This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File:                     tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier:          apM8QmQz+LL3SDKfvnGMqmu+2kyfAF2ZWNrrt/Zm380=
Subject key identifier:   CA:75:6E:77:EF:15:42:7D:66:D5:A8:46:EE:B3:18:4B:77:50:C7:E9
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer:       /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial:       019B115D431325243D02CF64806FCF8F7BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number:          1773
Signing time:             Fri 12 Dec 2025 07:01:23 +0000
Manifest this update:     Fri 12 Dec 2025 07:01:23 +0000
Manifest next update:     Sat 13 Dec 2025 07:01:23 +0000
Files and hashes:         1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
                          2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
                          3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: tYj0zr7rjrBsJnQZD8GJ8TurdLZlljx+kfAzSKbUTg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:5d:43:13:25:24:3d:02:cf:64:80:6f:cf:8f:7b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
        Validity
            Not Before: Dec 12 07:01:23 2025 GMT
            Not After : Dec 13 07:01:23 2025 GMT
        Subject: CN=ca756e77ef15427d66d5a846eeb3184b7750c7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:5f:5d:6a:83:ba:a6:89:bd:01:ac:34:44:
                    e9:ae:02:23:f1:06:f2:3e:e7:73:05:42:a1:22:38:
                    93:70:89:0b:0e:0a:81:85:e4:47:91:c1:d7:16:9e:
                    b7:7e:55:16:d3:3d:0c:cb:c6:be:07:be:81:e6:9d:
                    d1:8c:f5:1d:a5:e0:52:7c:ad:62:a1:af:23:9a:b4:
                    1b:ca:77:bd:9b:98:a0:12:be:ed:b7:fb:6e:f1:3c:
                    f5:c0:fb:a5:39:39:fc:b3:b8:25:25:bd:29:40:3e:
                    2b:73:a6:3f:9d:28:8c:37:83:5c:54:42:e4:26:4d:
                    a8:2e:96:18:f2:24:b1:41:47:79:07:6a:7d:bd:e5:
                    20:e6:35:1a:75:2e:8e:e0:d4:43:9c:8c:8e:3a:28:
                    48:ad:cb:b3:4f:dc:4b:cc:94:6a:a6:d8:ce:83:4a:
                    32:cf:3e:0d:d2:b4:2a:b9:8e:da:03:2a:e6:e5:30:
                    06:aa:01:4d:3c:85:28:fa:4c:91:b5:ff:fb:53:30:
                    c5:3b:a4:f4:7e:21:44:4a:be:88:c7:22:85:26:bb:
                    c1:c1:0e:9e:a9:ad:19:70:63:d9:a6:32:a9:96:9e:
                    29:45:e5:48:0d:06:e1:cd:ea:ff:ca:ec:fc:d8:af:
                    5d:78:6a:06:22:d8:1b:ec:d6:63:e2:c8:29:8f:bf:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:6E:77:EF:15:42:7D:66:D5:A8:46:EE:B3:18:4B:77:50:C7:E9
            X509v3 Authority Key Identifier:
                keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:e1:95:c3:93:fe:02:cd:c4:6e:bf:14:37:0d:88:97:52:
         cb:fd:76:6e:23:a8:79:78:92:c9:b8:0a:46:6b:db:69:3b:c1:
         31:bd:da:2b:aa:62:3d:c6:2f:28:86:5f:e0:5a:b6:39:c1:dd:
         03:77:72:24:be:ee:a2:e0:e0:fe:a7:2f:e7:81:4c:49:17:5f:
         dc:e9:dd:85:72:5a:8c:d7:d9:18:80:9e:e5:e9:aa:16:dd:a0:
         ac:e1:75:94:5c:b8:6b:ad:0d:0e:c3:df:ac:9c:31:1d:7c:db:
         91:1e:37:ea:60:1e:0e:e4:11:6d:19:4c:e5:23:0d:35:dc:d2:
         09:16:6a:4c:8f:2c:b5:54:97:87:fe:50:9c:9f:28:17:96:70:
         64:1e:b0:0f:38:73:a6:b7:2b:e1:cd:54:53:71:6e:b3:89:ab:
         57:b3:ed:c6:a4:16:86:53:73:91:44:b9:00:10:ee:01:6d:69:
         0c:5a:18:ef:d7:83:3f:02:c9:26:16:a3:07:7c:0c:17:ef:13:
         37:eb:37:dc:01:e0:60:37:75:09:b3:2a:7b:92:41:61:7b:19:
         4e:1c:b5:df:d2:42:f3:b8:b2:9c:89:94:d3:41:6c:fc:20:dc:
         0f:25:25:84:df:c3:c2:a2:1f:fd:1f:ca:9b:9b:19:63:7d:9b:
         b9:32:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 15:59:47 2025 by rpki-client