This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File:                     52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier:          shHIhqfYh6WQEsN7WPw5Mf51AVi+rGVA4a56g/Awaqk=
Subject key identifier:   0D:EA:89:39:27:B5:66:0A:AE:E8:14:EC:23:6D:7E:A2:6B:C4:0C:07
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019B35D6EDF63C3FD99C151705EF6EB023E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number:          17CE
Signing time:             Fri 19 Dec 2025 09:00:36 +0000
Manifest this update:     Fri 19 Dec 2025 09:00:36 +0000
Manifest next update:     Sat 20 Dec 2025 09:00:36 +0000
Files and hashes:         1: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: Jfpx13zbR8kPVO5NN3jbxgmH/CH9HRwxHqRnfYkvVI8=)
                          2: 7YzRWXLDcfjfZ1pfSykSzsi_Bqo.roa (hash: upRBCre7SZMIKE1wJY8xBkRe6ItlC6jUoHp+iPPL2jY=)
                          3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=)
                          4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=)
                          5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=)
                          6: djDphXEUQBdX3R-46qlc_mVjIWM.roa (hash: kRTKow+YAequmrCl7iJcVr6r44o9uLfJr2UgqP80lNc=)
                          7: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=)
                          8: oFq4k3jjq58AVkYV37VxNam_vhQ.roa (hash: yt9RD78c2DlDLj9QrteYguRc3xhGx9cs6a+AGlNFCXg=)
                          9: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=)
                          10: uQJ8uXAtBqaSg0chFS7wIEPvMFk.roa (hash: OOagBGLstHbMyzpz2lFNp3hjWcGgUfG7Q/Mr5UAMmgY=)
                          11: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d6:ed:f6:3c:3f:d9:9c:15:17:05:ef:6e:b0:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Dec 19 09:00:36 2025 GMT
            Not After : Dec 20 09:00:36 2025 GMT
        Subject: CN=0dea893927b5660aaee814ec236d7ea26bc40c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:62:04:02:24:47:47:d0:97:76:61:fa:dc:
                    c6:01:11:41:a2:a1:c0:ab:7d:c7:2e:92:24:55:c5:
                    62:95:78:4f:4e:9a:a8:da:50:f8:42:0e:2c:c4:e6:
                    5d:3d:73:1e:5a:f1:ce:c3:d9:e9:b0:6c:53:d2:58:
                    44:7f:e4:e3:a9:fa:65:71:cb:c8:d8:c1:a3:98:7d:
                    4d:b8:18:2a:7f:6e:36:4e:9b:06:3d:11:a3:7a:02:
                    5f:aa:e4:d3:47:5c:e7:9d:00:98:db:a2:7d:ec:5d:
                    7f:0f:16:3f:63:48:bd:ea:3c:c5:63:69:ae:8b:10:
                    8e:c4:b4:d3:5a:7e:74:f1:58:1c:16:73:13:a4:b1:
                    eb:28:a5:88:91:70:34:65:7c:e1:33:5d:0c:79:b4:
                    d3:0e:46:a3:6c:71:19:2c:51:81:90:05:93:6e:1e:
                    04:57:4f:7b:b0:33:e9:03:0c:34:0d:f1:cc:39:86:
                    a9:1c:f1:af:75:62:ea:3c:c5:a2:04:ce:8e:b8:27:
                    15:2c:d0:88:09:19:8e:3c:ca:f3:8c:f5:e4:dd:1f:
                    c4:d8:4c:d2:a9:81:30:52:90:5d:c1:1f:17:72:c1:
                    ae:ee:a5:fb:dc:fc:0d:be:31:25:f5:de:74:d9:c1:
                    a9:9d:86:cc:d2:4c:f9:6c:27:05:53:53:78:1e:80:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EA:89:39:27:B5:66:0A:AE:E8:14:EC:23:6D:7E:A2:6B:C4:0C:07
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:e7:9c:82:e8:89:1c:3e:eb:e9:e6:9e:ec:f0:50:79:21:
         d7:cf:7c:03:43:bb:0d:ab:97:5b:6b:b2:5b:e2:ff:b5:f3:7b:
         64:5b:d4:e9:15:48:bb:eb:bb:2e:ec:85:9f:13:f5:03:52:8b:
         f2:af:e5:c7:0d:bc:64:27:50:20:1f:48:46:4b:ff:8c:31:f7:
         22:01:67:e4:93:c2:44:a0:49:ec:05:25:95:d0:e5:1b:d0:ea:
         4a:25:82:82:60:46:ce:23:d9:1e:36:8a:d5:72:71:24:45:49:
         7c:f0:b8:a6:63:90:1b:76:3e:53:a0:57:44:f3:4c:80:42:59:
         4a:59:ad:8c:0b:ea:38:bf:ce:1f:a5:e7:51:de:f9:a1:0b:ed:
         b4:54:99:ec:8f:e5:d9:39:0a:b3:97:20:36:d3:72:f7:2e:c3:
         7a:47:9f:28:09:2f:f9:db:36:96:aa:44:3c:b7:94:c9:85:b2:
         cf:e4:1a:6f:d9:58:03:64:c8:cf:89:7e:22:a1:85:15:9b:0a:
         59:c7:86:b5:00:eb:17:2a:86:e0:82:73:13:f8:91:24:68:f9:
         5b:26:de:fa:73:a4:54:9a:36:a7:ce:ea:c9:e2:25:23:06:41:
         cf:a0:f9:3e:0b:91:96:4d:ee:1a:8d:9c:fb:a0:c8:b9:7b:33:
         65:44:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:52:09 2025 by rpki-client