This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File:                     Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier:          AgNm/fbLmLpkkkCVv0/50YUvxAgxOQMIjOCR+bB2TNk=
Subject key identifier:   41:73:47:66:D9:D8:CE:84:0F:6C:7E:65:B8:F6:69:34:8E:D1:8C:07
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer:       /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial:       019AE6A949EF3BB77BE4CBB8ECD804BD43BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number:          1761
Signing time:             Thu 04 Dec 2025 00:00:45 +0000
Manifest this update:     Thu 04 Dec 2025 00:00:45 +0000
Manifest next update:     Fri 05 Dec 2025 00:00:45 +0000
Files and hashes:         1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 9GlHmADwepevBogaf7eqSd961V6UYeCBs+HatZMaE2Q=)
                          2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
                          3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e6:a9:49:ef:3b:b7:7b:e4:cb:b8:ec:d8:04:bd:43:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
        Validity
            Not Before: Dec  4 00:00:45 2025 GMT
            Not After : Dec  5 00:00:45 2025 GMT
        Subject: CN=41734766d9d8ce840f6c7e65b8f669348ed18c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:37:4a:57:72:21:fc:c2:33:25:9d:c7:0a:
                    b7:e9:0a:57:c0:3e:54:3d:db:40:80:a6:64:df:ad:
                    ff:25:c9:26:54:7e:69:b3:1c:e2:21:15:a6:86:0a:
                    22:c5:e8:c3:c4:73:bb:2d:77:6e:41:a3:20:d7:fd:
                    5e:29:65:7e:2e:a3:64:66:88:07:39:a8:f6:79:54:
                    49:ab:59:a1:52:e3:dc:32:5d:c6:a8:f6:9d:32:f9:
                    92:6e:98:e8:6c:f6:4d:25:5a:1f:7f:29:22:b3:9f:
                    85:70:9e:71:09:c1:98:4d:ab:64:6e:16:5a:e2:de:
                    9b:07:65:55:d6:b8:72:10:9c:ae:90:5d:46:60:02:
                    d8:ab:b1:6d:a2:76:a3:ff:c2:2d:34:fa:50:66:a2:
                    bb:1a:07:cf:bb:19:1b:f7:cb:de:d7:35:7d:d8:f8:
                    81:12:81:96:89:49:2a:ac:68:07:bc:08:d9:1e:70:
                    d0:09:96:b6:d1:2f:69:b4:31:3e:e5:9d:be:5a:e7:
                    67:a7:3b:cd:54:85:2e:f5:6c:b7:b9:27:d8:50:8d:
                    9a:31:04:14:94:47:0a:3a:a8:8f:b2:bb:76:7f:98:
                    e1:63:89:e9:92:2a:d2:51:5e:8f:14:cd:f0:f1:fc:
                    f0:8a:d9:30:29:93:13:58:62:04:ff:6e:d9:82:05:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:73:47:66:D9:D8:CE:84:0F:6C:7E:65:B8:F6:69:34:8E:D1:8C:07
            X509v3 Authority Key Identifier:
                keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:a2:06:42:b2:42:b0:3d:62:ee:49:fe:90:f1:d8:ee:27:
         89:2a:2e:f0:36:81:77:02:02:5d:1c:99:2a:44:e1:5a:93:f0:
         38:68:16:6d:69:e6:2a:34:c4:57:62:2b:4d:cc:53:c8:1a:3a:
         d0:a5:c6:09:c8:d4:59:87:6a:6d:fd:cd:d7:d4:48:7a:02:ad:
         c2:a2:59:48:c2:55:d0:93:05:d7:f8:2d:23:65:79:62:ad:60:
         00:c4:4c:a3:3a:ba:98:3d:d6:fe:e0:81:26:ce:ea:3f:2d:fe:
         9b:4c:77:d2:51:eb:80:4a:ea:9f:40:6c:99:2c:2c:83:38:f1:
         8c:a6:2c:00:ed:6d:36:5a:53:43:3c:c4:0e:84:11:81:51:51:
         7c:de:bc:4f:a2:22:79:ec:a0:50:06:a9:9f:8d:7e:69:39:1e:
         45:e5:36:28:ad:9a:c2:60:88:78:fa:e7:92:16:01:f6:7e:15:
         19:80:d5:e0:52:e8:1c:cc:b5:22:5b:0e:5b:1d:ff:d5:4b:7c:
         42:a7:f9:15:44:b3:c7:ae:a8:1a:30:0d:de:d6:1f:a9:eb:68:
         29:06:51:67:0c:de:b5:86:03:15:48:54:c4:cc:da:c4:7f:d7:
         04:8c:0c:6c:64:19:b4:28:90:9e:24:28:9a:66:6d:95:f5:96:
         c5:51:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:18:48 2025 by rpki-client