This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File:                     ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier:          5WrH34j9LWWWXRJp5LsbO01+TDLOJlf6LJohWFTvyoc=
Subject key identifier:   35:01:A8:FC:DD:7B:88:6D:32:3E:9A:BE:9D:23:7A:3B:1D:33:75:F5
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer:       /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial:       019B3E6D87A3DC80295B6A52B1DCB4CF441A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number:          1789
Signing time:             Sun 21 Dec 2025 01:02:03 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:03 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:03 +0000
Files and hashes:         1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
                          2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=)
                          3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=)
                          4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: pskTE+qzQ4dYLlCkiWxxIvvHaVGC1btck8BWevVTfso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:87:a3:dc:80:29:5b:6a:52:b1:dc:b4:cf:44:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
        Validity
            Not Before: Dec 21 01:02:03 2025 GMT
            Not After : Dec 22 01:02:03 2025 GMT
        Subject: CN=3501a8fcdd7b886d323e9abe9d237a3b1d3375f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:58:75:e8:91:88:87:12:76:1a:47:30:69:71:
                    d5:31:49:d8:f7:2f:bd:14:44:86:42:1d:5e:dd:0e:
                    9a:4a:04:78:08:cd:38:49:0b:f4:1e:ab:a6:4e:49:
                    17:c2:d4:e4:85:fb:1c:7b:a6:8f:a1:69:87:22:69:
                    72:ca:31:d4:e2:e4:16:8c:52:1f:2b:6a:3f:b2:c4:
                    de:20:6a:7c:da:dd:90:cb:b5:74:56:63:6c:24:71:
                    aa:e1:d5:8f:6d:b3:6a:24:0c:2b:5b:2f:53:3b:bf:
                    c3:6e:99:1f:6c:30:90:58:e8:56:2e:75:48:59:b8:
                    de:91:20:7e:48:39:e3:4b:f6:da:55:04:dc:bd:80:
                    9a:d7:23:01:8c:75:10:44:60:12:95:8b:c8:ed:fe:
                    c4:6b:05:26:fb:6a:1a:13:11:e3:a4:2f:cc:f3:21:
                    b7:74:03:9b:14:19:dd:de:76:b6:3b:bf:f4:ee:92:
                    31:f2:19:8b:ff:f9:f1:05:6c:70:65:6f:78:0e:d3:
                    58:92:dc:9a:84:1e:38:ad:34:a1:c6:31:3d:9e:86:
                    d3:ff:22:54:8c:b4:46:3e:37:5d:45:af:d7:f3:ac:
                    b9:45:29:42:f8:b6:1f:f5:67:6b:a7:93:fe:1e:f6:
                    a7:12:4e:21:90:c3:c1:d9:c6:34:55:33:c3:fa:1a:
                    40:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:01:A8:FC:DD:7B:88:6D:32:3E:9A:BE:9D:23:7A:3B:1D:33:75:F5
            X509v3 Authority Key Identifier:
                keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:da:ee:33:35:be:ab:1a:09:0e:d0:60:aa:3f:3a:d6:08:
         53:47:76:6e:80:43:0f:ea:3e:44:f0:3a:08:43:b5:ad:0b:01:
         24:30:98:91:90:77:49:dd:aa:ec:59:94:e2:8d:03:9c:17:2d:
         3f:0e:61:54:89:f0:a3:8a:00:93:0b:a9:cc:69:0a:26:a2:3f:
         0b:75:3a:cc:9a:fb:2d:5d:9e:62:db:4a:ee:09:9e:3b:8b:fe:
         d1:59:f6:05:1d:cb:f8:29:2e:9d:c3:71:6e:4e:ee:27:7f:02:
         f0:39:67:1b:1d:bf:d8:3a:06:28:6f:14:96:b1:37:70:50:b8:
         f9:20:70:3b:fc:6b:c7:ef:6d:81:5f:77:34:48:cc:cd:3c:8f:
         5c:02:62:62:3b:65:4e:ef:91:2f:1e:67:63:7c:1d:8b:75:bb:
         1e:e9:51:a4:ea:f9:bc:0b:9d:cf:e8:11:7e:8e:c9:5a:f8:ea:
         d9:f1:f8:92:7e:ee:db:9c:97:a6:57:44:9d:d8:c5:b5:ce:7e:
         46:a8:fb:f0:e8:cb:f1:4f:66:96:5c:81:d5:2f:de:c4:23:e7:
         ca:e1:b2:5d:8d:e3:09:62:e7:1b:d7:e0:16:6d:ef:d4:e5:b5:
         45:7d:4c:af:c0:b1:53:84:ff:83:70:8c:3e:03:9c:bc:f5:46:
         53:95:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:07:47 2025 by rpki-client