This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File:                     p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier:          MskNg3vqZwOTOtZNh3wqpSBIVQEVJvLjehrOJi+45MA=
Subject key identifier:   15:35:0E:59:71:24:05:02:DC:5F:DB:DB:75:D0:05:31:EA:CA:90:EB
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer:       /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial:       019B4C27D33CA7E98EB19202E73A5A7233F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number:          1790
Signing time:             Tue 23 Dec 2025 17:00:36 +0000
Manifest this update:     Tue 23 Dec 2025 17:00:36 +0000
Manifest next update:     Wed 24 Dec 2025 17:00:36 +0000
Files and hashes:         1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
                          2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: TdqoFKyNRvt9/s6u8OTGqD1x5vlj1lQD21x9PrqTM5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4c:27:d3:3c:a7:e9:8e:b1:92:02:e7:3a:5a:72:33:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
        Validity
            Not Before: Dec 23 17:00:36 2025 GMT
            Not After : Dec 24 17:00:36 2025 GMT
        Subject: CN=15350e5971240502dc5fdbdb75d00531eaca90eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:ec:bc:d7:e7:f1:ba:df:c0:74:ef:4e:04:
                    89:83:98:1d:a4:cd:34:5c:6d:28:43:71:c4:81:5b:
                    88:d1:44:8b:bf:5d:8a:91:49:64:7a:77:ee:bf:90:
                    93:c0:b6:15:02:30:58:bf:49:c7:c4:a9:85:69:fa:
                    7e:35:43:85:1f:20:c9:5a:f8:00:e4:0f:72:ca:78:
                    38:f8:5b:29:50:9b:ae:0b:89:e9:ac:43:cb:19:65:
                    f0:98:66:f8:27:51:10:06:ab:79:ae:d2:1e:e9:61:
                    81:5b:e7:3f:80:a3:11:43:1d:68:dd:3a:f4:3f:f2:
                    de:50:cf:e9:39:d0:f0:1a:2c:98:05:e9:4d:a3:e2:
                    09:cf:9d:41:32:50:cd:75:cc:bf:86:9f:af:47:58:
                    42:1b:9c:35:db:e9:d0:16:9a:68:23:09:c6:33:a3:
                    96:21:29:8b:a2:7a:98:63:ed:0a:66:83:5e:5f:4f:
                    97:9b:1b:83:a4:a2:e5:55:b7:f2:a1:8b:77:97:01:
                    46:38:d9:46:5a:e9:14:37:7e:f2:7b:72:bd:f4:0a:
                    eb:d8:9e:eb:63:a0:95:5f:14:d8:67:c3:c6:8c:ca:
                    c5:2d:a2:2a:29:b1:ff:2b:1f:4e:11:7f:0a:7b:a1:
                    bd:5b:15:23:93:ec:ec:5b:ea:57:9d:31:ef:cc:f5:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:0E:59:71:24:05:02:DC:5F:DB:DB:75:D0:05:31:EA:CA:90:EB
            X509v3 Authority Key Identifier:
                keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:2a:be:ba:1c:47:bf:ec:b1:54:6d:82:94:e3:bc:f1:2c:
         75:35:fb:fb:60:27:f8:84:07:d7:69:fd:56:ae:7b:7b:4f:da:
         36:df:66:23:e5:ea:ae:2a:4d:6b:de:3f:46:c0:14:19:ce:da:
         6f:43:5d:57:5c:78:0d:30:77:b2:ff:fa:3c:44:97:d0:72:88:
         ac:8e:44:4b:ba:b6:e9:a6:23:c5:2a:34:f3:92:2d:f1:17:7b:
         b1:2d:25:3f:80:f8:97:6b:0f:26:1f:04:e8:45:79:40:7a:0f:
         a3:5f:e4:df:4f:0d:15:fb:15:e8:79:75:db:bd:43:e3:91:5b:
         ea:c6:09:a9:90:6a:a0:d7:3b:1d:21:2b:f3:a0:9a:c6:ea:14:
         87:a5:4a:de:b0:df:15:50:c0:f1:08:ea:6d:25:5f:48:eb:26:
         fe:b1:6c:7e:a6:c1:37:b9:58:bf:ce:a7:90:a6:4d:74:25:98:
         b8:9d:a1:61:9e:b6:5d:0c:64:1e:22:dd:5a:21:82:bf:e6:f5:
         60:d9:bc:d9:fd:82:5a:8b:e3:5f:63:88:67:81:06:26:2d:74:
         bb:28:60:3a:66:8f:2a:78:e7:b0:d6:84:f7:86:f7:33:ca:92:
         8b:7d:98:ed:88:a9:a0:5d:7a:47:6a:53:01:48:cf:37:eb:74:
         0b:a6:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:26:57 2025 by rpki-client