This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File:                     cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier:          +iQcsZOEoNUesi8rwLndxXccmE+us3N3qbkghPNLbos=
Subject key identifier:   82:B5:25:D1:E7:7C:8C:15:50:DC:D8:45:7E:A9:CC:8C:E5:87:0E:6E
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       019AEB629D0AE213182E0EADB8A4CF151E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number:          1765
Signing time:             Thu 04 Dec 2025 22:01:39 +0000
Manifest this update:     Thu 04 Dec 2025 22:01:39 +0000
Manifest next update:     Fri 05 Dec 2025 22:01:39 +0000
Files and hashes:         1: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (hash: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=)
                          2: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (hash: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=)
                          3: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: N2zrZTBiz/isRjCyaNbXFJwAQFqnS2zcQe4RznHR7kk=)
                          4: sZiDjovlZR7TPPXq724QB4yd_Ds.roa (hash: g0NC0qA2yq5MjWHr5RjOBshN8A2Yl9uqhpeNRfy6QdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:eb:62:9d:0a:e2:13:18:2e:0e:ad:b8:a4:cf:15:1e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Dec  4 22:01:39 2025 GMT
            Not After : Dec  5 22:01:39 2025 GMT
        Subject: CN=82b525d1e77c8c1550dcd8457ea9cc8ce5870e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:71:b1:7d:dd:20:51:6a:89:6c:4a:61:dc:
                    39:49:cc:65:74:12:f5:ae:6a:76:07:ce:1c:4a:34:
                    a8:da:73:c2:46:84:6b:27:ed:f4:db:19:da:f4:c9:
                    69:95:e3:d9:e4:51:12:77:74:9b:ff:5f:d9:0a:97:
                    c8:58:ad:58:08:51:a7:63:22:85:16:c6:37:6e:ba:
                    cc:cf:f5:e8:c1:a8:c0:4b:ef:e0:42:cd:36:cc:7c:
                    51:74:3d:26:92:6e:b7:78:8d:c6:be:fc:c4:5f:1c:
                    73:42:e1:53:9d:0d:b8:04:df:6e:17:c7:d5:f5:d2:
                    4f:69:74:9e:7a:36:df:d1:b7:47:71:a6:49:56:a6:
                    7e:a9:68:05:77:2a:81:0c:4c:7e:58:68:54:4e:19:
                    9f:5b:d4:18:56:31:c5:1a:b4:ca:c6:db:3f:be:d7:
                    25:21:12:ba:2b:b9:a9:c2:60:2d:e4:c0:a7:66:d7:
                    0e:62:d0:94:a0:ce:ce:b6:6a:01:e6:67:e0:af:3f:
                    bf:d9:bb:e1:9b:16:c2:01:5a:44:94:46:3b:fe:24:
                    f8:3c:5c:12:50:25:e7:1e:0b:cb:4f:06:f0:82:a5:
                    a0:d5:64:d6:b4:24:d5:65:60:31:f3:bd:70:32:5c:
                    92:47:d7:56:3f:9d:f7:b1:71:2e:5d:d3:3c:83:43:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:25:D1:E7:7C:8C:15:50:DC:D8:45:7E:A9:CC:8C:E5:87:0E:6E
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:69:27:25:4f:a5:24:fc:6f:69:c5:25:73:c7:37:9b:23:0f:
         e4:3f:b8:4d:8c:a7:ea:c3:c5:a4:34:f3:3f:ea:ee:4d:5a:2e:
         22:fe:a6:1c:53:04:8a:2f:16:48:e2:ec:83:33:a8:be:e1:80:
         c8:04:da:af:b8:36:79:31:94:a5:1d:d3:ea:d7:81:65:39:ac:
         83:9a:04:b8:3f:7c:16:9f:87:ff:a1:51:e6:03:c9:21:98:20:
         2a:76:d5:bc:6a:d5:2b:31:a1:72:f6:81:5b:39:ca:4f:bb:cb:
         61:56:c2:d7:c3:ca:25:2b:f9:99:cf:68:f0:48:85:fb:b6:b6:
         38:cf:00:ef:61:12:ef:1d:b2:72:53:c6:68:b8:d5:93:30:96:
         36:f2:4b:a3:58:91:96:ca:28:8d:b6:7f:ba:43:4c:36:29:e5:
         02:51:44:84:97:b8:6a:59:5f:88:d7:13:6b:dc:25:d8:b6:32:
         43:b8:e8:74:dd:21:f4:68:92:9e:59:89:bd:85:5a:a4:44:ca:
         87:e9:35:e8:cb:7f:40:3b:5c:f5:51:8e:20:f9:ef:e8:28:e4:
         e0:30:4c:6d:b6:2d:a4:0c:aa:e8:41:aa:09:fd:53:17:e3:99:
         d7:09:da:20:a7:c1:8d:68:6c:31:b6:71:c0:3a:78:08:bc:f3:
         c2:6d:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:50:45 2025 by rpki-client