This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          kPl28z27umkpKOsbkDPcS7MlCxxGhbn9ZNKwh2EvCUA=
Subject key identifier:   09:4C:6F:80:DE:E6:3E:56:C2:E3:DA:71:F2:7F:35:B3:14:D5:0B:15
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       019AF5779C30C903653C67888E46CD4B9DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 21:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:47 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: dCP8dPGwwFbHvoIBbb+rAZzr/pMWY8hkZ8QIopfpDm0=)
                          2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
                          3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
                          4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:9c:30:c9:03:65:3c:67:88:8e:46:cd:4b:9d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: Dec  6 21:00:47 2025 GMT
            Not After : Dec  7 21:00:47 2025 GMT
        Subject: CN=094c6f80dee63e56c2e3da71f27f35b314d50b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:4f:cc:bd:ed:ed:43:b2:42:52:44:b4:4f:
                    d9:c6:e9:ae:b8:7c:ee:4f:f3:ed:9d:b0:b5:dd:05:
                    45:d0:ff:14:62:4b:2c:75:fb:95:6e:7d:db:87:f8:
                    9d:27:fb:16:29:b0:41:23:e2:2e:dc:1d:63:60:41:
                    51:a4:b5:2f:e0:91:85:59:ad:3e:1e:fe:41:f1:aa:
                    44:81:00:04:5c:7b:22:3d:b7:f8:b5:9b:a9:63:f5:
                    70:2f:be:94:dd:26:33:6e:0b:f3:44:06:0e:bd:34:
                    1f:cf:b4:62:da:38:b8:a4:85:99:59:f2:d8:7f:fa:
                    3a:3e:dd:76:c2:e7:06:8f:12:5d:ef:10:0e:08:ef:
                    2e:fd:1b:2a:ff:db:ad:69:c4:11:0c:a3:67:f9:07:
                    1b:e8:33:e1:ec:8b:30:ae:de:69:8f:6d:3a:ea:1b:
                    e8:98:d8:8a:5c:ed:ad:b8:64:5d:6b:c4:ca:06:04:
                    b3:54:ba:a2:5b:3b:02:35:bc:fa:48:cf:85:d4:f2:
                    ab:23:4b:5e:5b:aa:39:b3:22:74:af:cc:e5:a4:5d:
                    7f:3e:e9:10:6b:9d:f3:bc:95:4b:82:2b:0e:c9:79:
                    02:c5:79:61:38:f4:c2:9f:a8:a1:4c:3a:38:37:19:
                    ae:b1:0e:17:2d:e1:cf:51:64:11:5a:e2:5e:3a:f8:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:6F:80:DE:E6:3E:56:C2:E3:DA:71:F2:7F:35:B3:14:D5:0B:15
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:2a:78:42:24:03:d2:ea:67:5b:4d:07:45:af:fe:a0:75:
         e9:c5:d3:39:6a:2d:b3:03:4d:90:7c:58:42:09:5e:5b:87:8c:
         43:b2:ca:84:a9:11:6b:c8:21:44:1e:87:10:29:c4:13:e5:a6:
         2e:cc:fb:59:e2:e5:82:1c:65:8a:bc:ae:be:7f:f4:7c:56:97:
         ea:3a:47:69:35:87:53:d8:69:14:64:70:16:5d:f9:f9:b0:32:
         ef:fd:26:5f:cd:0d:8d:b0:8b:e5:6a:e2:de:db:c1:4e:91:bb:
         01:a0:9e:6b:50:86:37:19:45:d5:bc:8a:89:cc:10:24:ee:29:
         26:60:3f:02:32:fa:f9:6f:f3:3b:13:f8:1c:51:e1:b2:51:22:
         cc:61:12:ad:30:1a:70:c0:f0:7a:4b:77:4e:09:46:a8:e7:ff:
         0d:d6:64:f3:d7:d9:ec:ea:af:12:8c:bb:d3:41:40:8f:42:49:
         a3:b2:8f:9c:44:a5:0f:6b:59:92:f5:b4:e6:88:88:cc:be:7b:
         c4:ed:19:bc:0f:ad:90:c8:dd:53:69:d2:e7:24:67:db:43:bf:
         69:d7:12:b6:ea:9b:eb:61:b2:45:f9:eb:60:ac:f9:d5:e1:46:
         fc:57:cb:3e:05:71:74:a0:19:e7:1c:de:a4:87:cd:24:87:fd:
         06:43:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:44 2025 by rpki-client