This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          Yd+L6AsV8JDH9mqa7Gelk8BjUPRUW5FqUKlfwNswxWM=
Subject key identifier:   60:BD:B9:F3:3E:63:60:74:3F:49:25:88:B1:36:9D:A8:6D:A6:0F:F0
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       019B10B8ADE33797F7B251022C7E19307440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          1775
Signing time:             Fri 12 Dec 2025 04:01:37 +0000
Manifest this update:     Fri 12 Dec 2025 04:01:37 +0000
Manifest next update:     Sat 13 Dec 2025 04:01:37 +0000
Files and hashes:         1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
                          2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: dnPeZ1Aok1WZ8lQKWtc15b6JmosmUIhIM8hZttfKclM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:b8:ad:e3:37:97:f7:b2:51:02:2c:7e:19:30:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Dec 12 04:01:37 2025 GMT
            Not After : Dec 13 04:01:37 2025 GMT
        Subject: CN=60bdb9f33e6360743f492588b1369da86da60ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:03:88:78:fd:93:f7:ac:fe:3e:4f:9c:5d:
                    ba:61:f5:ca:13:7f:aa:ea:f9:8e:98:c7:54:d1:0b:
                    f7:1f:6c:f3:1f:35:a3:1f:21:c4:27:7d:ef:bc:96:
                    3a:54:20:27:81:6d:84:51:81:52:95:98:7c:cb:b6:
                    60:30:f6:29:2a:d9:80:f9:b4:a5:30:ee:99:f8:47:
                    de:ce:3e:ee:4e:3d:5c:30:8e:5d:95:3c:71:c8:32:
                    77:e1:3a:05:2e:7b:47:c3:67:67:06:da:57:ff:9b:
                    bd:12:09:70:fe:5a:c4:81:33:27:b2:ce:08:33:97:
                    ba:4d:58:2d:b1:22:7e:33:66:24:10:5a:e0:5d:6a:
                    1b:1c:4e:f3:b4:de:c9:02:5a:56:45:ad:ba:5d:9b:
                    12:eb:3d:30:58:18:4b:b2:e4:2c:d6:fa:e8:3c:1d:
                    ee:0a:9a:ca:33:98:48:93:80:64:e2:cb:63:73:f3:
                    1e:8e:38:00:c6:a3:f7:ce:c6:bf:50:b0:b0:5e:8d:
                    0d:f8:59:23:84:e9:5b:47:dd:09:50:dc:00:2e:ac:
                    b8:09:d3:6a:34:cd:60:93:6c:b8:73:8f:35:67:5b:
                    c1:3d:9c:ea:20:1d:13:24:be:92:5a:07:4a:a1:06:
                    90:8f:43:de:4a:90:b8:2b:bb:bf:38:3b:6a:2e:bb:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:B9:F3:3E:63:60:74:3F:49:25:88:B1:36:9D:A8:6D:A6:0F:F0
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:17:7b:c9:24:11:97:f2:ce:d4:3a:19:bc:c4:c1:e6:c8:
         37:4e:f1:b0:30:dd:28:f1:3b:30:6e:6c:53:66:09:e7:19:7d:
         4e:4b:02:02:40:e7:ec:8e:6b:5e:07:66:8a:be:57:22:bc:49:
         2f:5e:8d:bb:40:9b:bd:46:fb:fd:93:9e:29:90:be:6e:98:04:
         62:69:0f:f3:0b:3c:88:ac:54:2e:bd:9f:5f:db:40:84:09:10:
         30:76:10:0f:7d:ed:52:6b:ed:02:30:d5:4a:79:50:71:b2:86:
         61:d7:a0:16:16:6c:7a:35:34:0a:b8:f0:38:38:7d:0f:d8:dc:
         bc:32:82:72:90:d3:57:0b:8c:67:cc:f2:46:84:66:12:c2:d8:
         6e:b5:01:60:94:af:f6:8f:c3:69:dc:0f:be:da:d8:78:ec:e1:
         19:b7:7a:92:6a:b4:2d:90:25:a9:6d:b7:57:c0:96:b6:57:8a:
         6a:63:bd:f6:f6:57:57:7a:1e:be:b9:ed:15:5c:32:04:8f:a6:
         22:42:49:b0:af:70:f3:76:76:04:09:55:61:73:85:f6:65:ae:
         68:a7:6a:a0:28:14:5a:55:27:ae:71:fe:0b:f5:bf:ff:a3:4c:
         ad:00:be:2a:27:c1:d7:b5:a1:a4:eb:07:3d:c6:cc:3f:fd:e4:
         f4:77:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:09:50 2025 by rpki-client