This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          jAZQ00C1Vv8uwM9fPuTNpiDLy2PG4SSeWvNhKSpfJ14=
Subject key identifier:   AC:03:AA:46:FE:03:DA:81:19:F2:BC:1F:D7:78:56:37:75:44:32:77
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       019AF6531E581C9BD2FBDA73E467A73FD444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          1389
Signing time:             Sun 07 Dec 2025 01:00:33 +0000
Manifest this update:     Sun 07 Dec 2025 01:00:33 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:33 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: +lmfK5BL5EGuTzlKC1JiuM+amDE0oCTfcMpdtgjCqQQ=)
                          3: 9eH4i0p6oCfS5Co6koOAWFXm7Jw.roa (hash: tsyzy52lOJrhyfRNf4yeW+R41ItQLxSE8ed3yFpy/I0=)
                          4: F1oHARDbb0413dSyEGLjEDHpSFU.roa (hash: /vKh5/kgPMeg0YH31fC61X6lQFd8cqgLCdJuYa3DtJo=)
                          5: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          6: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:1e:58:1c:9b:d2:fb:da:73:e4:67:a7:3f:d4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Dec  7 01:00:33 2025 GMT
            Not After : Dec  8 01:00:33 2025 GMT
        Subject: CN=ac03aa46fe03da8119f2bc1fd778563775443277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:52:bc:7e:3f:2a:02:5c:9d:d5:bd:d1:9d:
                    3b:0e:d2:37:be:27:7d:72:76:79:75:17:4e:7e:b0:
                    c2:e8:d2:e0:62:5e:cb:19:fa:a4:70:32:bd:cc:8d:
                    f4:b0:16:73:f5:77:82:46:3b:de:57:cf:3c:86:8f:
                    fc:1f:7f:91:55:06:85:4b:b9:9e:44:1a:9e:a3:53:
                    df:ca:97:a7:1d:60:7d:37:e8:ab:3d:be:2c:3b:08:
                    25:4a:59:59:79:b9:41:95:8a:46:5b:2c:f5:47:6e:
                    1f:bf:0a:d6:3b:4a:d8:d5:7e:ae:51:2b:ae:26:97:
                    68:73:ea:0e:de:b4:9b:ef:41:bc:9b:dc:44:e1:25:
                    b9:83:1a:88:e1:96:1a:1f:d3:32:56:07:86:04:41:
                    c4:42:55:7a:17:05:cb:f5:e4:f2:23:11:aa:b9:94:
                    63:e5:ed:e5:73:56:b7:28:57:f4:b2:fc:de:b3:51:
                    8e:68:b8:4c:5c:f6:56:60:56:b1:23:4e:58:12:54:
                    c4:38:4d:80:cc:17:c2:8a:26:20:33:72:82:cd:2a:
                    b0:2c:b4:0b:2b:0d:56:ee:72:a6:c3:59:6c:22:34:
                    da:df:11:b5:d0:23:de:7c:ab:c4:2e:6f:7a:34:bd:
                    c9:31:95:8d:6d:95:c9:91:5a:08:b1:2e:41:08:15:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:AA:46:FE:03:DA:81:19:F2:BC:1F:D7:78:56:37:75:44:32:77
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6f:be:e4:2c:cd:8d:51:32:88:6d:9b:f6:3e:4f:8a:28:ce:
         e7:ca:48:cd:35:0d:33:0a:c3:48:38:69:8b:b8:00:38:36:ac:
         42:71:93:fb:b7:38:5f:99:99:65:a3:3e:d1:6b:0f:1c:31:57:
         68:06:dc:65:37:b5:c1:a1:64:fa:99:7e:b5:75:42:34:70:ef:
         9f:69:d5:4f:3a:92:e7:fc:bc:1a:a0:9f:39:1f:b6:77:75:f5:
         d3:70:b9:47:9e:88:27:97:fc:a3:a1:27:86:fe:80:ac:45:5c:
         6f:d6:98:40:93:93:b6:9e:a9:38:fa:87:d0:77:7f:1b:5b:4e:
         51:c5:50:f0:e7:5d:e3:50:3c:9a:39:7b:21:a0:86:e8:24:27:
         d1:ae:d6:7b:c0:a2:e5:80:5a:dd:f4:f8:1d:2a:e9:63:ef:3b:
         ab:9e:03:3a:69:94:02:09:3a:fc:f2:9c:00:49:9a:e6:f6:49:
         ad:e8:63:38:1d:03:95:c3:d2:22:b3:fe:2d:9f:54:7b:02:30:
         c8:46:4e:f5:ff:4b:3b:83:9b:24:91:aa:17:65:67:d7:f2:d0:
         f4:27:05:6c:58:eb:7c:68:a8:e9:90:e3:51:42:ff:eb:01:90:
         fb:43:86:69:8f:c9:37:72:87:b7:bd:21:f5:c7:7d:d3:81:67:
         e5:59:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:46:40 2025 by rpki-client