This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File:                     ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier:          KVviH2hYkhPShqqnVaqUhUjj8oKGY1xuJUFitg3J5Xk=
Subject key identifier:   A2:26:7E:60:51:D2:9F:CE:1C:7A:6B:F1:EB:14:71:8D:05:45:EE:F4
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer:       /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial:       019AF19B9D676E658FBDE7121F42B9A8CECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 03:01:38 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:38 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:38 +0000
Files and hashes:         1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: awoNhWi/+STfj9ZXvy1AtzoRLtc71rrNxJClwHPmQfc=)
                          2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
                          3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:9d:67:6e:65:8f:bd:e7:12:1f:42:b9:a8:ce:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
        Validity
            Not Before: Dec  6 03:01:38 2025 GMT
            Not After : Dec  7 03:01:38 2025 GMT
        Subject: CN=a2267e6051d29fce1c7a6bf1eb14718d0545eef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:b2:bd:65:03:a8:a3:7b:21:c8:da:ad:1d:
                    32:e5:eb:b6:e9:b1:ce:cc:aa:fd:39:dd:6a:8f:80:
                    29:cf:46:4a:70:25:44:12:d7:d7:f4:0c:96:c1:bd:
                    28:bf:2d:f8:f7:78:7e:ad:ec:7d:68:2e:46:18:82:
                    0c:2a:33:f7:45:6a:d2:cd:5f:1b:05:57:04:be:f0:
                    ed:8e:6b:2c:cd:58:07:8a:49:e9:60:b8:4a:32:99:
                    62:5e:90:27:0e:be:8d:dc:e8:1f:ec:35:23:1b:0a:
                    6c:e3:ec:d2:f3:ad:df:21:99:f6:bf:a4:6a:89:20:
                    66:2d:53:5a:b0:90:81:c6:50:d8:0f:bb:91:6b:d5:
                    75:9f:d2:3b:ce:d9:ad:34:3f:81:21:9a:e3:93:43:
                    c6:89:fe:ad:2d:36:9d:db:a4:e3:e8:c0:ad:55:25:
                    de:d5:21:4c:6b:cc:bf:62:26:05:e2:74:e2:90:9f:
                    5a:42:fc:48:c2:f9:16:43:41:f2:84:24:26:e3:e1:
                    8c:34:03:95:64:5f:dc:b7:4d:a3:23:f2:8c:af:ac:
                    9c:35:bb:37:dd:29:d1:c3:81:73:28:be:2e:45:41:
                    e2:44:03:f5:de:e9:f5:2e:5f:5e:78:d8:24:b8:8f:
                    0b:31:17:0d:d4:71:b5:c6:4e:29:91:32:22:b3:0a:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:7E:60:51:D2:9F:CE:1C:7A:6B:F1:EB:14:71:8D:05:45:EE:F4
            X509v3 Authority Key Identifier:
                keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:83:68:88:29:c8:50:55:dc:65:8b:f8:f5:66:a4:4c:1f:
         3f:c9:47:ac:7d:72:6f:26:ad:03:7d:5f:af:45:74:94:09:a6:
         84:e0:a0:67:26:3c:ca:6d:ec:6d:d1:ac:1a:1e:a4:ce:9b:46:
         8f:b1:a8:eb:99:d5:b8:48:f7:8b:a8:ee:6b:c5:59:03:88:e3:
         28:78:48:82:f4:e8:d7:1e:ba:dd:f1:80:93:23:70:d7:7e:b8:
         ea:dd:a4:3f:e0:e4:49:fb:52:68:7e:4f:64:d7:b3:b9:bd:03:
         58:b2:8f:f2:92:2b:70:ba:74:2d:c8:b8:4e:0e:b9:5f:f3:49:
         24:3e:f1:c7:92:d9:be:72:5b:9c:34:27:f7:d6:4a:65:c2:9a:
         62:5e:75:1e:0e:c8:71:dd:f9:45:2e:4b:28:e9:fa:14:78:15:
         a4:32:7d:52:7a:c0:30:64:42:9f:b1:29:70:20:31:b3:88:fa:
         e9:b2:3d:5f:62:29:14:22:c7:40:2f:00:69:e1:06:c4:c0:76:
         56:ab:8e:0b:dd:f9:34:5d:42:99:f6:0f:c3:d5:77:43:c5:38:
         77:29:3d:cc:77:8c:51:f7:db:4e:de:d4:01:2c:65:6c:13:bc:
         bc:86:1f:79:ab:21:fe:d1:3b:63:6f:6d:3a:a3:09:e1:72:09:
         31:b2:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:05:27 2025 by rpki-client