This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File:                     ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier:          DrVHGpDr363dJMukxT71K9QsxxMn54EmQ1Zl5xlfm6c=
Subject key identifier:   E5:C9:8D:B7:D6:36:EF:2B:E8:A2:E3:78:30:54:98:21:3E:1F:F6:F8
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       019B59E39429464A59A64FC667F39AFB9FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number:          1088
Signing time:             Fri 26 Dec 2025 09:00:45 +0000
Manifest this update:     Fri 26 Dec 2025 09:00:45 +0000
Manifest next update:     Sat 27 Dec 2025 09:00:45 +0000
Files and hashes:         1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: 2aL3/pfdZPyiPdJaP+miyXANqlSc74dyBP0vY4wgjMc=)
                          2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
                          3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e3:94:29:46:4a:59:a6:4f:c6:67:f3:9a:fb:9f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Dec 26 09:00:45 2025 GMT
            Not After : Dec 27 09:00:45 2025 GMT
        Subject: CN=e5c98db7d636ef2be8a2e378305498213e1ff6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:35:5a:7b:7c:0d:79:94:22:3a:e4:7f:db:
                    bc:59:8a:05:e2:40:cd:8f:95:a8:43:90:28:3a:9b:
                    d1:a7:51:c6:46:f1:f4:b3:4b:5e:d0:d0:a5:9d:df:
                    b3:00:c2:93:77:3b:1d:b0:64:e9:a8:9c:3f:6e:47:
                    13:e0:7a:5a:7f:df:09:55:08:5e:1b:3e:b9:67:15:
                    80:95:f2:20:20:f3:ec:24:cf:66:c3:66:66:fb:f0:
                    97:0e:4a:36:56:cc:f4:d1:f7:83:92:32:fb:70:23:
                    78:dc:e3:c7:89:09:0f:01:5f:13:39:2d:de:09:8f:
                    2c:cc:74:c6:f3:00:d9:f2:24:89:2b:04:8a:09:5e:
                    44:49:57:be:a1:24:03:5c:9d:25:27:0a:96:5d:5e:
                    a8:3c:aa:9e:e7:4d:49:39:d7:8b:0d:d4:59:a3:b9:
                    05:3d:a5:d6:f1:71:eb:cb:6e:38:68:52:98:3a:fb:
                    2a:4b:21:0d:f7:fd:73:64:92:dc:75:3c:71:29:df:
                    c7:ac:62:33:76:3e:6d:43:25:e0:d1:17:4c:b8:8e:
                    63:85:aa:d3:86:59:86:ac:d3:6a:19:5b:ba:ed:ec:
                    07:e0:e5:9a:85:9f:b4:7e:cd:b6:eb:12:4d:7c:ab:
                    07:5c:af:24:5d:07:ac:f9:3d:c3:2e:b4:29:a5:80:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:8D:B7:D6:36:EF:2B:E8:A2:E3:78:30:54:98:21:3E:1F:F6:F8
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:9a:4d:45:98:59:f0:a0:45:d1:57:95:88:17:c6:6f:7a:
         7c:96:54:54:45:a9:3f:4e:10:99:1d:4a:ca:8b:29:be:d0:d9:
         8c:e6:1a:f0:db:a7:4c:05:c9:72:74:12:7a:f0:7c:d5:66:36:
         d8:a0:ae:c5:9e:f0:74:a2:e4:7e:a9:72:3b:cf:2d:cc:e4:da:
         29:18:c2:4f:d2:cf:7c:5a:83:9a:52:8a:09:4a:98:4e:82:a8:
         0f:af:30:31:7f:d7:3b:bc:d3:10:c9:87:32:d5:d6:01:1f:b6:
         29:3a:77:99:30:01:3b:b5:b1:86:4f:19:3f:32:2c:bf:9f:4c:
         d3:9d:38:08:57:70:e7:8b:43:50:7b:c1:1c:ce:33:f5:13:8b:
         ce:7d:ec:cb:b2:4a:e6:3d:1b:61:17:a0:4e:95:c2:c3:e2:53:
         71:f8:a5:8d:49:c0:61:06:92:8f:71:79:12:f0:c4:ed:b5:c3:
         e8:d4:22:d2:c3:4e:93:84:c9:d5:18:a4:67:49:fe:37:e8:ca:
         55:ba:0f:b6:a2:c7:c5:a9:9c:63:4a:58:ea:60:66:41:4c:c0:
         3c:47:01:98:c8:f2:bf:42:a1:85:e4:7d:d1:0f:fb:83:dc:c0:
         8b:1a:c0:f6:c3:57:2e:80:39:41:35:54:00:8b:c8:52:0b:77:
         14:cc:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:15:55 2025 by rpki-client