This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          dXrX/eWOHLmHXUTZqk3KbcQtTR+R2zQrrNhpxo26JaQ=
Subject key identifier:   F2:41:AE:70:6F:5A:C3:BA:13:94:62:4C:EB:05:DE:22:F3:16:3E:F3
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019B2F308B4053B2363894FD3CFF53A71D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          1788
Signing time:             Thu 18 Dec 2025 02:01:09 +0000
Manifest this update:     Thu 18 Dec 2025 02:01:09 +0000
Manifest next update:     Fri 19 Dec 2025 02:01:09 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: QgASoofWA9KxKzGcO6RCYm3DIeI.roa (hash: Q/OeL6zIgergVTp0RM1bTRT6FZuRi3pQudovcBEcWnQ=)
                          5: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: rPdeVK62fzwmy0LBe+aRNsQzvBsKVQtKg5yXbEHUmPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:8b:40:53:b2:36:38:94:fd:3c:ff:53:a7:1d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Dec 18 02:01:09 2025 GMT
            Not After : Dec 19 02:01:09 2025 GMT
        Subject: CN=f241ae706f5ac3ba1394624ceb05de22f3163ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:42:ed:06:da:e4:70:ee:eb:e9:77:40:f8:
                    7b:fc:c8:55:cc:9c:c0:f3:10:95:b5:6f:45:c0:db:
                    df:90:9a:24:1b:89:ba:d9:e6:f4:25:d5:89:b3:e6:
                    89:cd:42:40:30:d5:97:8c:0e:bc:fa:1c:16:f6:4e:
                    d6:fd:68:d0:14:9d:92:22:0e:a8:8e:a8:15:e3:73:
                    22:15:34:4d:86:6e:ca:15:3e:82:95:70:6c:fb:d6:
                    32:4b:ec:e5:07:3a:b4:01:f0:cc:8b:4f:c3:7e:f6:
                    7f:a4:30:78:1c:66:69:5d:d8:ad:f7:aa:bb:b0:6c:
                    18:97:86:81:cb:d4:ed:2f:6d:df:01:c4:dc:8c:f1:
                    cb:5a:e0:c4:5f:cc:3e:56:7d:c6:ff:73:21:6d:0f:
                    42:2b:ad:47:17:ee:1f:b7:15:b3:b6:05:c2:78:87:
                    48:32:15:66:2d:4a:bd:5d:ce:25:a7:50:18:65:df:
                    f1:37:27:fa:d9:42:b2:1c:04:0f:dc:e2:1e:e0:f5:
                    81:17:e9:e3:66:14:22:5b:3a:e2:82:1f:43:b7:18:
                    cc:2e:62:5a:1e:21:22:91:91:38:0b:eb:58:16:b2:
                    c7:94:9b:08:ab:07:5a:dd:1a:af:d6:a0:10:0f:4d:
                    bf:6c:25:f9:6a:7c:07:a9:59:79:f3:a1:16:25:19:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:AE:70:6F:5A:C3:BA:13:94:62:4C:EB:05:DE:22:F3:16:3E:F3
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:a3:ba:07:9d:8d:68:91:ae:c1:25:5d:94:c3:5c:5b:f0:
         bf:52:2d:27:9a:8c:86:71:9b:85:3f:61:69:aa:48:17:7e:17:
         21:80:46:d8:9b:78:34:e2:cb:4d:c0:15:2e:96:66:93:cd:19:
         99:70:4b:8f:b4:7a:81:31:94:59:14:e9:87:03:c8:78:22:b1:
         c9:10:82:67:35:7a:d3:10:7c:e2:ff:fc:10:97:5a:fe:15:45:
         bc:94:74:11:22:46:60:93:ea:0b:14:78:be:da:3f:18:e2:c2:
         a7:10:f9:d5:37:fe:d4:9b:23:1c:b2:71:d7:7e:66:96:64:47:
         93:01:68:0b:d7:8f:fb:02:53:f3:a5:25:4d:d1:f6:d9:b4:60:
         82:d4:23:ef:b1:c0:f2:5e:25:bb:1c:4f:e6:91:6b:36:73:a6:
         de:af:8a:fa:1c:47:a6:f2:35:aa:c4:e5:18:9d:b6:28:cf:d5:
         34:98:e8:5b:19:80:8c:11:b5:8e:98:1f:a2:86:6c:66:b9:87:
         a1:e7:15:f5:10:a2:77:2e:c5:40:ce:32:9c:02:9d:7d:d9:3d:
         e5:e0:b4:e8:c0:d5:c7:fa:41:84:6b:1b:bf:e7:2a:4a:74:90:
         ca:b3:fa:3a:8d:3f:fb:35:89:5e:c2:09:34:0e:38:52:b8:6e:
         38:05:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:53:33 2025 by rpki-client