This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          Hqu0ijQ3VwaWbwZB+gR1Wzz89/Rb8ycILYcwQMbKi+c=
Subject key identifier:   EB:8F:98:0C:5A:83:B4:7F:C9:FF:F2:22:16:EF:3D:39:DC:28:1E:84
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019B45B85D564CACAF3E552DC8B02D81CE4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1797
Signing time:             Mon 22 Dec 2025 11:01:08 +0000
Manifest this update:     Mon 22 Dec 2025 11:01:08 +0000
Manifest next update:     Tue 23 Dec 2025 11:01:08 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: KPp5uETxbJxHXL4CV0I8H28FAVAsdC4AhozpIEEpiaM=)
                          3: JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa (hash: 5zOgMk+c4Mrl83ntlb1BWuWLQ9qzH0Aci4OcYi1Ml7w=)
                          4: OvxdZUL7-yIQWzcFYUnAa1c12II.roa (hash: mxKl5svIy2E+onAWkycoeHXKh2w+Zk+8kzX+IQMshAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:b8:5d:56:4c:ac:af:3e:55:2d:c8:b0:2d:81:ce:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Dec 22 11:01:08 2025 GMT
            Not After : Dec 23 11:01:08 2025 GMT
        Subject: CN=eb8f980c5a83b47fc9fff22216ef3d39dc281e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:b8:52:d7:74:b4:87:9d:5a:81:4c:c3:73:
                    8e:d3:aa:b3:c6:c9:d5:e4:5c:c0:55:41:ae:49:96:
                    18:2b:31:4b:cd:1e:da:33:91:ff:57:5b:a9:29:5d:
                    6c:11:92:67:f2:3f:31:79:df:5d:81:8f:ea:a6:2e:
                    a6:0b:6e:6d:73:7b:97:a1:78:ff:23:ec:60:8b:b5:
                    bc:9f:97:bb:f7:52:e8:04:87:65:50:61:13:66:85:
                    02:d9:7a:c3:56:25:0e:29:ac:0f:fa:6b:8a:35:ce:
                    a5:b4:24:8d:a9:33:2b:ef:86:9c:df:25:b7:1e:a6:
                    1f:97:17:89:59:b8:d2:75:fa:42:9e:14:d5:8e:79:
                    57:7c:23:02:76:ad:f1:e1:76:8d:48:eb:7f:e7:49:
                    93:ce:0c:4f:a4:28:67:c3:74:0a:05:cf:b4:5b:0c:
                    6a:95:22:61:fb:58:1c:0f:aa:61:8c:25:42:99:dd:
                    1c:b4:d2:cf:99:d1:62:0c:b8:f7:ad:41:9f:a6:4f:
                    01:8f:75:8e:d2:ce:c6:09:a7:41:37:75:60:df:44:
                    eb:5e:86:d0:29:04:23:57:f1:c6:d7:9a:fe:49:30:
                    d5:d6:bb:12:e1:97:e7:68:33:99:0f:a6:2b:b4:ad:
                    87:60:ec:50:64:92:f2:95:6e:33:0e:4a:26:75:42:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:98:0C:5A:83:B4:7F:C9:FF:F2:22:16:EF:3D:39:DC:28:1E:84
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:5d:bf:1c:33:0a:58:0d:06:41:9e:36:d1:15:fd:75:f9:
         9a:31:b4:34:3e:4e:b9:c6:fc:98:0d:ff:8e:77:d9:38:96:9f:
         1d:9c:55:74:27:59:a7:09:01:5b:dc:47:bf:61:07:63:80:24:
         27:78:f2:9f:c1:62:ad:a7:2d:93:08:e0:d3:89:19:74:a9:58:
         24:75:a1:14:f6:ba:0c:dc:8a:1d:9e:b1:fa:22:75:df:5b:67:
         7d:76:b9:f6:fb:c5:bd:92:a4:3d:4d:94:d6:f9:be:8d:d6:cc:
         e0:78:21:8c:2d:be:67:14:3f:95:a1:12:d9:01:24:70:24:23:
         e5:eb:64:81:2b:00:34:a8:cc:08:d8:52:7d:86:6d:71:ce:b9:
         2c:75:32:ec:00:97:34:93:58:ab:f7:ee:6e:aa:c0:fc:5f:d2:
         8d:19:89:10:17:5d:d4:ad:d7:cd:4c:f7:75:f2:39:5d:07:57:
         52:74:f9:3b:c6:6c:48:15:a8:ca:99:70:94:36:95:33:d5:84:
         07:85:26:33:81:01:7c:93:03:4b:b5:1b:b6:00:d9:f5:0f:5e:
         ad:71:f2:d0:21:51:59:d3:0a:4d:c5:c2:ee:24:76:2f:4e:b2:
         3f:82:2f:a6:a8:e8:d4:be:82:3f:1e:7c:41:d1:79:fb:3c:8a:
         ff:6b:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:18:39 2025 by rpki-client