This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File:                     k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier:          Nwa2lgOQQp5jxLuf1uz0RQ4MfSf8yxCDUCg6Ue+zJJs=
Subject key identifier:   41:F2:D0:69:63:9A:AA:19:5F:D2:5C:06:E8:84:DA:E9:02:73:9B:6B
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer:       /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial:       019AF2401091D6A231B9C415E545DAB82B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 06:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:15 +0000
Files and hashes:         1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
                          2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
                          3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 7S0Ml+YzzrXEULvbBRIu6+8PVCkPks/YI4YK7UjRdKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:10:91:d6:a2:31:b9:c4:15:e5:45:da:b8:2b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
        Validity
            Not Before: Dec  6 06:01:15 2025 GMT
            Not After : Dec  7 06:01:15 2025 GMT
        Subject: CN=41f2d069639aaa195fd25c06e884dae902739b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:bd:e7:77:56:a3:77:9f:19:3e:dc:be:86:
                    71:a1:f4:06:99:9b:36:5f:a9:ca:db:d6:a8:c4:9e:
                    35:2e:78:86:9b:b8:4a:46:d5:0f:0b:dd:18:e8:6f:
                    0e:f0:43:c0:51:69:d7:c7:6c:ca:dc:24:da:88:b7:
                    8f:10:8a:c7:39:1b:66:79:50:06:fd:72:b9:8e:3c:
                    48:c6:20:ae:6b:45:85:40:ed:e5:9e:4c:b0:cb:17:
                    9e:09:47:40:13:2b:8a:7b:0f:f1:a0:9d:4c:6c:83:
                    b4:8e:0b:97:ae:cb:46:9c:c0:3c:76:19:6f:84:e1:
                    cd:b2:ac:60:eb:76:58:06:e2:46:f3:69:16:0e:de:
                    a6:a9:c2:6a:a7:d9:53:84:96:d3:cf:ce:d6:01:85:
                    81:08:35:fb:1b:f4:28:94:23:b6:dc:4a:06:fb:97:
                    2b:f5:a4:ba:f6:fd:25:dd:ce:e1:59:ec:c8:a6:6d:
                    49:20:c7:ed:da:ea:c9:94:9f:e5:80:a2:ae:92:07:
                    33:8b:93:60:ec:16:80:80:17:3c:95:34:b7:80:87:
                    7a:b2:18:6b:27:b6:30:83:37:9b:07:1a:64:03:55:
                    a7:97:df:18:78:69:bd:c4:cf:6c:24:45:2d:fc:36:
                    cc:f8:09:f4:ce:dc:ce:c9:e4:fc:65:54:25:44:b4:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:D0:69:63:9A:AA:19:5F:D2:5C:06:E8:84:DA:E9:02:73:9B:6B
            X509v3 Authority Key Identifier:
                keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:6f:7b:b2:cb:da:9d:2e:0f:e8:0e:04:f0:b7:1f:76:86:
         84:75:63:93:11:9f:96:55:9b:bb:a4:e5:d6:39:40:6d:83:16:
         b2:59:42:b3:93:f8:f5:5a:a9:c2:8e:82:ee:56:4e:d2:0c:45:
         69:89:49:b8:ed:14:29:95:e1:fc:0b:0d:08:66:e3:76:65:bc:
         55:6d:00:70:a5:20:c4:1b:25:df:fb:94:1c:74:0a:67:0e:40:
         32:57:25:4e:d6:6d:f2:39:5e:6b:c3:39:85:ba:8c:52:94:08:
         ac:28:51:43:79:33:03:6f:b1:92:51:60:88:73:1b:72:9a:5a:
         e2:03:fe:ae:eb:3b:57:80:82:1f:86:bc:78:fb:38:86:2e:8e:
         9d:c6:da:c6:cc:69:cd:76:0d:73:97:ff:05:f0:3a:d5:18:48:
         f5:76:ba:ba:e2:b7:28:b0:fb:c8:76:c5:10:04:0e:38:99:b4:
         92:c2:2a:cc:31:48:cf:13:83:7e:4a:20:69:44:12:83:23:ff:
         2d:d3:67:f3:3a:e8:bc:99:1f:90:6f:80:19:28:fa:a2:16:e3:
         e3:36:c4:47:98:43:3a:a2:67:98:72:fa:06:ae:f8:83:3a:bd:
         fc:1f:92:3f:e9:61:0f:9a:43:10:2a:e6:ab:ec:34:ba:cf:ad:
         d1:01:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:09:57 2025 by rpki-client