This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File:                     cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier:          kVHRRCuwiEAmtyk13/XqAARhEvmMK9krtdFSc2riOJE=
Subject key identifier:   F5:12:35:41:FA:45:2E:77:70:20:34:D1:BC:D6:93:E7:3C:F5:0F:45
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       019AF12DC82B652408D1D1DE4890590D585D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 01:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:40 +0000
Files and hashes:         1: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (hash: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=)
                          2: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (hash: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=)
                          3: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: XbedBsa5OukJObzHuA23AesyfaleAxuyzryKJb3Mnj0=)
                          4: sZiDjovlZR7TPPXq724QB4yd_Ds.roa (hash: g0NC0qA2yq5MjWHr5RjOBshN8A2Yl9uqhpeNRfy6QdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:c8:2b:65:24:08:d1:d1:de:48:90:59:0d:58:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Dec  6 01:01:40 2025 GMT
            Not After : Dec  7 01:01:40 2025 GMT
        Subject: CN=f5123541fa452e77702034d1bcd693e73cf50f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:7d:c2:56:98:5b:3f:e1:d0:2b:ff:e1:30:
                    b0:ce:85:c3:0e:af:dd:55:d3:7c:1e:1d:a8:bf:dc:
                    65:4a:cf:61:d2:d2:91:aa:91:d0:49:fb:c3:8a:12:
                    d9:6f:fb:13:92:97:16:1f:53:36:fe:f9:00:74:a5:
                    07:78:59:99:d9:2b:cd:e4:48:59:d4:60:30:70:d3:
                    d9:6a:af:c0:7c:fd:c4:6c:db:51:28:63:bc:a7:1e:
                    b0:89:20:48:51:d5:2a:22:97:75:d7:30:51:60:09:
                    fe:bd:8f:83:4e:01:b0:2a:5b:40:75:35:a5:93:35:
                    53:19:e4:5f:68:a5:00:47:38:6e:e9:0d:52:65:5f:
                    6f:a6:70:be:99:74:c8:33:bb:4c:1b:2b:f4:e5:aa:
                    50:63:7e:19:e2:97:ec:00:63:14:19:99:fe:24:5e:
                    1a:68:28:5e:81:9c:a2:9b:af:93:6d:3a:cd:eb:fb:
                    f9:d7:f0:92:88:bd:7d:5b:79:28:e2:a2:96:ae:76:
                    71:de:cf:93:d6:f4:35:d1:d2:e6:3d:b4:67:66:e8:
                    02:d7:dd:18:7d:33:fe:13:7d:10:84:93:5c:91:4e:
                    11:24:8a:0e:83:5e:eb:86:6a:49:e1:d8:5b:04:92:
                    81:a8:2b:f4:4e:dc:ff:2b:d3:b1:aa:b5:c1:0c:b8:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:35:41:FA:45:2E:77:70:20:34:D1:BC:D6:93:E7:3C:F5:0F:45
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:7f:fd:fa:66:76:13:4f:75:46:f1:6c:d7:2b:1f:6c:91:99:
         b2:0b:a3:bf:0d:64:50:ed:b0:1c:04:3a:ac:c4:15:a7:45:69:
         28:e1:4d:b0:06:04:a2:e1:f0:29:d5:9c:f8:ea:69:91:43:4e:
         7d:39:77:24:3a:6b:29:4b:94:3e:cb:50:08:92:7b:d4:25:60:
         df:5b:01:9a:fb:de:d7:8f:d1:fd:f5:7f:1f:f4:f6:ca:b0:0a:
         0c:a1:33:36:81:e2:bd:76:c1:7a:30:f3:9e:90:f7:e7:a1:2c:
         4a:0c:32:8b:dc:1e:b4:84:0d:2d:25:17:59:63:d6:0e:21:5b:
         2d:9c:2f:c5:61:10:b3:23:fa:60:0e:e6:9c:14:c3:be:cc:a5:
         f5:ad:c8:dc:98:e6:77:bc:13:c6:d8:cc:bf:5f:5e:54:d1:8d:
         f3:fa:a0:0e:75:d0:76:ec:b9:bf:ff:c3:9e:08:87:df:14:d4:
         b9:2a:38:b7:34:3f:ca:8c:31:35:30:26:d0:f5:d8:35:c6:51:
         e6:18:69:a6:c8:06:8f:09:6c:90:3c:65:fb:8c:53:a1:b7:de:
         c3:e2:0f:f2:79:2b:4d:26:0b:89:74:30:4e:c7:9e:af:9b:24:
         02:ef:fb:30:59:e0:b4:2f:9e:b1:cc:a9:a6:54:00:ef:c2:34:
         65:a0:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:52 2025 by rpki-client