This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File:                     t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier:          Jb7gk/HBajk6Rl1Sa87gY//O4Q49OPx8Uv4szAubKpc=
Subject key identifier:   5A:93:A2:D4:81:B3:96:29:CC:EC:E9:5C:27:C3:54:49:6F:D6:7A:E6
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer:       /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial:       019AF5781471298920B134ACE749D0146863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 21:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:18 +0000
Files and hashes:         1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
                          2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
                          3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: i1zGWbIUY/wC91BD7oD38V/K2igkolNQmO9UHpQycx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:14:71:29:89:20:b1:34:ac:e7:49:d0:14:68:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
        Validity
            Not Before: Dec  6 21:01:18 2025 GMT
            Not After : Dec  7 21:01:18 2025 GMT
        Subject: CN=5a93a2d481b39629ccece95c27c354496fd67ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:c3:c5:1d:e2:f7:7d:30:25:aa:79:4e:c9:
                    1b:25:2a:b9:20:d7:50:23:eb:a4:1b:71:e8:70:06:
                    c1:58:61:28:89:b3:2b:30:c9:c1:dd:da:2e:92:08:
                    d3:69:a7:be:28:1d:37:8e:9a:3f:bc:1d:00:68:7f:
                    27:63:6b:ad:66:01:e4:1d:3f:9d:e4:e5:1a:c0:dd:
                    f1:33:ce:d1:38:9d:96:df:c8:84:fb:e3:91:45:83:
                    23:61:4a:49:12:31:e8:e7:e6:74:e9:8d:06:81:42:
                    47:0f:ba:70:89:7c:0c:90:47:fb:7b:32:6f:27:3a:
                    16:a7:c5:eb:dc:51:bd:dd:a2:b9:e1:98:a4:e3:17:
                    5d:fd:4c:d8:ad:92:59:d0:3b:c7:87:ad:a5:ee:5d:
                    05:0a:7b:aa:7c:36:3f:38:11:f4:d7:50:88:e1:02:
                    03:79:90:98:6c:0b:b6:dc:35:b0:73:aa:44:83:87:
                    c1:37:fd:92:9e:a4:24:31:fe:b0:4f:6c:9f:a3:c2:
                    2c:0f:e4:d3:aa:5f:72:f5:69:ee:90:02:f9:a7:e0:
                    24:cb:65:93:aa:47:d0:dc:72:d8:13:1a:ea:37:0f:
                    a2:ea:29:f4:53:93:d8:b2:1f:76:44:d2:72:3d:4b:
                    f0:0c:cf:18:bc:4e:86:71:84:d3:b3:f0:4a:19:3e:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:A2:D4:81:B3:96:29:CC:EC:E9:5C:27:C3:54:49:6F:D6:7A:E6
            X509v3 Authority Key Identifier:
                keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:95:9c:68:1e:84:02:7e:4c:a1:b1:b3:91:41:ff:78:23:
         36:ca:56:92:36:df:0f:38:c0:72:9b:d9:ef:a7:63:29:77:87:
         78:59:bd:32:63:d6:37:53:04:17:23:00:8f:0b:80:0a:f7:34:
         11:f6:44:e3:16:aa:ec:32:e1:a5:e8:48:65:96:72:d3:0e:f7:
         b4:06:72:57:11:8b:bb:7f:02:14:81:08:2e:20:44:fd:7f:18:
         b1:23:59:04:76:bf:7a:e3:e9:93:0f:30:8f:ad:34:a5:0b:25:
         53:6e:2d:13:34:77:94:0a:78:3f:b4:32:5a:f6:5f:27:e4:00:
         1a:a5:b5:01:1e:aa:e7:63:52:03:3e:c0:1e:cc:d5:48:f0:01:
         b6:c5:ed:41:05:51:52:af:54:39:99:9e:f0:05:bd:28:c8:05:
         de:cf:ad:39:a7:80:7b:7f:0c:0c:b5:c8:0d:ec:d5:17:66:ae:
         ac:00:31:35:6b:87:31:13:2d:31:e5:07:37:ea:d9:36:59:6c:
         37:b9:de:5f:97:f9:b7:73:5b:b6:b0:5b:8e:87:d4:a3:14:d4:
         ee:98:b0:4b:44:07:2b:81:70:6d:fc:92:6f:fd:ec:c0:a8:2b:
         12:70:32:30:fb:42:53:41:1b:b6:cd:26:68:9f:98:41:24:84:
         33:b1:b4:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1eBRxKYkgsTSs50nQFGhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx
YTcxYzgwHhcNMjUxMjA2MjEwMTE4WhcNMjUxMjA3MjEwMTE4WjAzMTEwLwYDVQQD
Eyg1YTkzYTJkNDgxYjM5NjI5Y2NlY2U5NWMyN2MzNTQ0OTZmZDY3YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9TDxR3i930wJap5TskbJSq5INdQ
I+ukG3HocAbBWGEoibMrMMnB3doukgjTaae+KB03jpo/vB0AaH8nY2utZgHkHT+d
5OUawN3xM87ROJ2W38iE++ORRYMjYUpJEjHo5+Z06Y0GgUJHD7pwiXwMkEf7ezJv
JzoWp8Xr3FG93aK54Zik4xdd/UzYrZJZ0DvHh62l7l0FCnuqfDY/OBH011CI4QID
eZCYbAu23DWwc6pEg4fBN/2SnqQkMf6wT2yfo8IsD+TTql9y9WnukAL5p+Aky2WT
qkfQ3HLYExrqNw+i6in0U5PYsh92RNJyPUvwDM8YvE6GcYTTs/BKGT7FIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqTotSBs5YpzOzpXCfDVElv1nrmMB8GA1UdIwQY
MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt
NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4
LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1uVnGge
hAJ+TKGxs5FB/3gjNspWkjbfDzjAcpvZ76djKXeHeFm9MmPWN1MEFyMAjwuACvc0
EfZE4xaq7DLhpehIZZZy0w73tAZyVxGLu38CFIEILiBE/X8YsSNZBHa/euPpkw8w
j600pQslU24tEzR3lAp4P7QyWvZfJ+QAGqW1AR6q52NSAz7AHszVSPABtsXtQQVR
Uq9UOZme8AW9KMgF3s+tOaeAe38MDLXIDezVF2aurAAxNWuHMRMtMeUHN+rZNlls
N7neX5f5t3NbtrBbjofUoxTU7piwS0QHK4FwbfySb/3swKgrEnAyMPtCU0Ebts0m
aJ+YQSSEM7G0Pw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:36 2025 by rpki-client