This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File:                     PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier:          XEvTC/6X7rBoSlARAeGS58Ur0LXDeELCt1qhVte6uu0=
Subject key identifier:   6E:50:D7:DF:E3:88:48:E3:09:F9:05:FB:1A:D7:3C:27:43:5F:CD:91
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer:       /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial:       019B522AC34CDE4560253AABEAB4E4EEA609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number:          1795
Signing time:             Wed 24 Dec 2025 21:01:32 +0000
Manifest this update:     Wed 24 Dec 2025 21:01:32 +0000
Manifest next update:     Thu 25 Dec 2025 21:01:32 +0000
Files and hashes:         1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
                          2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
                          3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: xt0M82xvxg4GE7lbFOHTidk8u963fmnfJjUYphmH6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 21:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:2a:c3:4c:de:45:60:25:3a:ab:ea:b4:e4:ee:a6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
        Validity
            Not Before: Dec 24 21:01:32 2025 GMT
            Not After : Dec 25 21:01:32 2025 GMT
        Subject: CN=6e50d7dfe38848e309f905fb1ad73c27435fcd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:72:5b:68:ee:83:23:5e:bd:2b:06:ac:44:
                    74:45:7a:5d:25:74:a9:5e:71:bd:33:36:0b:54:df:
                    f9:f0:90:0d:ec:96:bb:17:50:37:16:8d:43:5e:34:
                    d8:f0:e9:68:49:cb:96:97:19:e8:79:12:25:06:e0:
                    43:84:40:3b:ec:51:60:4b:1d:60:b8:6b:f4:02:4e:
                    72:8c:94:3b:a3:1a:9e:8c:f8:e3:ff:d3:a9:38:63:
                    ab:4f:53:f2:78:5a:c4:35:36:19:0f:c5:b2:20:4c:
                    3a:04:4f:e4:1a:cc:82:f2:28:2b:37:ba:75:ed:e5:
                    5d:a8:2c:eb:fc:12:22:71:3e:5b:87:d9:c0:b3:ba:
                    d7:36:5d:74:1c:ad:3b:17:3e:d5:e4:98:68:9b:77:
                    90:04:db:ed:1e:87:3a:76:7e:46:08:9a:dd:e5:47:
                    1d:2c:f0:e7:02:ba:a9:1c:c2:51:77:22:e1:14:6a:
                    a5:37:b3:00:90:8b:83:86:8f:7e:b7:cd:23:17:bd:
                    b4:12:99:08:b2:90:d6:4f:7e:9d:73:0d:63:43:c2:
                    5e:bc:64:98:43:16:4d:14:6a:ee:c2:1a:c6:bd:78:
                    3d:99:c6:71:bd:5f:62:5d:fe:6b:2b:20:d4:4b:b5:
                    87:b2:e7:ee:1a:e5:ca:fc:43:f2:a8:eb:ea:97:be:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:50:D7:DF:E3:88:48:E3:09:F9:05:FB:1A:D7:3C:27:43:5F:CD:91
            X509v3 Authority Key Identifier:
                keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:7c:be:a6:6e:48:cd:aa:34:f9:ef:2b:88:70:73:77:13:
         08:27:4f:a7:f7:16:37:92:77:94:c0:4e:32:a5:dd:fd:93:83:
         35:b1:1a:e7:fc:56:9f:de:09:66:89:b6:42:e5:14:03:7d:cf:
         7d:56:e9:36:78:cd:fa:e6:e7:8a:e5:33:b0:93:df:97:e0:c2:
         79:5c:96:fb:d4:77:1b:af:2d:4a:19:9b:82:ea:f6:9f:34:b9:
         6b:33:ab:d6:79:d3:59:6e:9a:85:40:72:46:d3:35:9a:57:64:
         ed:39:e8:3c:52:92:4b:e9:be:0c:69:99:4b:41:4d:a8:86:9f:
         b3:4f:1f:f4:dc:73:7b:3e:78:0e:b4:d1:97:b6:68:84:85:10:
         b1:66:b0:da:a5:19:7f:d4:c6:5e:9d:a8:44:c2:54:42:e7:f8:
         af:4b:ff:44:fc:1b:44:d5:f4:c9:91:93:8c:0c:28:bf:89:dd:
         d2:b2:82:c4:1b:7f:e0:02:5c:c4:d2:2d:ec:02:6a:1c:2b:f7:
         f1:dc:38:04:aa:66:5f:6e:aa:ef:61:cf:62:ed:58:16:39:e7:
         64:23:4d:5b:2c:5e:2f:98:cd:dd:a8:5b:2f:85:ce:1d:cd:96:
         eb:79:9e:07:31:7e:84:fa:23:04:03:53:b5:3c:74:68:9a:f1:
         33:45:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:52:02 2025 by rpki-client