This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          DpGcJ/Te+Oioe1UDBRAwIxGMHwHOArGSOCSRMslfoek=
Subject key identifier:   7D:FB:CC:03:48:37:A4:AF:FB:CC:E9:A2:34:7A:7D:0E:5A:9C:9E:F6
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019B2B1D7292A972DF7237BC0BA3480AC545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          1790
Signing time:             Wed 17 Dec 2025 07:01:48 +0000
Manifest this update:     Wed 17 Dec 2025 07:01:48 +0000
Manifest next update:     Thu 18 Dec 2025 07:01:48 +0000
Files and hashes:         1: bng6ShOgaVE2_vQYMevfFJYJ8Sk.roa (hash: o+G2M7dgXmN23PorkdRSIqlVi011U/iuS/RS0v10mJg=)
                          2: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
                          3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: M7L1GQE8XVZI9FTuMSoa2kITWyjL8Gitkr+MveccHzo=)
                          4: zIQrtixaP8FSodiktmvc2r9jLQ0.roa (hash: TQFktjGswL7qarOYLhb3l7yDbaMo37GtBSGaVvZU4Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 07:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1d:72:92:a9:72:df:72:37:bc:0b:a3:48:0a:c5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Dec 17 07:01:48 2025 GMT
            Not After : Dec 18 07:01:48 2025 GMT
        Subject: CN=7dfbcc034837a4affbcce9a2347a7d0e5a9c9ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:8d:19:9e:ba:8a:14:f8:56:20:c0:62:eb:
                    93:fe:bb:70:70:92:a2:dc:b2:79:90:3b:4f:e9:de:
                    5f:8c:d0:51:a5:9b:ce:6d:df:24:88:a4:14:1a:5e:
                    c7:fc:dd:50:37:8c:b6:8f:66:10:d2:a0:69:7a:55:
                    26:2c:70:e7:ed:63:a7:ba:6c:0d:eb:6e:87:0f:4e:
                    99:36:24:83:39:e1:e9:15:a4:4c:ab:51:ec:c5:c8:
                    dd:89:04:e1:d1:86:05:75:0b:7e:2b:af:bf:1a:b6:
                    1e:e6:1c:e4:bd:56:04:df:65:c9:91:b5:78:57:af:
                    86:44:f4:1c:94:e0:70:ce:71:54:93:43:f8:30:2b:
                    42:18:ef:79:61:1a:13:c6:96:b4:6c:1f:46:12:18:
                    54:c1:de:da:34:9c:a1:60:f5:b7:53:71:c0:b0:f4:
                    83:b3:34:42:89:e1:b5:94:d7:90:7b:ea:ca:57:ef:
                    18:b4:8d:0b:d6:e1:d2:bc:e9:5b:32:14:d2:e0:79:
                    9a:48:32:1a:aa:11:f4:cf:26:c6:17:44:51:98:71:
                    06:dd:ae:9c:28:3f:ac:b3:d4:e7:c2:1b:8d:8e:00:
                    a4:9d:bc:cc:ce:43:9e:69:97:90:3b:0a:b9:85:b4:
                    20:c4:5b:8d:b0:83:3a:3b:26:ec:93:fa:f2:04:01:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:CC:03:48:37:A4:AF:FB:CC:E9:A2:34:7A:7D:0E:5A:9C:9E:F6
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:3d:f0:a0:f6:a6:e1:8a:1d:5e:64:ce:85:f9:32:55:2a:
         11:d8:8e:ce:89:df:6b:1d:0d:28:ce:d0:19:79:f0:a9:fc:f0:
         94:9a:bf:90:ff:48:ad:a2:f0:dc:20:05:2e:18:90:e3:72:34:
         11:b3:b1:93:eb:da:db:64:39:12:53:28:d7:e0:07:bb:f9:8f:
         8e:2e:a3:41:61:3d:7b:50:fb:51:40:95:72:f5:7e:4c:0c:b2:
         d7:75:3b:01:97:21:9b:99:5a:22:90:03:5d:bb:2c:0b:e3:df:
         c9:21:4f:63:27:52:bc:02:31:8c:15:2a:58:25:6c:dc:29:59:
         b0:94:ee:5b:04:d2:6e:7a:eb:c3:12:54:0a:2e:43:44:29:3b:
         9a:a6:c3:b8:72:72:37:7f:10:ac:fb:13:ad:a9:08:55:c6:59:
         f9:d2:2b:b7:14:ac:01:b6:cb:b6:64:09:8e:1a:14:a6:b9:7e:
         6b:93:95:15:91:c5:56:9f:18:e0:8f:19:7c:9f:1d:80:8d:2a:
         10:16:69:59:b9:a7:bc:19:68:96:be:43:48:4c:7b:f9:70:4d:
         f8:b3:1f:94:53:25:08:33:76:66:54:3a:0a:99:b9:5b:d4:5f:
         58:e1:35:c7:32:2b:8c:20:4e:42:72:a9:66:92:40:d3:c5:33:
         94:f8:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:11:44 2025 by rpki-client