This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          1fLPM6w2wfzJsU6jtOrMvG/18c2DJ8XPXgwSgJGYS/Q=
Subject key identifier:   88:80:F9:D5:7E:18:75:E5:19:12:55:25:54:D2:7D:D2:2A:5A:7B:44
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       019B51F2FAEDDBA8AB1021671638190CEE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          0689
Signing time:             Wed 24 Dec 2025 20:00:36 +0000
Manifest this update:     Wed 24 Dec 2025 20:00:36 +0000
Manifest next update:     Thu 25 Dec 2025 20:00:36 +0000
Files and hashes:         1: DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa (hash: mIWQtuRUYMAIMNWTk2R94Vc9M/vD3qRf+T1I/Wud7SU=)
                          2: GuwUdDFQjBufx1Rw2XvyCI5KCLY.roa (hash: gUEwC/edl/xfPxryFYxMx6Htdh7hvRtXE9Fd/Bp9SoY=)
                          3: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: WVtrVJwfFedsbsEJgDbZeQQEvWtpih1Qw3WBeWNqJV4=)
                          4: mdhPoB9Xi_SvHQW0Npo5tBiYYRw.roa (hash: N1Pm29zQ5qNztRCN8wb+WCQ/lCg8dOrqcVoxO2AK6Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:f2:fa:ed:db:a8:ab:10:21:67:16:38:19:0c:ee:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Dec 24 20:00:36 2025 GMT
            Not After : Dec 25 20:00:36 2025 GMT
        Subject: CN=8880f9d57e1875e51912552554d27dd22a5a7b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:04:fd:74:f3:85:96:c8:14:83:f6:c8:ed:
                    6b:8c:c5:0e:00:90:ef:b2:4b:bb:55:5f:71:d2:39:
                    da:5c:1d:d5:a6:e6:2c:31:3b:8e:fe:4a:cd:86:f0:
                    0c:1e:a9:fa:f3:c8:96:91:a4:89:d8:76:5f:11:b0:
                    1b:9e:72:c9:c3:a5:bc:e5:b4:16:09:f1:1f:21:6d:
                    bf:73:f0:fe:e5:1d:27:aa:87:1b:79:92:61:e3:52:
                    9f:3f:f4:dc:84:63:10:a8:63:6e:c5:af:96:29:d2:
                    8d:ca:c4:70:c5:6e:3b:66:43:cc:2c:b9:e2:c8:a4:
                    2e:f7:43:a1:35:29:4a:b0:8c:aa:3f:5f:a0:e0:c9:
                    72:78:67:1d:31:61:21:00:26:b6:7e:45:98:28:9f:
                    cc:2c:e8:a8:dd:a6:cd:ab:6f:d8:c4:7f:c0:6e:30:
                    29:c0:68:e8:0f:13:44:19:de:62:86:b8:4b:e7:71:
                    6c:fd:b9:3b:e3:0b:bc:75:96:f5:0c:b1:d3:f6:50:
                    da:e4:26:9c:0c:c0:4b:41:6f:de:d6:8b:19:d3:f8:
                    4d:20:e1:bd:0d:e3:48:ae:b2:c5:c1:94:76:2a:4e:
                    14:76:02:39:28:97:09:0a:d1:ca:6a:ba:2b:52:51:
                    c6:ca:cb:b3:a3:14:b0:75:b6:b1:35:e1:6e:b7:2b:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:F9:D5:7E:18:75:E5:19:12:55:25:54:D2:7D:D2:2A:5A:7B:44
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:ad:54:1e:99:77:83:b9:5b:48:ab:3b:c2:2c:c3:c7:d6:
         62:4c:a0:36:d5:22:41:50:c6:c6:11:e3:79:35:4e:f2:c6:44:
         44:24:6e:08:4c:45:f2:e8:1c:4c:dd:2d:7d:4b:f3:29:80:dd:
         04:ae:8d:b4:aa:44:85:68:5c:f8:43:12:de:28:39:8e:fd:87:
         6d:af:ba:d2:dc:24:18:21:40:90:bf:57:03:6d:b3:0d:8f:25:
         1d:64:c4:fe:89:16:58:c8:f8:a8:51:46:e6:80:1c:83:a2:f1:
         ab:7d:0e:d0:74:05:05:e4:ea:75:57:f6:0c:75:7e:44:69:82:
         46:6f:83:47:c9:5f:a9:98:cb:1a:df:0d:18:f5:43:7e:71:6b:
         a6:37:51:1e:bc:b2:8a:08:9e:24:d0:0d:24:99:a3:35:3b:80:
         b3:4b:72:a4:42:a7:c6:9a:90:06:cf:aa:69:64:ba:1f:46:c5:
         ad:a9:cf:26:1b:61:38:90:60:a5:1c:60:bf:dd:c1:a1:20:95:
         24:1a:c2:16:7e:cd:f8:43:92:31:1a:fa:8c:15:a4:3c:0b:b6:
         94:47:c2:9f:43:bc:a3:d6:e3:6f:20:93:f3:af:7e:1e:ea:cb:
         b1:d0:ec:12:75:5e:7c:c5:97:a4:2f:bf:94:42:31:37:35:41:
         5b:87:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:20:50 2025 by rpki-client