This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          ENeDkjRgbPycLY3nyxqRenvbpnL0TZu7Rj4qa3aVnHc=
Subject key identifier:   23:BE:FF:D0:5F:7E:AD:83:64:D8:FB:CE:38:59:38:A0:C1:0C:AA:1E
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019B26D266F0B592EBCECC460519DD797741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          1780
Signing time:             Tue 16 Dec 2025 11:01:21 +0000
Manifest this update:     Tue 16 Dec 2025 11:01:21 +0000
Manifest next update:     Wed 17 Dec 2025 11:01:21 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: bmjhKOIB+y4vVw15y8ZlRBwMXm5WLJ/K5n4MdlAJ+f8=)
                          3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:d2:66:f0:b5:92:eb:ce:cc:46:05:19:dd:79:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Dec 16 11:01:21 2025 GMT
            Not After : Dec 17 11:01:21 2025 GMT
        Subject: CN=23beffd05f7ead8364d8fbce385938a0c10caa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:75:47:15:19:31:cd:bc:5e:98:ae:27:7e:
                    ac:2a:8d:74:34:35:10:39:19:4a:9f:f5:92:b8:ba:
                    8d:af:64:40:ca:9d:20:fb:99:64:28:7d:49:68:bb:
                    6a:c3:1d:ce:e6:36:81:20:fe:39:69:2d:5a:30:51:
                    0c:89:47:82:b7:75:1a:8c:92:6a:27:53:d7:51:a2:
                    f3:1d:c2:74:f6:61:73:05:33:7f:0b:01:70:58:85:
                    85:ff:5e:39:d0:df:57:0e:cf:9b:15:fa:4b:2b:12:
                    45:f2:b3:47:6b:32:3e:0e:06:06:39:36:35:9f:45:
                    2c:7b:51:de:df:8b:40:76:64:a7:6a:96:7c:1e:ef:
                    a1:fd:71:49:69:8c:f2:d1:0c:c6:c0:e5:6b:a1:4f:
                    75:d3:03:10:64:23:04:10:d8:16:fd:de:80:4a:16:
                    82:a7:b8:25:70:92:e4:35:49:72:6d:a5:b2:6f:88:
                    d6:b8:22:ea:75:57:3b:e4:30:c7:7b:a1:d9:7b:19:
                    05:09:a7:53:c6:20:f0:63:16:04:e0:7e:b1:7b:9d:
                    c5:7b:b8:64:9e:3b:c5:b6:d2:9c:fa:09:af:57:c8:
                    e1:cf:1e:68:c3:c1:a1:70:f2:a4:93:6f:d3:03:d4:
                    7d:e0:df:9b:8a:0c:52:78:17:a9:00:82:13:85:f9:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BE:FF:D0:5F:7E:AD:83:64:D8:FB:CE:38:59:38:A0:C1:0C:AA:1E
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:da:d3:a6:a2:00:c0:63:55:e3:6b:af:d6:15:14:a9:dc:5c:
         c5:5d:94:61:ba:5e:97:4c:49:62:07:cb:a7:11:a8:34:b9:40:
         d1:fb:e3:bc:1c:b5:c5:2e:a9:8a:d9:6c:03:57:83:1e:3c:63:
         fc:99:12:c8:53:c4:e2:da:b8:66:6a:49:ac:a9:96:df:34:b7:
         e5:0d:ec:d0:d4:2d:09:ad:c0:1b:a0:f2:03:2f:c6:33:86:10:
         18:12:8a:6f:f7:8e:0d:dd:8d:72:ea:d7:7b:62:19:bc:9d:87:
         07:0b:62:4d:e9:3a:e0:7f:57:27:18:cb:68:bf:6a:7f:bd:42:
         d0:00:93:4b:f6:a4:1b:b4:88:04:e5:49:ff:c9:97:4b:65:ce:
         05:04:8c:89:d3:72:af:be:09:06:a8:f7:11:c7:82:48:11:2e:
         6e:ed:d6:4d:6c:70:db:48:cc:92:d6:c9:56:57:11:29:15:69:
         a9:26:41:41:b5:bb:8c:b0:e0:eb:4e:53:1d:37:ea:58:82:94:
         ff:10:b9:7d:19:5a:3c:fa:82:15:46:61:25:8e:b2:fd:aa:b3:
         d3:dd:89:19:0c:01:83:cc:da:e4:8d:14:92:de:b9:dd:60:7d:
         86:a9:86:5a:13:f3:af:b0:98:9d:97:0c:b1:96:06:05:d1:bc:
         82:0d:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:26:57 2025 by rpki-client