This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          Meh1AzmP5Ox129v5BLlaM7wTB0Gc4G53B7t+V8lV6HI=
Subject key identifier:   DA:7B:31:73:4E:65:8F:B2:02:59:91:10:83:D3:BC:6E:7A:09:86:83
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       019B533C8B76C584D35969D027BE2721BE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          1732
Signing time:             Thu 25 Dec 2025 02:00:35 +0000
Manifest this update:     Thu 25 Dec 2025 02:00:35 +0000
Manifest next update:     Fri 26 Dec 2025 02:00:35 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: UAf1LS8YzcA8o2qnc6IEKKu4VcNZZsKCgzWsu07/5fs=)
                          2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:3c:8b:76:c5:84:d3:59:69:d0:27:be:27:21:be:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: Dec 25 02:00:35 2025 GMT
            Not After : Dec 26 02:00:35 2025 GMT
        Subject: CN=da7b31734e658fb20259911083d3bc6e7a098683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:d2:30:41:79:e2:84:c1:5f:d0:b4:08:fd:
                    f7:33:39:ef:12:f7:c3:30:85:06:c9:b0:0e:59:3c:
                    20:c5:91:fe:34:00:6d:4a:62:00:51:6e:4d:5f:33:
                    f8:64:80:3b:bb:41:8c:08:73:eb:c1:09:21:ee:46:
                    c2:b2:e0:75:85:b3:6e:65:96:17:2d:99:0b:b8:32:
                    24:3f:da:4c:08:24:cf:d3:43:2d:64:90:ec:ab:05:
                    66:79:57:06:bf:b1:f8:2f:2d:98:e5:d1:a3:9d:59:
                    59:a0:50:20:3f:c7:fa:13:d5:95:e8:ef:71:44:3a:
                    6b:9a:7a:b6:dc:e4:5a:f6:86:33:e2:c2:15:2e:45:
                    ca:14:84:33:26:52:f7:c5:a1:d7:c2:04:54:81:68:
                    0b:07:1c:e3:76:bc:5d:a5:56:54:2e:cd:cd:48:c5:
                    12:16:5b:bf:da:18:78:a9:58:7a:4f:a4:38:f3:c1:
                    83:c8:bb:69:d9:9b:9c:44:ee:64:3e:a6:17:91:32:
                    42:61:90:97:a9:ff:de:67:cd:95:f3:3e:e1:22:61:
                    25:52:cd:82:86:63:36:2c:b9:ab:b0:7b:39:8a:96:
                    2e:4a:dc:10:f2:bc:d1:76:59:18:be:38:72:7c:dc:
                    07:f3:2c:66:a2:f0:0f:fa:8c:eb:c9:2d:c7:7e:76:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:31:73:4E:65:8F:B2:02:59:91:10:83:D3:BC:6E:7A:09:86:83
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:8a:9d:9a:40:a3:1d:47:36:36:a6:91:68:c9:18:b7:b9:
         a6:d6:ad:29:16:43:86:4d:1f:68:b7:c9:81:0f:92:ea:9d:ba:
         6a:f2:94:cf:4c:b7:c9:7d:e2:8f:62:a2:46:12:08:0a:72:cf:
         65:76:f7:b8:1b:a3:2e:2b:56:16:64:6b:42:7c:2f:02:7b:47:
         1a:47:8c:f6:fb:45:05:ae:20:75:0a:d8:fa:6b:85:17:5e:61:
         e3:3f:e0:17:55:af:78:7f:5d:b3:40:2a:2a:78:97:29:e9:fa:
         4f:e0:a8:71:54:84:ce:5f:fe:c1:e7:10:53:c5:2e:23:5f:88:
         98:c9:28:0b:20:aa:6f:f5:b4:1b:af:6e:9d:2c:bf:5c:05:15:
         69:f2:77:1d:74:f7:8c:81:9a:e9:fe:38:8f:f9:4d:fe:c0:44:
         98:eb:9d:6b:6a:83:69:fc:12:16:a0:5a:39:1d:02:83:3c:0a:
         e5:cd:d5:76:5c:84:44:03:fe:b3:2c:09:27:7a:fe:31:4d:66:
         fc:f4:be:a8:9c:f8:d0:a2:09:ed:0e:b3:84:41:3e:72:9a:e5:
         0d:cb:62:0f:82:8c:41:c6:13:3a:c6:33:c6:b6:82:7a:12:8f:
         fb:ba:25:40:da:45:93:a5:95:f6:86:23:24:4c:b3:98:cc:4e:
         66:b2:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:31:25 2025 by rpki-client