This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          HwjHNshRKolgddE7z5H7zxEKSNz7O1ITZVt7qQM8bZU=
Subject key identifier:   F8:74:4C:C8:B2:A7:39:25:AD:56:3E:A1:1A:4F:0D:B7:B0:44:F3:C4
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019AF23F9760FA68B18303D96D8298509787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 06:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:44 +0000
Files and hashes:         1: 7cZbkQqr-SEdfr0tEW8C1Pix35Y.roa (hash: xSjPvHmjy6FdGTZKdoGxVAJ1Yq148v83DxivVL7nC44=)
                          2: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: 8LRxHoh4HmIgsndf30+ARrHrtdy6DsOeAZOlLuMARRY=)
                          3: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=)
                          4: hPSG-Jdcz29OBANRkLWHEzWA5Kk.roa (hash: U4NiT3zb8/Cvex2X+6FLghtEgLR1KuWHLdqLp8Ppbzc=)
                          5: u6NL_ogOmQanKJmr1VOq5ASIrTw.roa (hash: IVLfxh3xnjFSGQTmPY15cQ9GzgVAKww2vTiXyy5nK8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:97:60:fa:68:b1:83:03:d9:6d:82:98:50:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Dec  6 06:00:44 2025 GMT
            Not After : Dec  7 06:00:44 2025 GMT
        Subject: CN=f8744cc8b2a73925ad563ea11a4f0db7b044f3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:b5:9b:c8:23:50:66:7d:da:8f:d5:1d:b1:
                    78:50:a7:d8:94:6a:09:30:79:d8:35:8f:a6:7f:e3:
                    18:f9:be:66:de:67:c4:e2:17:1e:36:df:62:fa:73:
                    65:dc:a6:1a:16:22:f9:b1:0a:df:3e:91:86:0d:9e:
                    da:35:23:41:d1:79:44:36:93:c2:10:3b:59:5b:d9:
                    68:fd:e6:c0:2b:e3:55:7c:98:c0:3a:9e:44:1b:2f:
                    a2:17:f7:3a:1b:c4:c6:98:99:a8:37:90:c7:96:9b:
                    c4:54:a0:fd:59:d2:9b:46:ff:c0:10:b8:b0:de:e0:
                    c5:e4:17:a5:94:3b:55:35:e9:b7:22:b6:d5:a3:cb:
                    b3:aa:38:f1:f4:29:9e:b9:b6:69:c2:af:cd:8d:f2:
                    46:32:e9:bf:ab:6e:0b:37:44:0a:6e:1a:5c:c0:82:
                    84:fe:d8:b5:e7:15:a3:ef:9f:e3:f0:57:24:94:84:
                    e3:16:a6:e1:10:59:0e:f9:dd:4f:e5:45:a9:3e:76:
                    68:16:6e:d1:5c:2a:30:ba:00:f8:32:84:6f:52:d3:
                    2d:80:84:d8:c7:74:6f:4a:77:84:c2:2c:2a:d0:ab:
                    40:96:5f:c7:37:a8:fc:23:5b:9a:61:4f:18:25:99:
                    66:46:3b:f4:a1:ce:5d:4d:d2:81:26:2b:df:e6:76:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:4C:C8:B2:A7:39:25:AD:56:3E:A1:1A:4F:0D:B7:B0:44:F3:C4
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:94:cc:ae:98:5f:e0:92:ab:19:0a:4f:f1:9b:73:1b:94:
         c3:65:8b:91:1f:06:1b:11:ac:1a:3c:31:66:c0:59:85:e2:b3:
         f2:78:7b:7d:42:1a:ba:b9:bc:28:81:9e:21:c5:63:4e:7a:df:
         ca:b1:f6:45:6f:35:e6:b9:31:d6:54:46:bf:93:29:f2:bc:72:
         53:54:08:ae:e9:4d:d6:de:4c:08:ff:56:36:59:d1:62:f5:42:
         5b:57:22:f6:3f:97:3c:c6:b8:89:cd:12:28:c2:34:d0:bb:23:
         95:8b:10:76:1e:e1:4b:c8:9c:37:7a:67:9e:2c:b7:f3:20:e5:
         06:95:5c:0e:f6:d5:6e:32:0b:c8:0e:f4:94:4e:00:1b:04:97:
         7c:84:4a:46:fb:91:37:db:3f:f4:8f:f2:40:fb:b8:9f:1a:5a:
         aa:00:a5:73:97:32:eb:58:a9:23:bc:13:81:ca:89:91:61:8a:
         b2:f7:4f:b2:50:d1:8a:32:40:2a:e9:d5:30:0f:ac:cb:f7:ad:
         f3:08:21:bc:dc:a9:84:01:57:69:8b:54:ff:1a:b5:e4:44:66:
         55:b2:cf:06:0a:0c:ba:5f:fd:07:59:74:61:c6:8a:46:d1:7c:
         21:5f:43:ea:04:ac:df:1c:d3:3e:66:3d:ca:5d:81:96:76:4f:
         e0:b5:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:41 2025 by rpki-client