This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File:                     RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier:          bmmVlgQzW2TfqGZ6XtIbanKCqUPnYbYz23FZeVRgYxs=
Subject key identifier:   C2:CE:F2:51:02:50:01:11:B3:41:3F:56:18:26:0B:14:D8:A8:0E:0A
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       019B0DB69ECF8E17B61A978E236C40365115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number:          1775
Signing time:             Thu 11 Dec 2025 14:00:30 +0000
Manifest this update:     Thu 11 Dec 2025 14:00:30 +0000
Manifest next update:     Fri 12 Dec 2025 14:00:30 +0000
Files and hashes:         1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
                          2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: JVMPiWlJoZaznyt8GhszmcmnaoVdTkGXysvfQZG/nJM=)
                          3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b6:9e:cf:8e:17:b6:1a:97:8e:23:6c:40:36:51:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Dec 11 14:00:30 2025 GMT
            Not After : Dec 12 14:00:30 2025 GMT
        Subject: CN=c2cef25102500111b3413f5618260b14d8a80e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:b9:b3:49:09:5a:6c:20:44:b4:32:a4:8e:
                    b0:fe:cd:de:77:b0:41:c8:02:fb:6c:11:db:33:df:
                    fe:41:f1:c6:d6:55:2b:37:6c:53:d7:91:6e:8a:ae:
                    4d:db:68:c1:a7:32:f8:af:4b:f8:d4:af:c6:a5:2a:
                    a8:ea:70:c9:b8:54:11:9f:f6:e2:95:b6:7e:01:34:
                    09:8f:d5:1e:36:84:15:f5:6f:98:f3:14:96:7b:89:
                    cd:0f:6b:22:2b:ca:a4:e7:84:e6:59:4e:3e:21:e7:
                    73:93:a7:88:d5:38:d2:44:2a:0f:50:f4:8d:4f:91:
                    e0:08:a5:ce:79:c4:d2:dc:f6:e4:cb:af:1d:49:4f:
                    2f:3f:18:f1:4e:62:f6:e3:7c:74:fa:13:9e:92:8d:
                    08:8b:e8:a7:72:90:a3:86:23:6c:42:e3:7d:20:ed:
                    2c:13:43:ce:06:ba:6e:18:b8:f3:d9:27:11:c6:76:
                    ab:e0:57:81:99:19:a3:4a:a5:3a:1d:b0:58:20:eb:
                    cd:a0:c3:b6:63:ab:b0:db:df:5d:4a:fc:95:f2:36:
                    d6:eb:e4:e7:f0:0a:f8:95:1f:46:d6:82:92:c2:70:
                    d0:92:1f:24:39:76:2c:ec:79:9f:f2:ce:e0:e4:38:
                    fd:eb:08:6d:02:06:b7:a0:12:07:09:6e:e7:1d:30:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:F2:51:02:50:01:11:B3:41:3F:56:18:26:0B:14:D8:A8:0E:0A
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:af:d7:96:77:08:36:b5:18:fb:81:1b:c4:44:44:c6:b3:
         60:f2:69:10:de:80:a8:75:45:3a:f1:9d:b2:e5:4c:78:a1:bb:
         fb:2e:85:9f:2f:c6:2d:d6:56:89:14:92:d3:8f:55:e0:ef:5f:
         a3:9b:2b:4a:b4:f7:6a:d7:bd:c9:89:0a:09:58:16:51:76:04:
         51:48:b8:45:2c:f8:9b:17:8a:22:a7:45:a3:1a:9e:80:55:b3:
         41:33:d8:25:b7:41:e4:29:21:8b:56:61:00:ec:35:5f:34:37:
         80:68:77:46:9d:fa:4a:70:9a:15:07:89:c2:4c:73:96:33:18:
         52:63:12:d9:a2:00:33:43:35:57:6c:23:28:5a:39:1c:8d:0f:
         6c:9a:1c:33:c8:a9:78:f2:42:1c:b3:df:fe:71:c0:95:fe:5b:
         d7:22:48:7c:f3:96:ef:01:0c:c3:67:0a:1d:e7:1b:62:45:c7:
         d9:41:5f:b9:2e:e0:c2:c6:0d:a2:d0:38:6c:e8:e5:ab:ce:0d:
         a6:f6:e4:36:30:29:fe:e4:be:c7:1a:b8:d8:66:61:7c:fc:aa:
         3a:ee:b4:6d:d6:5b:f8:ce:39:fa:93:19:f5:b2:7f:af:8e:85:
         40:b0:75:71:b5:8a:2c:8e:a2:49:50:2b:17:3d:67:62:12:af:
         1a:f3:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:41 2025 by rpki-client