This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          ScMla7tkPJjd/N0pUQ7LFexnrsQUQhH05KX1AfcGp9o=
Subject key identifier:   F4:A3:FD:17:93:2F:57:47:EF:7D:2C:A6:A4:45:83:EF:A5:35:E5:AD
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       019B360DFC4E1683684191A0A39F983F2E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          1784
Signing time:             Fri 19 Dec 2025 10:00:44 +0000
Manifest this update:     Fri 19 Dec 2025 10:00:44 +0000
Manifest next update:     Sat 20 Dec 2025 10:00:44 +0000
Files and hashes:         1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
                          2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: 6wKwxn4qMKm6TUxq7JyHadyL49blGmQqi7u3v1yUgU0=)
                          4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
                          5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:0d:fc:4e:16:83:68:41:91:a0:a3:9f:98:3f:2e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Dec 19 10:00:44 2025 GMT
            Not After : Dec 20 10:00:44 2025 GMT
        Subject: CN=f4a3fd17932f5747ef7d2ca6a44583efa535e5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:5e:02:a8:f5:c6:48:94:13:f7:e1:95:20:
                    63:9f:12:2e:f2:fd:4a:48:c3:ef:b1:5c:d4:b7:e4:
                    35:f3:60:e8:a0:68:e6:6e:45:df:76:7a:b3:ff:4f:
                    ee:89:f1:37:04:78:d9:e2:fb:89:b7:99:25:62:f5:
                    3f:94:01:aa:62:ea:c2:8a:7a:c1:21:4a:41:71:67:
                    19:68:ca:fa:0b:ef:4f:c0:eb:9d:f5:76:d1:59:53:
                    32:1f:dc:0b:97:08:99:d9:01:4b:a8:8c:68:82:30:
                    65:96:2c:4c:74:8c:3e:90:33:80:3b:68:dc:81:aa:
                    7a:6c:e1:7a:ae:5c:b4:a4:66:42:fa:91:62:5d:af:
                    ae:56:52:6b:d7:56:3c:31:a5:77:4f:2c:a6:18:38:
                    4f:88:83:2e:a7:5c:55:fa:5b:93:b0:a3:85:b1:ba:
                    f9:1b:75:3a:02:29:7c:d9:ac:0f:89:b6:76:18:44:
                    93:97:87:4a:5a:fd:12:bf:88:db:27:71:61:bf:fd:
                    43:ca:6d:6b:45:8a:09:f9:e4:83:f3:4b:82:84:37:
                    1d:14:b4:7f:de:1e:11:c4:d5:96:e2:17:35:18:ec:
                    c9:8f:d6:84:5b:a4:2d:3b:45:52:76:e9:c3:41:1f:
                    82:ed:b5:f6:20:1a:69:a4:36:29:84:59:74:34:1d:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:FD:17:93:2F:57:47:EF:7D:2C:A6:A4:45:83:EF:A5:35:E5:AD
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:ea:47:0c:3d:69:7e:96:f2:44:8b:6e:2c:a7:54:02:6f:
         5b:73:68:58:4f:83:82:1b:68:e1:17:a0:a9:92:47:28:6c:23:
         cf:27:e2:ce:fc:5a:69:27:7d:92:f2:6a:ae:e6:9e:38:2d:b4:
         a5:14:14:9e:8a:19:ea:1c:d6:27:e7:d3:f6:65:de:76:05:1a:
         6a:47:24:ad:d5:a7:92:51:14:a7:92:11:a3:53:a5:33:8f:17:
         3b:9c:6d:34:72:9d:17:ec:a7:9f:23:b1:74:4a:22:7b:13:13:
         09:ec:54:18:13:b6:04:cc:82:42:25:b6:30:cc:80:24:fc:29:
         03:af:91:52:0c:99:8d:6c:d1:34:aa:55:6e:0a:62:80:1b:9c:
         4f:09:23:e3:13:14:28:f5:c0:31:29:11:b5:ff:cc:ea:f3:08:
         32:ef:7d:6b:be:33:49:7f:ef:00:e6:a1:78:a8:d2:43:d0:44:
         24:b1:d5:6a:74:cc:2c:0a:b7:bc:95:7d:6c:40:d2:b8:ba:6c:
         b2:4b:ce:59:06:90:3b:af:cf:72:40:2f:6f:56:4c:11:52:db:
         ed:34:33:4d:7e:3b:ea:40:79:f6:66:14:33:c8:ab:98:08:a7:
         55:0c:c5:a7:45:2d:4f:d6:5b:96:0b:e6:0e:7a:40:b7:7b:09:
         09:95:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:58:18 2025 by rpki-client