This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File:                     RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier:          wi5D0un460vm42nsAomx9iXTVzUbQ5G28rECj3ncHe4=
Subject key identifier:   7A:51:E9:74:14:B5:2B:C1:34:7E:16:42:BD:35:D6:16:75:A5:B7:D1
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer:       /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial:       019B3A21C69A10D16FF0E883748D5293A184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number:          1439
Signing time:             Sat 20 Dec 2025 05:00:50 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:50 +0000
Manifest next update:     Sun 21 Dec 2025 05:00:50 +0000
Files and hashes:         1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
                          2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 3Or40cnIt/baE6/MIU7GWhJ7hEC1fedePufpScorCkQ=)
                          3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:21:c6:9a:10:d1:6f:f0:e8:83:74:8d:52:93:a1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
        Validity
            Not Before: Dec 20 05:00:50 2025 GMT
            Not After : Dec 21 05:00:50 2025 GMT
        Subject: CN=7a51e97414b52bc1347e1642bd35d61675a5b7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:4b:07:c3:60:6a:57:22:ea:18:66:3a:47:
                    1a:e0:01:1d:c7:15:d2:bc:b5:1e:e4:1a:dd:db:13:
                    aa:37:5a:6c:c7:d1:f6:a2:93:c2:07:64:b1:e6:d3:
                    f5:2b:7b:e6:b1:09:dc:0f:ea:d9:f5:a0:b7:50:47:
                    16:31:b4:79:7a:47:55:ed:87:07:b4:5f:a1:f0:3b:
                    db:70:d5:f2:7b:88:d4:49:06:fb:7a:67:56:f0:97:
                    64:c8:35:cf:a2:fa:ed:f0:91:30:5e:e0:0a:39:52:
                    2d:b2:10:ce:ea:89:30:03:98:29:71:df:2f:88:e9:
                    fd:fa:77:0e:6a:ab:46:11:c0:5c:ce:ec:52:53:5a:
                    21:63:23:d2:a3:66:62:5d:09:1c:c2:e0:9d:ed:1b:
                    85:c1:3c:cc:ae:b9:b9:52:72:04:79:04:2e:ff:d2:
                    ea:c7:26:4a:7a:d9:37:b9:c9:05:8b:7a:bb:97:8a:
                    bb:42:49:27:99:99:0b:6f:87:e4:d9:3a:81:a7:84:
                    2b:d2:05:ef:83:9e:cf:8a:75:46:f2:08:09:e6:32:
                    6e:16:f7:eb:ee:9d:9d:77:f0:e9:9d:08:72:d4:72:
                    39:38:35:aa:19:5c:ff:a3:6a:90:bd:3a:f0:f0:c1:
                    d8:4c:99:d8:dd:01:87:73:05:5f:76:18:e9:a6:5c:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:E9:74:14:B5:2B:C1:34:7E:16:42:BD:35:D6:16:75:A5:B7:D1
            X509v3 Authority Key Identifier:
                keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:14:1f:06:7b:dd:4b:75:19:26:75:41:11:86:cc:70:ef:
         88:e6:a0:1b:37:ce:97:f1:56:3d:ab:4d:e9:de:96:fc:be:87:
         5c:f4:04:8c:03:2c:9f:e9:64:8d:b2:68:11:72:1f:66:e5:27:
         39:b5:30:c7:df:ec:1f:bd:3a:39:a3:85:cb:f1:e2:d7:ea:40:
         8a:08:7b:1a:b9:89:e6:47:90:73:2d:b5:be:bd:02:a5:fd:9b:
         06:0e:1c:91:ab:9b:b1:15:8d:77:65:ca:7c:35:54:c6:d4:c9:
         25:97:9c:8d:07:53:c5:8a:e2:b7:b8:b1:15:25:19:8d:2f:b8:
         e3:98:d6:a1:9e:4a:44:5c:dd:53:ea:ea:98:1a:b4:52:f1:5d:
         75:ac:ed:d0:24:b1:9d:1e:71:35:ff:5c:7e:08:71:08:e7:08:
         a7:4b:dd:12:cc:3c:50:6b:77:76:2b:4a:bb:8e:1e:58:33:d5:
         bd:2e:47:01:d6:bc:4a:78:5d:0a:f5:87:ec:14:a8:ad:ee:f1:
         8f:8d:8a:b1:6c:f1:1e:44:c6:a6:3b:ba:dd:3a:16:8b:73:4e:
         5c:b2:f8:c3:d3:9c:b9:ed:94:81:bb:91:d1:ec:4c:87:d6:36:
         b6:f9:8d:ce:6c:1f:4a:84:e4:af:35:cf:88:64:f5:e1:89:e4:
         bb:c0:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:43:17 2025 by rpki-client