This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          op9Wbdy0Ebk9uXe29kfLkbuqTmYyg0ca0i0ciLNtpjY=
Subject key identifier:   09:16:BD:E7:AA:76:B0:42:B8:8A:4B:87:18:61:4D:D4:6C:D1:2E:64
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       019AF164633652FDE563DB216E5DA0C4BF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          17E5
Signing time:             Sat 06 Dec 2025 02:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:19 +0000
Files and hashes:         1: 1-1ijxKf8Nf9JgCb2WgjGEz_3iaQ.roa (hash: UukUcMQnRkRUff/v902TDiguiMi04hBZ4PMYdCj5nd0=)
                          2: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: 58/9xVomxJ54+CvvjCIFLjD4BjEz04coYgLPCKgOR1U=)
                          3: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          4: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
                          5: vux6kFwpBUkuJvt9MGI0-OndmYQ.roa (hash: SsewcomJRN+4b8wQ2MGVZVNLvCQFuWU8SrIutsyFvJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:63:36:52:fd:e5:63:db:21:6e:5d:a0:c4:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Dec  6 02:01:19 2025 GMT
            Not After : Dec  7 02:01:19 2025 GMT
        Subject: CN=0916bde7aa76b042b88a4b8718614dd46cd12e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:52:3b:0b:fe:8e:97:2d:e1:b8:89:f3:ef:
                    16:01:dc:d0:70:a1:71:a8:0d:62:84:64:42:27:3b:
                    75:5c:db:ce:31:34:ae:e3:cb:15:29:00:23:7a:c6:
                    b2:ae:c8:09:38:98:38:e0:80:1a:c6:67:dd:22:96:
                    0d:9b:cc:32:16:d0:b7:74:bc:94:c5:de:c9:cd:66:
                    da:9a:0b:0b:a3:92:b6:e7:d9:35:19:48:29:2e:25:
                    ae:7c:d3:96:49:76:c6:20:e8:3f:e2:3d:0b:c1:da:
                    ea:f8:82:c9:7d:60:a2:34:18:b8:6f:c2:00:35:06:
                    37:f6:77:fa:f9:53:75:14:11:fc:04:39:64:76:c9:
                    74:30:e0:f2:e2:9d:f0:8d:b7:a4:55:02:a4:55:a9:
                    7e:f1:67:aa:a5:2e:77:ed:6b:13:34:26:2e:74:ae:
                    8b:0e:bc:12:ea:c5:a3:91:f6:51:36:2e:55:f4:38:
                    59:2f:1e:62:bc:81:15:03:2e:6b:8c:90:88:37:2a:
                    d0:c6:15:ea:75:f4:2b:4e:c9:ea:ec:67:92:52:bc:
                    49:cc:28:d5:4d:30:50:09:29:1e:a0:bd:9f:09:d1:
                    87:d7:cf:ad:93:18:45:b5:ef:13:7d:58:ad:80:a9:
                    dd:ef:0b:06:1b:c8:62:b0:09:5c:15:cb:dc:95:5c:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:BD:E7:AA:76:B0:42:B8:8A:4B:87:18:61:4D:D4:6C:D1:2E:64
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:78:69:de:d3:9b:a7:ae:b6:4b:2f:d3:43:38:33:00:8a:10:
         be:86:7f:b3:55:38:c5:5b:82:ed:a3:f4:31:f2:f7:2f:18:a9:
         33:b1:39:bf:8e:c8:a8:b1:a9:41:82:de:37:d7:47:50:20:19:
         8c:f6:f0:40:45:88:c8:ba:02:4d:a4:97:69:9a:31:35:0c:ab:
         33:96:00:19:11:60:75:7e:36:e5:7d:a9:05:42:f5:0f:b4:6a:
         56:18:25:3f:6d:1b:28:da:c7:d1:16:e5:a5:fe:4e:0b:55:9d:
         15:cf:b4:71:c0:37:43:98:e8:e9:35:a9:a8:01:ca:74:03:55:
         fe:af:7a:20:5e:82:e9:b1:a0:76:a7:d6:79:a3:0d:8a:fb:64:
         d2:b3:0b:8a:3f:12:18:c1:29:75:73:24:47:78:b5:12:69:c0:
         04:a9:2f:c4:6c:4d:a8:bf:2e:92:2a:e0:27:ea:64:ee:63:50:
         a3:42:9f:60:a9:a2:6a:e1:25:ff:f5:e8:18:ab:53:6d:cd:6f:
         bc:2b:35:f1:3b:86:af:cb:41:45:3a:07:15:6d:63:13:2e:1e:
         9d:52:a8:bd:f8:e5:a9:4c:c2:22:5e:01:b1:db:44:78:01:7d:
         f2:12:76:47:25:44:e7:ad:31:40:86:d0:7e:39:27:b6:9b:f6:
         6f:6b:56:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZGM2Uv3lY9shbl2gxL8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD
EygwOTE2YmRlN2FhNzZiMDQyYjg4YTRiODcxODYxNGRkNDZjZDEyZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VRSOwv+jpct4biJ8+8WAdzQcKFx
qA1ihGRCJzt1XNvOMTSu48sVKQAjesayrsgJOJg44IAaxmfdIpYNm8wyFtC3dLyU
xd7JzWbamgsLo5K259k1GUgpLiWufNOWSXbGIOg/4j0Lwdrq+ILJfWCiNBi4b8IA
NQY39nf6+VN1FBH8BDlkdsl0MODy4p3wjbekVQKkVal+8WeqpS537WsTNCYudK6L
DrwS6sWjkfZRNi5V9DhZLx5ivIEVAy5rjJCINyrQxhXqdfQrTsnq7GeSUrxJzCjV
TTBQCSkeoL2fCdGH18+tkxhFte8TfVitgKnd7wsGG8hisAlcFcvclVwfYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkWveeqdrBCuIpLhxhhTdRs0S5kMB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3hp3tOb
p662Sy/TQzgzAIoQvoZ/s1U4xVuC7aP0MfL3LxipM7E5v47IqLGpQYLeN9dHUCAZ
jPbwQEWIyLoCTaSXaZoxNQyrM5YAGRFgdX425X2pBUL1D7RqVhglP20bKNrH0Rbl
pf5OC1WdFc+0ccA3Q5jo6TWpqAHKdANV/q96IF6C6bGgdqfWeaMNivtk0rMLij8S
GMEpdXMkR3i1EmnABKkvxGxNqL8ukirgJ+pk7mNQo0KfYKmiauEl//XoGKtTbc1v
vCs18TuGr8tBRToHFW1jEy4enVKovfjlqUzCIl4BsdtEeAF98hJ2RyVE560xQIbQ
fjkntpv2b2tW9w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:17 2025 by rpki-client