This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File:                     pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier:          WzX7ICKVM0lGpMxcA2Gn4iaTJrk/Jk5D2sFJHvQoGY8=
Subject key identifier:   9F:4E:EF:6D:FC:1F:89:84:89:A6:44:ED:EF:E0:28:31:81:1D:E3:7B
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer:       /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial:       019B4EBBB321A244E5FBC73FA8F0DD3B187C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number:          1794
Signing time:             Wed 24 Dec 2025 05:01:22 +0000
Manifest this update:     Wed 24 Dec 2025 05:01:22 +0000
Manifest next update:     Thu 25 Dec 2025 05:01:22 +0000
Files and hashes:         1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=)
                          2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
                          3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: +5MiZeqTwQ/5/Rql4Nz9JXwdhCagPOiyP2aqlUUJ+lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4e:bb:b3:21:a2:44:e5:fb:c7:3f:a8:f0:dd:3b:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
        Validity
            Not Before: Dec 24 05:01:22 2025 GMT
            Not After : Dec 25 05:01:22 2025 GMT
        Subject: CN=9f4eef6dfc1f898489a644edefe02831811de37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:ff:69:15:35:cf:cb:8d:98:6b:09:4e:7d:
                    58:12:b9:0d:51:da:c7:3b:a4:f1:e2:68:c5:77:cd:
                    56:de:cd:07:3a:69:89:f8:d3:7b:e7:67:a2:04:25:
                    88:89:71:ba:f1:d4:c4:f5:d7:53:8b:7c:c0:9d:d3:
                    c1:e2:48:9a:81:8b:2a:e2:fb:8d:9d:8f:54:f8:9a:
                    e6:0e:28:e2:98:71:4d:11:95:c3:fc:ba:bd:48:a0:
                    e7:4b:95:72:fc:73:d6:b0:4e:89:d3:0d:f9:ed:32:
                    81:09:80:5b:ba:5d:ae:68:65:e9:ed:7f:4a:c0:12:
                    28:cd:bb:17:30:31:d6:63:41:4e:e2:3c:50:f2:ba:
                    a7:c1:69:37:f9:57:62:19:a8:fd:c6:82:60:fc:49:
                    15:f5:99:31:99:1d:90:02:64:50:5e:ba:94:0c:c5:
                    92:e8:a7:d3:85:60:b7:d9:20:c4:dd:ed:ea:36:b3:
                    66:3d:96:8f:a5:29:4a:10:6a:05:99:48:6e:58:0c:
                    f6:8f:34:84:5c:39:2d:9b:50:b9:49:8a:34:22:7a:
                    06:68:45:6e:54:4a:8a:f9:41:14:b4:d1:a1:7d:59:
                    b9:0c:c3:8c:bf:fc:a9:89:12:8e:52:ff:39:ea:ec:
                    59:3f:b4:1a:bc:41:2b:03:d6:dd:d2:d2:f1:3f:62:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:EF:6D:FC:1F:89:84:89:A6:44:ED:EF:E0:28:31:81:1D:E3:7B
            X509v3 Authority Key Identifier:
                keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:97:80:71:62:ad:7a:54:b5:63:6a:3c:f0:33:b0:53:cb:74:
         1d:3a:e5:c7:51:fd:23:3c:09:0c:c4:8a:83:42:52:6e:24:df:
         d1:6b:0c:0f:01:ab:09:3a:cc:e6:30:71:02:4c:80:64:af:a1:
         b7:f7:98:4a:db:43:10:a9:d8:4b:79:33:9c:06:39:b1:98:55:
         27:64:d3:a3:96:13:45:db:dc:d8:8a:39:5b:c9:71:1c:eb:65:
         b6:a0:16:cb:be:ac:da:4b:f9:d8:e3:a7:8e:d4:63:5a:b8:42:
         33:a9:23:69:eb:0d:ce:98:4a:c1:cc:94:4a:e7:84:eb:23:52:
         85:8c:0f:15:3c:95:2c:39:84:05:3c:ac:18:d2:6e:fd:58:cc:
         a3:02:c0:c0:d8:c4:c6:97:e0:2d:52:9f:3d:00:0e:fc:e2:f2:
         d4:c6:ea:9f:65:25:4f:2e:74:3b:82:b9:af:8c:4f:6b:4c:f1:
         6e:83:cc:06:f5:c8:c0:35:4f:cc:4d:5d:5d:80:c5:e2:71:97:
         9a:b9:b1:b9:32:6e:7a:b8:af:15:2f:f7:14:e2:e9:79:8d:7b:
         65:a9:dd:6e:7b:5a:83:c7:28:5e:1c:97:af:27:7e:da:c4:77:
         d8:07:85:7d:9a:b0:08:ea:a8:33:a6:f8:89:ec:ff:c6:f6:54:
         11:47:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:06:18 2025 by rpki-client