This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File:                     ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier:          c6hAkn8Vgd3YtGxCTMSQgFkTdHjYBVqsVGk0IlaD4UU=
Subject key identifier:   58:BB:35:E3:14:47:5F:EE:5F:65:64:55:42:92:4B:5E:B4:BC:F3:C4
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer:       /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial:       019B397D60FF32B92B7065DF2C4B4DE79307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 02:01:16 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:16 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:16 +0000
Files and hashes:         1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
                          2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: Cpta9GP928DHSDJm4dAUHyJufmBzJxq8afDWKwZuWGw=)
                          3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:60:ff:32:b9:2b:70:65:df:2c:4b:4d:e7:93:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
        Validity
            Not Before: Dec 20 02:01:16 2025 GMT
            Not After : Dec 21 02:01:16 2025 GMT
        Subject: CN=58bb35e314475fee5f65645542924b5eb4bcf3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:05:1b:eb:8f:a9:c3:43:5e:d8:64:12:2c:23:
                    df:88:25:cc:3c:4a:e9:52:6e:c5:2c:22:92:fd:a4:
                    85:b9:5b:b9:38:c0:ed:34:1e:28:1b:d6:26:a4:20:
                    1d:8e:fb:b0:f4:5a:9f:58:b1:c5:e5:f2:9a:06:59:
                    b0:a2:ef:50:a0:f5:b2:6f:a7:b2:a5:12:ad:68:c7:
                    32:ab:96:f3:10:80:39:92:27:51:70:d9:e0:8a:e1:
                    87:50:20:3f:da:e1:52:5a:5f:b2:a5:bb:5f:20:f6:
                    5c:cb:4f:4a:33:8f:da:16:18:5a:42:65:97:e0:59:
                    55:60:00:84:5e:bd:ee:ab:3e:bf:e4:7f:5f:e5:d0:
                    9d:ef:94:f8:47:7b:14:d8:48:ed:77:e4:b9:99:42:
                    22:60:ac:4a:40:27:8f:fa:db:a5:c1:d3:e8:a7:89:
                    9c:f4:c4:47:35:9f:a2:39:a3:fa:39:ba:be:c4:2c:
                    41:97:3b:0a:c1:2f:e8:f2:b2:41:2c:b4:ba:84:a2:
                    13:c6:ff:9b:5e:cc:23:94:8b:6f:0e:66:82:c1:4a:
                    5a:18:d1:ec:2c:49:57:23:03:cd:71:69:b1:3e:43:
                    54:f1:c0:ca:bd:96:70:a3:95:97:1d:24:9c:49:cb:
                    4b:9b:4f:f6:5c:a4:9d:e7:b4:7c:5c:70:f1:fd:f6:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:35:E3:14:47:5F:EE:5F:65:64:55:42:92:4B:5E:B4:BC:F3:C4
            X509v3 Authority Key Identifier:
                keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:8a:d2:f0:77:33:6d:0d:62:19:94:80:ca:6e:26:9b:43:
         78:06:ba:ed:5c:75:72:c3:4a:80:c8:d8:02:e6:15:a2:b4:7c:
         4f:a7:de:90:36:6b:22:b6:1e:4c:c8:a9:1a:c0:3a:12:2d:6f:
         66:95:90:b7:a3:c9:5f:48:19:66:7a:3f:0a:78:22:1c:41:46:
         ca:55:a9:f7:9f:dd:dd:71:44:51:61:90:fb:84:d5:c0:a7:e3:
         5f:ce:f6:82:a0:b9:bb:55:4c:d5:d0:83:4f:59:85:06:8a:20:
         50:60:28:e3:d6:5a:9e:41:f4:ee:b1:08:e1:77:8f:fe:75:8d:
         8b:14:ba:bd:a0:d8:6b:56:23:a6:63:b7:ad:9b:0f:91:94:ea:
         90:5f:35:6c:24:2e:de:b7:d3:a9:e3:c8:8b:8f:ba:31:4e:1e:
         0d:d2:6f:d9:14:aa:5f:fb:41:c6:16:1e:28:e4:ec:b9:08:10:
         36:f3:81:6b:f2:7c:5f:50:ba:ef:1b:85:52:c8:b9:0b:66:9e:
         0f:cc:cc:73:10:ea:6f:e3:d0:ba:c1:b0:a2:aa:a7:8a:1b:d0:
         83:5a:ff:c8:b0:19:ff:87:28:64:0a:ac:51:e4:e2:8d:4e:37:
         fe:c7:fc:07:57:bc:cb:82:1b:66:b9:2b:81:10:34:db:55:73:
         70:cc:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:04:31 2025 by rpki-client