This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          cGdK7Dh8PJ8TF3MwskXrBcvBs3Lro+kGtAilS8PfUiI=
Subject key identifier:   F9:6C:14:3B:E8:D5:87:23:E4:32:6C:79:6A:C0:E1:D6:83:51:92:15
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       019B1A97C18682379888CA224B5FBAF4A429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1781
Signing time:             Sun 14 Dec 2025 02:01:51 +0000
Manifest this update:     Sun 14 Dec 2025 02:01:51 +0000
Manifest next update:     Mon 15 Dec 2025 02:01:51 +0000
Files and hashes:         1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
                          2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: 0u6gEYofl4r56Y7P1wivI0wUsbzeVDPt6PNHzxsBLPk=)
                          4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
                          5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
                          6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
                          7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
                          8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:97:c1:86:82:37:98:88:ca:22:4b:5f:ba:f4:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Dec 14 02:01:51 2025 GMT
            Not After : Dec 15 02:01:51 2025 GMT
        Subject: CN=f96c143be8d58723e4326c796ac0e1d683519215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:2c:0a:c9:d7:05:d1:48:de:54:31:df:05:
                    50:49:60:17:71:e5:07:3e:8e:2e:64:29:cd:b3:f4:
                    79:9d:1e:28:88:44:56:20:38:e7:ad:a8:65:14:5e:
                    10:0e:b3:f4:f3:fb:d7:44:b9:37:a2:cd:5a:68:e5:
                    7b:0c:9f:69:5f:f0:5b:d8:96:34:f2:d5:ee:4e:06:
                    22:27:88:cb:37:c7:3b:4b:b8:aa:5c:a3:41:9d:e2:
                    ac:5c:15:4a:10:6d:53:28:f9:7a:5b:33:30:cc:15:
                    07:a5:a3:70:07:f7:31:31:32:33:fd:b7:73:9c:1a:
                    7d:8d:61:d0:64:d6:ed:8a:d9:7c:86:78:14:15:86:
                    55:65:ee:aa:a2:d5:9b:0c:f7:8b:ea:1a:1d:c3:a7:
                    3c:2c:de:b4:5a:d2:36:61:5b:69:3e:90:ae:39:4c:
                    6a:24:72:6e:71:b7:b8:73:07:06:3e:1e:47:89:65:
                    bf:30:ed:15:bc:4c:d8:3e:8d:08:ed:be:57:0b:68:
                    3a:38:18:4d:a7:d9:c5:e3:35:5f:5c:c3:82:8a:7d:
                    7d:f8:d5:18:6e:bb:9c:c4:71:75:1e:dc:f9:95:6f:
                    4c:d3:25:04:41:83:fc:2c:cd:f2:80:6c:64:a5:5d:
                    ed:d2:ba:c6:cb:12:e0:a4:19:06:7a:ef:93:ee:0a:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:14:3B:E8:D5:87:23:E4:32:6C:79:6A:C0:E1:D6:83:51:92:15
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:59:c7:87:83:63:bc:85:67:7b:cd:38:db:32:1e:f7:c1:51:
         5a:bd:6d:01:0e:7f:56:81:26:c9:4e:35:f4:b0:d1:04:2a:67:
         d9:54:09:3d:7f:df:67:79:d7:43:35:c6:ea:90:94:50:54:90:
         7a:27:07:1c:18:fd:cb:b0:e8:01:6a:3c:45:37:91:9f:5b:c4:
         5f:83:08:59:c2:b5:47:7c:45:b4:72:9e:e0:90:6f:6c:7a:e2:
         b2:e9:2d:ca:22:67:00:9c:74:a3:46:4a:70:c0:90:55:ac:55:
         54:1b:41:1c:94:58:e7:ca:cf:8e:84:b8:ba:6b:5a:a7:24:98:
         46:4c:71:3f:32:a8:e6:44:98:db:c8:4c:4c:ce:1b:3d:fa:66:
         fa:ac:69:aa:ea:07:2e:61:82:2a:73:21:5e:33:07:20:ce:8f:
         f9:7b:49:55:1c:97:75:1a:06:72:54:93:80:42:ab:29:38:31:
         8d:ee:ce:64:c6:15:fa:b2:41:d2:d5:78:55:0b:b1:a6:04:a2:
         95:d6:c2:fb:44:18:02:47:e5:bf:02:e4:fc:3d:ee:9f:e4:15:
         77:08:eb:1f:46:8e:63:47:fb:6d:da:2d:f0:fb:ec:48:2d:59:
         93:91:a4:59:68:7e:bb:cb:6d:51:c7:c8:09:19:a6:b4:54:25:
         67:43:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:44:38 2025 by rpki-client