This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          a9bxGosizrwP2qGyMPKrINEEL1+MTzdfHK4YvKkh2+s=
Subject key identifier:   D0:78:6E:AC:CA:53:30:6D:1A:29:25:45:9D:F2:69:4E:78:02:8C:54
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       019B1B04B776DAFE8B1AF80112C780214190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          1778
Signing time:             Sun 14 Dec 2025 04:00:52 +0000
Manifest this update:     Sun 14 Dec 2025 04:00:52 +0000
Manifest next update:     Mon 15 Dec 2025 04:00:52 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: JE9HKWuxFIxZgk5AYEPZsEWY+0tGQa+Plb5DcApwogo=)
                          2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
                          3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
                          4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:04:b7:76:da:fe:8b:1a:f8:01:12:c7:80:21:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Dec 14 04:00:52 2025 GMT
            Not After : Dec 15 04:00:52 2025 GMT
        Subject: CN=d0786eacca53306d1a2925459df2694e78028c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e8:a8:53:1a:7c:eb:de:67:9d:5d:8e:cd:33:
                    53:5d:13:92:fa:3e:46:8b:d1:4e:90:11:d7:00:eb:
                    cb:19:c6:8f:ee:20:5a:25:44:43:6e:b5:4a:ca:bb:
                    02:92:25:62:8e:be:1d:6b:45:90:09:3b:d3:b7:92:
                    23:fe:60:29:f0:35:75:e2:0c:f5:74:d1:2c:44:81:
                    4a:a4:e9:a1:a2:6a:88:bd:eb:ca:43:79:21:d0:8f:
                    d9:eb:8c:a6:0b:74:b0:e6:94:68:93:d1:ba:bc:32:
                    b9:de:e2:8e:ab:27:29:5e:08:5b:18:d4:16:4f:a7:
                    f5:99:1b:c0:f7:9c:1d:97:0c:9e:d9:89:68:e5:77:
                    a6:41:41:c9:e1:9d:a4:ba:42:7a:ad:75:cc:96:35:
                    bf:9d:a6:70:50:3a:a9:fc:1f:5d:03:9b:a7:86:ab:
                    dd:85:c7:fc:79:df:87:ad:f5:60:06:94:49:38:8e:
                    ce:62:df:c7:7c:6c:c7:0a:e2:25:ab:bb:57:35:42:
                    d6:ac:cd:3d:87:53:fc:0a:61:37:7b:c5:e1:7e:83:
                    e4:87:b8:55:d7:6e:1a:59:f7:3f:b6:5b:92:54:48:
                    ea:c1:31:14:3c:d6:f1:34:1b:6c:a8:3c:a7:e1:12:
                    eb:2f:12:ff:c8:75:b5:49:02:37:f7:3e:c9:e1:ed:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:78:6E:AC:CA:53:30:6D:1A:29:25:45:9D:F2:69:4E:78:02:8C:54
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:84:85:d9:6c:31:da:16:09:e3:44:42:7a:95:d3:2b:6f:
         46:4b:1b:8d:94:f0:b0:79:4b:cc:67:0c:b2:0d:71:86:5d:4a:
         4c:dc:f3:06:9a:f8:eb:81:ce:9b:89:52:e5:b6:59:bd:dc:66:
         c7:5a:80:6f:52:d6:b9:41:86:f1:b5:c3:86:c7:be:c4:90:c0:
         7a:5b:72:81:34:8c:3d:e0:ef:88:2b:3e:87:f1:7b:e4:39:02:
         91:4c:ff:bd:80:b5:1f:88:6b:c7:fa:e5:d5:24:40:41:c3:a0:
         fd:7a:92:92:a9:9d:e0:60:cd:c7:ba:09:35:eb:a9:21:55:6f:
         de:67:97:cf:45:ee:c8:f7:00:b7:aa:2a:9f:ed:11:38:1a:01:
         62:c2:f0:c8:84:17:50:90:5b:f0:60:88:5f:a7:75:ed:99:f3:
         76:61:0d:e1:33:56:0d:41:62:da:0d:ce:67:c2:46:14:79:ac:
         a0:d9:d2:19:0f:71:af:5d:73:0d:cb:1e:28:cc:6f:10:5b:db:
         58:c0:ef:92:8b:92:79:29:5c:86:14:d3:72:10:90:76:6b:6a:
         cb:61:57:99:c4:64:58:35:bd:25:b3:2b:ea:df:14:04:ad:35:
         33:04:10:b2:85:30:eb:c0:a5:6c:63:76:9a:44:29:1e:5e:5f:
         50:49:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 05:32:10 2025 by rpki-client