This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          v/NcJt9EAuORxsoqDRRwcwN5NfZxWI35cowW1yXzW+Q=
Subject key identifier:   34:6B:B0:06:A8:87:DA:B2:58:CF:1C:1D:C9:71:F9:89:85:E7:AA:9E
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019AF1645DF177F7B8308DCEC57517E84019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 02:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:17 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: Dcx6uC1vhEKshinPQFapFnz0wUvzumR24e+sia5oNuk=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:5d:f1:77:f7:b8:30:8d:ce:c5:75:17:e8:40:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Dec  6 02:01:17 2025 GMT
            Not After : Dec  7 02:01:17 2025 GMT
        Subject: CN=346bb006a887dab258cf1c1dc971f98985e7aa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:c0:be:41:5b:f8:c6:64:83:6a:26:b2:ba:
                    92:f2:81:0e:b3:10:af:55:ff:cd:ee:82:ce:b3:f2:
                    cf:1b:3b:c3:d0:f4:59:c4:7c:c6:bf:d9:e4:76:38:
                    1e:7d:2b:a3:15:ee:9b:13:3f:72:7d:04:3e:d9:74:
                    1d:65:a2:57:e1:c8:58:7a:94:b9:6d:f1:48:bb:1c:
                    a8:5c:81:6b:4b:c6:e3:84:a6:79:a1:b0:51:f9:1b:
                    66:91:e1:96:4a:12:43:73:38:4b:76:6f:ca:8b:a6:
                    49:7c:5c:bc:30:8f:60:8b:b0:62:ca:31:b8:31:06:
                    23:97:c5:71:32:9b:81:0b:8f:66:65:bd:8b:65:a9:
                    69:77:82:3e:3c:e9:cd:8e:8c:a1:1b:5e:89:8b:84:
                    70:a5:cc:a0:9e:1f:83:77:a4:eb:6f:7f:23:f8:ea:
                    2c:2f:0f:69:9b:b7:6d:9b:58:5a:08:8e:e1:29:e3:
                    7b:88:2e:f7:91:f5:ab:d6:30:8e:71:d7:53:08:62:
                    a6:e0:9c:4e:e6:c3:0c:f9:6f:ab:de:97:5c:bb:90:
                    54:eb:1e:3c:d2:17:fa:11:85:7e:e2:dc:18:40:35:
                    83:2a:1b:69:d5:73:15:ef:8e:24:36:f7:03:31:4c:
                    e5:42:3a:c4:0b:29:00:75:b5:f8:65:21:d0:5b:1c:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:B0:06:A8:87:DA:B2:58:CF:1C:1D:C9:71:F9:89:85:E7:AA:9E
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:9b:83:1c:77:78:34:ca:86:cc:fd:d4:ce:29:6c:bf:d5:
         8c:3b:23:b1:a6:53:bb:78:fd:f0:ef:2d:9c:32:84:07:6a:dd:
         1c:69:33:86:6a:58:2e:44:b7:0e:d4:3a:46:35:02:43:2f:4c:
         d9:f3:6d:cd:6d:f9:84:7c:e0:76:f5:a1:d4:5d:69:57:77:22:
         57:af:7a:ac:84:04:46:23:2a:e3:0c:e5:0e:3a:33:16:7d:5b:
         46:b4:fa:8a:15:c6:88:d8:ca:2a:cc:34:1b:ed:94:30:14:c5:
         5c:3a:dc:99:65:20:d0:0d:45:ca:53:56:1c:05:da:18:60:c6:
         60:f7:64:b8:29:06:2a:db:77:4a:ee:17:9e:b1:1b:83:d5:36:
         ce:9f:f8:56:cd:9e:fb:85:07:04:9c:5a:35:87:86:c8:ff:7e:
         30:68:04:82:78:5c:22:7e:fb:07:d8:a5:11:df:7b:c7:ce:fb:
         f6:05:e6:62:1d:42:33:e9:db:6d:ad:f5:0a:74:c5:01:9f:32:
         81:2d:9a:67:08:9f:7f:27:23:0f:96:8a:05:17:5a:d0:91:4b:
         d7:88:81:d9:a4:97:50:a0:25:68:ee:0a:8b:c2:77:04:8f:03:
         05:79:e9:e9:ec:9f:b8:c0:99:bf:35:48:f3:d0:54:d4:cd:e1:
         6e:a0:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:58:21 2025 by rpki-client