This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier:          1ZKsg19KrMpChv8sXjR3vV0zIELBQEaJg3qK8eQiAx8=
Subject key identifier:   31:4B:E0:0F:F2:34:24:AB:CF:40:73:EE:33:A2:A4:D3:63:B8:36:9B
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer:       /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial:       019B19BC53682C5B7D23170E817A919ADF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number:          1778
Signing time:             Sat 13 Dec 2025 22:02:10 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:10 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:10 +0000
Files and hashes:         1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: AvK/mfM77IAIhPJ7agPqTil2tawiqyzwzNWeIkAzEQM=)
                          2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:53:68:2c:5b:7d:23:17:0e:81:7a:91:9a:df:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Validity
            Not Before: Dec 13 22:02:10 2025 GMT
            Not After : Dec 14 22:02:10 2025 GMT
        Subject: CN=314be00ff23424abcf4073ee33a2a4d363b8369b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:39:38:f4:f1:f2:a2:4e:06:b8:2d:da:b2:
                    f2:ee:8b:10:eb:2e:48:83:22:e9:52:87:9a:cf:ed:
                    98:d3:af:75:55:82:7b:be:9f:d7:86:e7:c1:a1:43:
                    3e:3f:a2:92:39:4a:1f:1d:f4:65:3b:8f:28:42:79:
                    40:08:23:cc:38:ea:d8:2b:1c:bb:2c:42:39:96:65:
                    6b:10:5d:ee:32:f3:12:b3:86:a4:b3:c0:4d:51:65:
                    51:d3:e8:41:f4:71:b3:35:15:88:be:b3:57:66:13:
                    fb:3f:bf:ac:bb:da:c9:2b:9f:40:fa:32:cc:fd:cc:
                    46:50:8b:1d:58:e2:ea:77:0b:56:76:49:5f:1b:50:
                    16:b0:81:f4:54:a8:80:47:fd:68:43:d4:52:25:13:
                    68:c3:5d:ef:04:77:55:93:ae:d4:09:dd:b9:36:32:
                    82:a2:49:01:9a:8b:aa:a0:9a:ed:8f:28:d6:0b:5e:
                    69:20:bd:b8:61:87:d0:b1:a8:44:5c:ef:d2:a7:04:
                    8c:72:dd:b3:3d:ee:b0:bc:b0:0b:dc:ad:ab:93:1e:
                    f4:30:e4:5b:88:90:37:ae:bf:74:2a:f2:13:42:a8:
                    af:d4:c5:63:fd:da:bd:98:87:d1:66:12:2a:95:ee:
                    00:1f:7c:34:61:d9:1b:ef:bf:92:ff:73:6c:5c:87:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4B:E0:0F:F2:34:24:AB:CF:40:73:EE:33:A2:A4:D3:63:B8:36:9B
            X509v3 Authority Key Identifier:
                keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:f8:7b:1d:dd:91:fb:7c:7a:0b:e6:c0:a2:f7:ab:c8:39:
         ca:f0:6d:3b:51:ac:46:01:01:c0:1d:13:03:f2:30:8a:72:14:
         6e:f9:ac:81:ce:60:60:b4:62:fc:75:3d:24:6b:94:5c:2b:38:
         8e:09:30:fb:83:a8:13:6d:86:16:b5:75:9c:06:5d:a6:83:85:
         2d:86:ce:05:ff:18:96:f0:1c:98:c8:79:ea:ce:40:ad:10:ea:
         be:f2:86:74:71:f0:b1:3c:63:5f:d3:15:82:1c:94:8d:a2:f7:
         8d:43:c7:55:88:0c:51:6a:30:0d:b4:08:1b:0e:91:e4:8d:be:
         5d:56:05:70:12:dc:e5:60:17:a1:fc:59:c5:55:4b:b2:b6:54:
         08:34:55:a9:84:76:9f:9c:9f:9f:8d:17:7d:0a:89:2e:66:c3:
         b9:c2:2b:65:e6:94:de:76:22:5a:45:ef:79:d3:33:df:c3:4e:
         3a:d3:da:79:b5:29:24:c6:52:99:b3:e7:ee:b5:94:e9:8d:38:
         87:a1:74:c5:1e:09:a8:e7:18:51:4c:73:7f:c6:ac:d5:58:f4:
         f4:6a:32:8d:63:9c:11:85:8f:60:35:b8:8e:95:6f:04:e5:9f:
         2e:9f:ec:c7:66:2a:b2:d7:61:d7:6f:18:42:ae:55:20:d2:8a:
         87:97:6d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:04:19 2025 by rpki-client