This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File:                     pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier:          2PiFLJjT8Q8YEeeDRBqlSSRidGVlMoKPzAW6FRN7x3E=
Subject key identifier:   9A:2C:B0:7B:56:6B:55:D3:F3:C7:9B:F3:63:7B:1D:9D:AF:9D:75:41
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer:       /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial:       019B33E8805C8E0260318B7E874B3F8A68EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number:          1783
Signing time:             Fri 19 Dec 2025 00:00:33 +0000
Manifest this update:     Fri 19 Dec 2025 00:00:33 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:33 +0000
Files and hashes:         1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
                          2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
                          3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Z2LL7CVHhEWfR9jOGqG7rHasFh/39lyEqWfaS+8r7IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e8:80:5c:8e:02:60:31:8b:7e:87:4b:3f:8a:68:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
        Validity
            Not Before: Dec 19 00:00:33 2025 GMT
            Not After : Dec 20 00:00:33 2025 GMT
        Subject: CN=9a2cb07b566b55d3f3c79bf3637b1d9daf9d7541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:d3:09:64:fd:8e:0c:0a:b2:9b:9a:03:9e:
                    86:19:3e:df:84:79:23:cd:fc:db:fd:ec:30:24:bc:
                    ce:49:20:1a:48:95:72:6d:50:e2:23:f1:41:c7:ed:
                    cc:3f:f7:2c:5f:d8:d4:24:12:0d:73:a8:a3:76:56:
                    11:37:c0:b3:e6:5b:3e:dd:43:8d:41:e0:77:5d:1e:
                    54:dc:21:2f:d9:91:9a:ea:c6:e3:65:0b:d8:59:dd:
                    a9:56:89:e7:79:dd:41:3a:8c:25:21:61:52:7d:6b:
                    1d:8a:de:c2:5d:23:2f:64:01:53:b4:cf:53:81:cd:
                    f5:49:26:31:17:28:2d:c9:3e:46:9c:ad:32:a5:ec:
                    13:b0:11:dc:18:e7:1a:79:d0:f3:3c:e2:d9:a2:31:
                    b3:6c:e7:c0:10:50:8b:3a:01:a1:4c:eb:ea:60:80:
                    7d:91:57:7c:e1:2b:6d:93:8a:41:c1:92:03:ec:3b:
                    a5:c9:01:7b:8e:c2:6a:75:a7:25:81:8e:0e:12:c2:
                    6e:80:56:9c:e3:d7:6d:8e:ef:55:bd:48:da:09:ee:
                    40:54:6c:34:93:9c:58:83:d7:08:2a:22:43:67:bf:
                    56:48:b4:75:51:8d:1e:57:73:d3:74:10:fb:ba:4d:
                    d1:bb:f6:3c:b7:a6:33:44:06:e5:fa:07:ae:88:01:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:B0:7B:56:6B:55:D3:F3:C7:9B:F3:63:7B:1D:9D:AF:9D:75:41
            X509v3 Authority Key Identifier:
                keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:33:5c:be:da:26:8b:df:66:52:36:75:a3:a5:77:bd:fa:21:
         8e:cd:bb:82:2b:21:5b:65:e9:dc:48:cb:be:46:50:ee:8c:8a:
         72:32:e7:0f:e9:1a:2a:e1:9a:68:67:b0:ce:e4:1c:40:e6:85:
         c9:4e:ae:92:d7:9c:73:e5:b5:ab:7b:6c:06:0e:ef:3f:33:db:
         2b:08:59:7d:39:e3:fc:31:d7:c2:f7:1a:35:dd:e6:a2:ee:6e:
         17:6b:64:94:03:f7:58:e1:e7:7e:8c:9f:aa:ac:38:e7:21:49:
         7a:41:62:75:2f:de:bd:5c:36:48:90:01:82:b1:c2:9c:34:46:
         f0:43:ce:00:2f:92:ce:4d:0c:b1:ab:d5:0d:82:36:ee:1a:bc:
         10:a6:f4:e0:8e:b8:f7:e8:80:3d:2a:20:f6:1d:0f:da:d1:f0:
         0f:d5:12:7a:d8:47:bb:1c:82:db:5a:b1:4a:93:6e:e5:f1:4d:
         b6:e2:02:90:6a:2f:cb:8a:22:36:a4:91:80:46:38:b8:96:a2:
         14:2e:cc:73:d6:b2:e8:e6:cb:9e:d1:fc:d9:d2:4a:f5:26:e9:
         54:37:67:10:52:32:88:ad:9a:13:7c:30:91:42:2a:36:74:fd:
         fa:0c:a8:a7:f2:d7:c3:34:63:52:2a:c7:33:fd:a4:25:64:34:
         bd:25:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:49:09 2025 by rpki-client