This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File:                     xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier:          7nLtuVNeUzKQbn7/drY8aCYHY1TxEXC6VGdkSUgh0Qg=
Subject key identifier:   C8:0D:9B:21:0D:4C:8B:9F:6F:5B:E4:47:65:CB:A4:58:8E:93:07:06
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer:       /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial:       019B2FD4DB937B0EBABC50805A89F1738339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number:          1783
Signing time:             Thu 18 Dec 2025 05:00:37 +0000
Manifest this update:     Thu 18 Dec 2025 05:00:37 +0000
Manifest next update:     Fri 19 Dec 2025 05:00:37 +0000
Files and hashes:         1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
                          2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
                          3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: gy1LrtMKIW8jt5qUbh6l6GnPGapqLZduRAyVZ5+sXMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:d4:db:93:7b:0e:ba:bc:50:80:5a:89:f1:73:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
        Validity
            Not Before: Dec 18 05:00:37 2025 GMT
            Not After : Dec 19 05:00:37 2025 GMT
        Subject: CN=c80d9b210d4c8b9f6f5be44765cba4588e930706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:2a:0d:0f:ea:d6:43:3b:fa:a4:91:c5:0b:
                    8d:fe:da:c1:72:d4:7c:12:01:66:b8:02:35:41:e2:
                    50:5f:9f:61:c0:8f:b8:d5:19:4d:63:50:a8:57:22:
                    86:56:7b:15:49:56:bf:d7:5b:7c:26:7f:d5:69:b6:
                    c8:53:de:9e:22:da:d5:9e:f8:ba:17:26:3d:8f:f9:
                    94:be:10:de:07:0e:9c:8d:fa:8a:c5:e2:e5:d4:be:
                    27:58:cf:d1:9b:58:fc:76:59:f1:8f:40:9f:bf:cc:
                    53:46:ae:5b:f7:29:26:cd:a2:bf:1f:5c:eb:ad:af:
                    05:03:0f:de:f1:1f:ff:cf:c7:eb:29:72:ce:4b:13:
                    8a:35:7d:e6:0f:aa:6c:52:7c:8f:7b:43:4a:62:0b:
                    17:33:90:2c:2f:c0:3c:16:80:15:1e:4c:97:b9:48:
                    ff:ff:c2:91:68:99:e8:8a:5c:ed:75:5a:15:fd:ab:
                    11:9d:12:d7:c0:a7:ee:e4:d3:4a:5e:62:f2:79:81:
                    88:6f:c0:f5:5b:6a:99:3c:00:d2:0c:64:70:02:cf:
                    e4:42:ab:0f:4f:31:fa:f7:cd:08:32:9b:53:73:a6:
                    93:84:50:e9:32:fb:be:82:36:5d:e4:4b:13:e0:d1:
                    3d:db:3e:a2:e2:e8:9e:65:9e:d6:2c:8e:32:fa:8b:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:9B:21:0D:4C:8B:9F:6F:5B:E4:47:65:CB:A4:58:8E:93:07:06
            X509v3 Authority Key Identifier:
                keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3c:01:a9:e5:27:85:0f:ff:9d:f6:91:55:d6:6c:b1:e3:cf:
         83:23:b6:65:e2:18:8a:16:d1:13:76:54:53:8f:04:c1:b1:04:
         bd:d4:9a:2f:b3:e2:74:bc:52:cb:53:49:cd:a2:4e:d7:70:a7:
         33:8c:0c:43:d7:fa:6a:79:ca:17:0d:78:ae:b1:20:37:52:a2:
         22:30:b8:8d:a3:99:aa:ee:52:56:7b:5c:75:41:97:40:a7:b3:
         ad:a2:3d:ef:15:77:43:2e:0f:3c:89:4b:ff:f6:2d:98:a4:2b:
         fe:5d:c1:74:92:a6:c2:6b:b6:10:ae:a3:57:81:74:e3:49:ab:
         63:64:9c:8d:df:f5:a3:40:db:dc:da:18:77:c7:e7:77:3d:c4:
         67:79:a5:81:93:5b:01:14:5d:f5:24:4f:bd:c5:49:ee:53:0e:
         06:7d:f5:11:98:83:aa:f3:7a:11:a6:3b:2c:3c:88:bb:d2:c4:
         58:ea:46:69:97:c0:e3:b0:6b:2c:f9:8c:a7:f5:e5:ed:2f:91:
         b8:6d:90:bc:17:c2:9e:ff:02:8f:18:e7:09:1e:7a:e0:aa:c0:
         54:78:f2:b8:06:5d:6a:bf:b3:e8:47:dc:e7:56:0f:36:52:b3:
         75:2f:30:53:4d:f3:88:6d:50:6f:78:95:9d:d3:5a:99:58:e6:
         85:d5:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:49:21 2025 by rpki-client