This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File:                     rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier:          910Hxocq0hT9exD1u+l7C/ypRh4VYkOtXCjtDJBM+ig=
Subject key identifier:   C0:F4:8E:F7:8B:8C:80:BE:05:93:EF:FD:CF:22:87:45:DA:09:38:C1
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer:       /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial:       019B0EC9C931E1252FC76CFAD0A06EA0BBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number:          1772
Signing time:             Thu 11 Dec 2025 19:01:03 +0000
Manifest this update:     Thu 11 Dec 2025 19:01:03 +0000
Manifest next update:     Fri 12 Dec 2025 19:01:03 +0000
Files and hashes:         1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
                          2: T5Y8EpkKeGetNi2zzo4rltFiFJA.roa (hash: s9NKmZqIE9A+OEbtw2wi/j7clLv1bNESgqd0VT1/y7w=)
                          3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: dXFpFFmrBidc60CRFaumhif972SGZi4c+PZI1RQOBZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:c9:c9:31:e1:25:2f:c7:6c:fa:d0:a0:6e:a0:bb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
        Validity
            Not Before: Dec 11 19:01:03 2025 GMT
            Not After : Dec 12 19:01:03 2025 GMT
        Subject: CN=c0f48ef78b8c80be0593effdcf228745da0938c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:28:de:15:32:ad:44:fb:d7:21:03:24:5e:
                    67:98:8f:7b:10:19:fb:08:94:14:73:3a:53:1b:45:
                    69:32:5a:4e:12:de:70:db:02:84:c0:59:37:c5:b9:
                    0e:4c:05:b4:0a:8c:55:27:9d:13:39:48:e2:86:a6:
                    c3:86:ce:c5:db:dc:39:1a:ee:8d:49:d0:22:12:e3:
                    3b:2e:75:99:4a:d3:14:b9:7c:c0:6d:05:06:82:bc:
                    7a:c5:77:82:df:98:eb:e6:0d:b4:a6:0d:f3:c7:14:
                    ad:9f:31:1b:9b:c0:8e:dd:93:5d:3e:92:6f:2c:9a:
                    87:7f:40:8b:3e:b8:80:d2:08:0a:76:32:6e:f3:9b:
                    f3:6a:1c:41:cb:33:7e:50:2f:2d:80:1b:a7:4f:bb:
                    7f:d7:1a:d9:dd:73:71:e6:18:4e:aa:6d:4a:4f:2a:
                    5f:c3:4d:54:0e:1c:09:7a:cd:d2:66:d5:8a:56:ae:
                    c9:ee:65:e9:2d:57:76:ef:e9:b3:c9:8f:78:eb:db:
                    76:d6:4d:92:62:c3:d4:46:7d:e5:44:5b:4f:d2:58:
                    c3:25:de:b5:76:93:6b:1b:66:5b:a5:7d:ef:45:1e:
                    d4:54:00:07:9c:d5:87:a4:a6:a1:e2:bc:aa:e2:de:
                    18:18:92:79:0e:e4:0e:cd:fa:9c:c5:d5:e2:ce:44:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F4:8E:F7:8B:8C:80:BE:05:93:EF:FD:CF:22:87:45:DA:09:38:C1
            X509v3 Authority Key Identifier:
                keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:8d:a9:51:05:71:7f:a0:09:b3:d4:34:9d:64:47:3e:30:
         1f:58:26:73:a1:58:70:2e:44:ab:b4:60:8e:b5:57:7d:e4:23:
         c3:fd:8e:19:e7:b5:64:d7:c9:0b:27:a3:3a:d6:59:04:d9:77:
         aa:19:a8:ca:73:29:b7:4d:f1:89:39:38:9d:8f:c3:7c:32:17:
         f7:79:e0:32:42:fe:ec:82:1e:28:cd:db:5f:d0:71:4e:27:f9:
         e7:ca:fb:90:05:b3:e7:94:72:34:95:cd:4f:a1:3b:6b:84:b2:
         5e:c0:ad:1d:18:df:c1:21:33:56:52:3b:7c:71:f5:aa:c4:4d:
         99:e5:c6:79:1e:43:c4:e0:66:01:e6:e0:95:86:ab:c5:94:3b:
         8a:08:d9:04:5a:58:84:50:90:cb:18:8a:d0:0b:ec:bb:cf:cf:
         f6:3e:0e:92:9f:1c:98:71:fe:bb:16:1d:9d:37:8e:86:42:13:
         f9:31:be:0b:23:ce:44:a9:fd:12:80:41:a4:d6:bf:55:05:56:
         bf:fd:65:10:f5:0b:80:b0:63:8e:b2:30:bb:45:39:3e:a5:e4:
         fe:c1:9d:17:ba:96:b4:4f:6c:00:5f:80:00:2f:a4:c8:be:61:
         2e:e6:5b:24:a4:a5:e6:b0:32:44:5a:3d:22:7c:48:e9:c2:28:
         ea:65:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:34:37 2025 by rpki-client