0:00:
         b0:b6:74:c9:ec:de:2b:7e:24:01:57:9d:7b:5a:37:54:45:c5:
         87:e9:08:fb:8c:4e:ce:1d:33:53:42:2c:45:f4:45:4d:d4:36:
         d3:be:b2:9e:80:b2:66:db:f0:86:19:89:13:4e:33:49:8a:b7:
         5a:c0:d1:47:88:04:fb:f8:b7:b3:5b:84:3d:a4:20:87:d3:25:
         89:35:c1:04:38:c1:45:de:1e:b5:b6:fa:41:e2:2d:a6:9a:b9:
         01:28:64:8e:16:e2:71:94:71:31:75:18:1d:96:3c:4f:2e:6c:
         04:da:f1:7c:15:8d:d7:cf:dc:c5:31:42:9a:3b:86:49:9b:56:
         2e:93:94:7e:e6:f4:e4:ec:7e:64:e8:71:f2:93:86:b4:0c:7b:
         24:ef:4b:6b:72:c3:41:05:f6:a3:06:48:8e:a7:dd:1e:d2:a2:
         59:e3:3e:c2:7d:94:78:51:75:14:b6:68:b2:f7:74:bf:32:2e:
         0f:46:8b:a0:f4:7c:95:58:5c:4d:6b:81:ea:a5:79:78:30:14:
         81:e9:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:26 2025 by rpki-client