This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          unLyLc3pH5eF3e+yMGv37dB001OifWqXHwTsV0y8IQ0=
Subject key identifier:   59:65:88:6F:A5:18:8C:E9:A6:F9:E5:DA:63:0B:6D:D4:23:56:82:BA
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       019B59E401D6C79F53F9042F965288845C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          1793
Signing time:             Fri 26 Dec 2025 09:01:13 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:13 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:13 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: SS9fpgQcwJUF1zArinqLPlhBAF0F5/6JlQFUNzdNjr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:01:d6:c7:9f:53:f9:04:2f:96:52:88:84:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Dec 26 09:01:13 2025 GMT
            Not After : Dec 27 09:01:13 2025 GMT
        Subject: CN=5965886fa5188ce9a6f9e5da630b6dd4235682ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:61:37:66:f5:eb:b4:b1:3a:40:9a:c4:4e:
                    d2:00:4d:db:5f:db:67:f9:d6:d8:d0:ee:aa:41:2f:
                    7d:04:a1:ae:ee:41:30:be:e4:f6:c2:9a:61:45:cc:
                    c3:39:a9:51:d8:bb:62:00:4a:67:93:67:60:30:95:
                    37:de:5c:b6:4a:dd:e0:2d:5b:b7:8a:fe:77:a2:68:
                    61:8b:bf:6a:e1:e1:1e:db:8f:b2:a7:8f:4a:49:3b:
                    68:50:bf:5a:8d:fe:ba:6a:a7:ad:9a:f4:69:42:2a:
                    2e:8f:76:e6:0b:3e:e9:02:4e:a5:e5:7e:0a:a4:d7:
                    1e:71:dc:d4:e2:5a:56:33:c2:c1:d7:0b:1c:c2:54:
                    9f:d5:82:0b:2f:50:7a:25:a7:cd:82:66:a7:34:4b:
                    d2:0f:26:0e:06:3d:a0:bf:52:3c:0d:0a:c1:09:3e:
                    29:dd:7d:fb:ee:4f:17:ed:9a:8c:5e:cb:58:15:4b:
                    3e:22:11:97:0e:ab:5d:2e:1d:3a:80:35:c2:13:a6:
                    0f:e5:16:6f:d0:00:8b:18:1e:4c:d9:e9:35:73:ff:
                    c3:c8:77:60:31:57:24:19:5d:e1:f7:79:ef:34:49:
                    cd:dd:76:37:92:ce:7b:46:8d:97:4f:a8:38:cb:d4:
                    b5:66:50:ac:6a:56:22:31:9b:4f:f1:8f:72:64:b1:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:65:88:6F:A5:18:8C:E9:A6:F9:E5:DA:63:0B:6D:D4:23:56:82:BA
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:a2:d4:6b:56:09:45:10:59:7e:24:b1:87:cb:25:0b:57:
         5f:3a:01:97:19:a7:df:c8:8a:53:4f:e7:24:9c:df:65:ba:75:
         41:d4:8a:3b:89:aa:69:0e:26:09:ac:42:43:4e:2a:0b:80:23:
         cb:c4:8d:a2:cc:83:f8:79:c2:61:a4:98:6d:85:c4:1a:d3:c3:
         a7:f9:f8:a9:cb:63:e0:bf:57:02:df:ba:7c:78:48:62:86:c0:
         ef:33:27:fb:ce:72:f6:16:66:ed:a4:8f:be:87:6c:b1:2a:c1:
         5d:8f:ca:4f:c3:ed:7e:be:69:f6:67:3b:20:5a:fa:d2:d6:d6:
         16:81:26:63:02:06:19:88:69:18:4b:63:65:1b:39:42:23:90:
         2b:be:70:55:10:ce:4f:8e:71:ce:cc:c4:6b:50:67:42:f1:f2:
         33:bd:d1:3d:f1:f0:ef:c3:d6:e8:46:c7:51:7b:5d:6b:06:72:
         96:c7:c4:7d:36:da:a0:c7:29:67:7f:f4:39:69:e1:57:cc:9c:
         63:12:af:85:b6:69:9a:1d:93:38:bc:08:fc:2b:38:26:2b:03:
         58:b3:5e:79:0f:9c:d9:c4:fd:6c:bd:34:2c:6e:0c:1f:5f:20:
         25:c9:c5:de:11:2a:89:39:4f:c1:ca:5f:14:c7:7b:37:8f:c8:
         80:d4:85:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtZ5AHWx59T+QQvllKIhFw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGI1YzFlZWNiYTg2MGNmZmYxNzQ3OTY2ZDc2M2M5YTgy
ZjZkOWEwHhcNMjUxMjI2MDkwMTEzWhcNMjUxMjI3MDkwMTEzWjAzMTEwLwYDVQQD
Eyg1OTY1ODg2ZmE1MTg4Y2U5YTZmOWU1ZGE2MzBiNmRkNDIzNTY4MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t9hN2b167SxOkCaxE7SAE3bX9tn
+dbY0O6qQS99BKGu7kEwvuT2wpphRczDOalR2LtiAEpnk2dgMJU33ly2St3gLVu3
iv53omhhi79q4eEe24+yp49KSTtoUL9ajf66aqetmvRpQiouj3bmCz7pAk6l5X4K
pNcecdzU4lpWM8LB1wscwlSf1YILL1B6JafNgmanNEvSDyYOBj2gv1I8DQrBCT4p
3X377k8X7ZqMXstYFUs+IhGXDqtdLh06gDXCE6YP5RZv0ACLGB5M2ek1c//DyHdg
MVckGV3h93nvNEnN3XY3ks57Ro2XT6g4y9S1ZlCsalYiMZtP8Y9yZLFXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlliG+lGIzppvnl2mMLbdQjVoK6MB8GA1UdIwQY
MBaAFNuLXB7suoYM//F0eWbXY8moL22aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzIt
ZmI2ZjAzN2EyODdlLzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzItZmI2ZjAzN2EyODdl
LzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR+i1GtW
CUUQWX4ksYfLJQtXXzoBlxmn38iKU0/nJJzfZbp1QdSKO4mqaQ4mCaxCQ04qC4Aj
y8SNosyD+HnCYaSYbYXEGtPDp/n4qctj4L9XAt+6fHhIYobA7zMn+85y9hZm7aSP
vodssSrBXY/KT8Ptfr5p9mc7IFr60tbWFoEmYwIGGYhpGEtjZRs5QiOQK75wVRDO
T45xzszEa1BnQvHyM73RPfHw78PW6EbHUXtdawZylsfEfTbaoMcpZ3/0OWnhV8yc
YxKvhbZpmh2TOLwI/Cs4JisDWLNeeQ+c2cT9bL00LG4MH18gJcnF3hEqiTlPwcpf
FMd7N4/IgNSF1Q==
-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:03 2025 by rpki-client