This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          F6+ygVtvXmxKagW4jlDWAZ2CoNCbXXsdn1y6K5nmMVI=
Subject key identifier:   73:CC:4A:E8:DA:2C:01:1F:2B:6E:31:6A:D0:48:DF:62:45:D8:6B:E8
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019B378EAB01573BD63243A4B6B877BD2D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          1788
Signing time:             Fri 19 Dec 2025 17:00:55 +0000
Manifest this update:     Fri 19 Dec 2025 17:00:55 +0000
Manifest next update:     Sat 20 Dec 2025 17:00:55 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: aI/K9NXf8hsQupPjXOIJmpJAuJa9Q9IBFbv1zTiMlG4=)
                          2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
                          3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
                          4: q5QCzkumzST46_juxutwokUmgo0.roa (hash: MDvObiRF/vbaGYpuLSQ+tLb0/l9IEYefgNBYbZcoyeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:ab:01:57:3b:d6:32:43:a4:b6:b8:77:bd:2d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Dec 19 17:00:55 2025 GMT
            Not After : Dec 20 17:00:55 2025 GMT
        Subject: CN=73cc4ae8da2c011f2b6e316ad048df6245d86be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:9f:84:13:c9:ce:a9:1d:dc:d5:f4:53:9a:
                    38:e7:01:77:e3:e3:8e:d4:e8:9e:f5:8e:63:04:4e:
                    d8:27:c8:db:96:ce:cc:1e:e4:dc:40:35:ca:57:c9:
                    10:ef:85:f6:5f:a9:fd:17:d4:3d:b1:31:23:c4:eb:
                    75:94:8a:e3:c6:a6:5c:d1:47:df:33:31:06:7e:da:
                    90:b1:d0:7e:ea:60:78:70:24:5f:f2:52:53:bb:0a:
                    ad:b0:c5:ec:59:fc:07:ac:b6:7d:92:b0:ea:64:47:
                    c7:c9:79:d4:89:18:2d:f0:0a:3e:e9:54:89:b7:ad:
                    18:3e:74:28:f1:20:02:49:fb:a0:41:7d:1b:d9:e9:
                    30:45:7f:8e:b2:e4:40:f9:d8:c5:1e:2e:40:8a:05:
                    25:96:ca:59:b7:eb:0b:84:83:6c:ae:14:be:7a:5c:
                    de:24:8d:00:98:b1:f4:3f:36:e9:95:9f:ea:b1:87:
                    a1:20:c6:3d:2f:29:47:d2:5d:5e:37:bc:ed:99:6c:
                    79:27:ef:2f:46:27:7b:93:8a:e1:cd:8a:db:7e:65:
                    e9:73:be:19:27:3d:90:f9:1e:b6:f6:ff:80:a9:0a:
                    f6:1c:87:58:9d:1a:42:0c:28:22:d4:f8:8d:7a:9c:
                    47:e0:b8:36:a9:52:e4:43:e2:eb:52:b4:23:19:64:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:4A:E8:DA:2C:01:1F:2B:6E:31:6A:D0:48:DF:62:45:D8:6B:E8
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:37:5b:1a:6c:94:8a:57:dc:89:ce:35:82:83:59:bd:ee:e2:
         cb:81:4f:b5:e7:08:a9:88:08:6b:eb:6e:b1:f2:63:1d:f1:fb:
         48:51:2a:b5:5d:04:59:1f:34:c9:9a:84:1f:a0:8d:95:e8:d2:
         9b:c4:16:f9:0f:87:bc:77:a7:0d:77:a4:a9:47:00:a7:1e:0a:
         b0:7d:a3:b4:9b:67:8f:89:1b:a8:c9:02:99:a1:d4:7c:2f:43:
         2d:7b:4f:c8:7b:e5:cb:6d:78:71:5a:81:82:c9:a0:2f:1a:58:
         ef:dd:2f:75:df:3a:3b:71:a3:49:5d:04:f9:9e:11:23:ff:57:
         8a:4d:56:9a:00:5a:b8:49:0d:b0:8a:d4:d6:b7:ed:20:21:01:
         f1:72:bf:83:a1:b1:0b:13:cb:44:12:56:02:b5:b3:0f:55:2f:
         38:a0:58:ba:8f:68:09:31:d9:47:b8:ab:36:11:1c:20:de:b7:
         a6:4b:07:30:dd:1f:ff:fb:b5:21:30:f0:0d:b8:89:9d:9a:5d:
         8a:1d:17:e1:f3:e4:f3:16:3e:12:6e:79:1a:0c:12:22:34:df:
         1b:db:87:51:5b:8b:17:04:f9:81:9a:ff:5d:e5:e5:43:4e:4d:
         a8:ed:6c:7c:f4:41:cc:24:5e:c9:c8:a5:08:d8:33:c8:ab:87:
         35:90:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:14:31 2025 by rpki-client