This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          J6P+LYfeaTtDvM0+QcIbCJGQ4gYsfgJFJLT9D3xcM9k=
Subject key identifier:   08:A7:69:75:02:81:2F:2D:E8:B4:79:1B:83:6E:85:7D:10:20:67:16
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019B1125A91DB7C99941F5F5C5E9BD577E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          1777
Signing time:             Fri 12 Dec 2025 06:00:39 +0000
Manifest this update:     Fri 12 Dec 2025 06:00:39 +0000
Manifest next update:     Sat 13 Dec 2025 06:00:39 +0000
Files and hashes:         1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
                          2: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
                          3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: Nv4gZtVlxGDeHke/kvRo+EaGOLiboI22CWN5KnqaHi4=)
                          4: qeftSyRSXmAOVqQRtKtHutbh0zk.roa (hash: VtULu7reN7PL4/u/6gxMFu7joJNl642+iClkA1K3FD4=)
                          5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:a9:1d:b7:c9:99:41:f5:f5:c5:e9:bd:57:7e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Dec 12 06:00:39 2025 GMT
            Not After : Dec 13 06:00:39 2025 GMT
        Subject: CN=08a7697502812f2de8b4791b836e857d10206716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:44:43:d9:30:ac:88:e2:1b:e7:95:c6:07:
                    9b:e8:d1:00:97:ce:80:5c:3c:9c:12:b8:e1:78:14:
                    f7:ce:2b:4c:5b:2a:4a:3f:a7:e2:db:8a:db:6d:11:
                    a3:60:cf:c9:1d:36:27:b3:5b:7f:54:97:42:4a:48:
                    50:25:3c:a5:f5:53:fe:ce:17:fe:71:3e:1e:b8:b3:
                    d3:6c:fd:62:2c:d5:bb:73:85:87:e0:30:b9:60:8e:
                    b4:f9:97:0c:3a:78:68:cd:01:af:62:0e:92:10:b0:
                    42:c4:64:43:f4:18:06:96:0d:3e:b5:8d:2e:05:48:
                    34:e5:50:7f:23:d2:ae:39:37:58:10:60:11:e9:36:
                    60:65:a6:86:bb:2b:1c:13:33:ea:17:31:b0:b4:ce:
                    a4:b4:7f:d2:18:44:54:d4:24:29:a7:46:d8:06:8d:
                    b2:de:88:f9:43:d9:d0:7d:97:05:1f:24:5f:65:8a:
                    d7:1b:80:09:e3:27:20:d0:7f:c0:5b:b8:85:8c:45:
                    1c:bb:46:cd:43:d7:71:da:ca:47:66:f4:fd:74:e0:
                    3b:e7:65:79:0c:e5:b3:35:c8:f1:c2:27:97:da:ad:
                    36:3b:1c:53:9c:dc:d8:88:9f:9c:1e:4d:6c:2c:f5:
                    70:23:9d:a2:e0:c3:c0:ba:9d:61:c7:24:5a:5c:ef:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:69:75:02:81:2F:2D:E8:B4:79:1B:83:6E:85:7D:10:20:67:16
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:8d:00:cc:be:f7:f8:85:8c:94:b7:92:2f:66:ef:94:01:
         31:9e:0d:2c:f4:2e:88:91:8c:b5:d0:c5:a8:07:2a:6d:ae:e1:
         f6:8d:07:74:03:b4:de:d9:13:06:f7:1c:43:de:28:45:53:1e:
         e9:cd:f4:91:b4:13:01:03:2c:8e:05:b9:80:33:62:55:94:cc:
         2d:9c:ba:2b:b4:bb:c4:93:4d:ff:2a:7f:79:6a:c0:a9:8b:3e:
         f4:46:38:12:39:c9:22:0a:8d:af:66:41:5e:fd:8e:3c:15:30:
         a6:1d:8b:e0:bb:93:53:51:a6:e3:7e:29:9a:e6:5c:df:2c:1e:
         c0:33:d8:29:07:60:6d:f6:93:7b:a6:26:4b:64:20:40:06:4c:
         43:59:a8:aa:71:6d:9a:78:57:cd:87:13:70:a6:f8:45:62:d8:
         71:79:e7:d8:ee:71:81:ae:ef:cc:25:2e:62:d4:df:c4:90:09:
         1c:ed:c1:23:6b:eb:f1:e7:22:5f:35:8e:60:31:42:75:5f:39:
         69:66:61:44:e1:e9:01:19:ce:2d:c4:95:de:ae:7b:5b:5f:97:
         bc:5c:bc:00:56:e6:7b:c6:86:7e:3c:71:c1:ee:a6:53:5e:7e:
         6c:5a:6c:84:6b:86:f6:e5:fc:18:da:12:7a:a3:8d:b3:f5:89:
         32:4d:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:44:20 2025 by rpki-client