This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          +X5kAQu6HB3nDdfZtHs4Q2ZzFm8xi+CB84A1GMqSdnY=
Subject key identifier:   6F:02:6D:EF:0C:BA:C8:E0:F0:5F:FD:64:00:D4:E1:F6:DC:A6:9D:82
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019B22507A921FB3FD4EA16D0AF78F948723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          1783
Signing time:             Mon 15 Dec 2025 14:00:58 +0000
Manifest this update:     Mon 15 Dec 2025 14:00:58 +0000
Manifest next update:     Tue 16 Dec 2025 14:00:58 +0000
Files and hashes:         1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: 9CSLZAE5sFDalqpR2R3BTx2LA29QyFlqABE2ZAF8VP4=)
                          2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
                          3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
                          4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
                          5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
                          6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
                          7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
                          8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:50:7a:92:1f:b3:fd:4e:a1:6d:0a:f7:8f:94:87:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Dec 15 14:00:58 2025 GMT
            Not After : Dec 16 14:00:58 2025 GMT
        Subject: CN=6f026def0cbac8e0f05ffd6400d4e1f6dca69d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:72:9a:d1:ba:d3:e0:59:98:11:cb:ea:f3:
                    8b:1e:fa:d7:4e:20:20:c6:b5:98:10:bc:0c:ea:62:
                    d1:32:dc:88:fc:c1:3e:0f:fe:05:39:23:82:a1:d7:
                    43:31:cb:e7:94:d0:a8:6b:da:63:30:25:45:2e:cb:
                    9c:0b:11:a4:ea:14:e9:cf:6b:fc:61:13:74:45:f9:
                    7b:4d:59:2a:a6:96:1d:bc:d8:f3:3a:44:95:cc:cb:
                    1f:7e:62:d3:32:57:94:25:96:ae:e3:f4:67:95:85:
                    e2:81:60:56:0a:09:7f:49:75:07:48:e0:16:72:6a:
                    a6:0a:56:4e:12:75:60:aa:56:10:0a:05:5f:88:5f:
                    dc:7c:40:b3:ae:24:cb:45:2b:01:99:a5:8b:e4:0d:
                    f8:c5:69:4f:e9:c7:b8:53:4a:2e:cd:2c:47:17:f6:
                    9f:df:9b:ac:71:68:7a:09:19:e3:0f:10:c7:93:66:
                    9e:90:04:32:de:3f:05:ec:ac:c6:02:88:d2:5c:ba:
                    46:06:05:86:28:ed:b0:56:09:7e:3b:a9:81:3c:e0:
                    0d:46:2f:1c:33:9d:28:94:3a:5d:29:d6:cf:71:34:
                    a5:ee:6f:39:ce:04:ef:31:18:1b:9a:41:68:1d:a0:
                    87:33:4f:24:ad:8e:dc:11:2d:7b:0f:a1:88:e9:6e:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:02:6D:EF:0C:BA:C8:E0:F0:5F:FD:64:00:D4:E1:F6:DC:A6:9D:82
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:ca:0d:46:11:12:6a:5d:39:2e:e8:17:30:d4:db:e3:ea:
         94:97:18:98:1f:af:d0:43:21:39:d3:47:60:d0:4f:0e:d9:fe:
         45:41:28:4b:f9:49:d9:2b:5d:32:be:4f:23:51:7e:98:16:86:
         b3:7c:73:03:ad:47:43:bf:e7:69:6c:d3:69:15:8d:ea:51:73:
         f2:9b:27:6a:d0:63:a3:a4:1b:83:ea:4a:d1:0e:62:f1:5a:6e:
         8f:70:0a:07:15:b0:f7:35:64:6f:f8:91:df:b6:26:4e:d3:12:
         c6:48:3a:bf:0b:bf:b1:1a:e5:4e:1e:c8:ef:a9:87:62:8e:c0:
         18:ce:0b:69:fc:78:e0:22:5e:43:b0:43:ba:5a:03:93:0a:19:
         31:2c:40:f2:57:46:99:66:87:a9:52:6c:e0:a9:f6:96:0c:75:
         57:dd:f8:81:12:f2:77:de:be:12:10:b1:4d:d5:6a:8d:97:0f:
         ba:7f:23:22:67:35:ec:72:03:e0:6b:f7:c2:3f:f8:76:85:33:
         9e:2a:c7:85:48:50:14:22:ef:a4:51:29:b5:12:a7:02:52:b9:
         98:ba:14:fb:e7:1f:34:98:75:2f:3d:8a:97:81:00:9c:ce:ef:
         d9:fd:f0:87:a3:14:7f:5e:2d:73:b0:ff:80:51:ca:d2:83:e5:
         e4:13:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:04:06 2025 by rpki-client