This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File:                     naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier:          qg2CEzwFoHk4knxBVQWo341dBzvXBmMLcDRuLQUN45M=
Subject key identifier:   C4:B7:AC:EB:93:F6:F7:FB:03:3E:A9:93:7C:86:D4:B6:5B:18:18:77
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer:       /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial:       019AF2AD42E3643D3C143F22627364188706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number:          166E
Signing time:             Sat 06 Dec 2025 08:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:32 +0000
Files and hashes:         1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
                          2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
                          3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: XLd8vBeWf/bZwDSpSlIQowonSxq1aNkKzy0zpJC2av0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:42:e3:64:3d:3c:14:3f:22:62:73:64:18:87:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
        Validity
            Not Before: Dec  6 08:00:32 2025 GMT
            Not After : Dec  7 08:00:32 2025 GMT
        Subject: CN=c4b7aceb93f6f7fb033ea9937c86d4b65b181877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:8e:97:7c:7e:34:f3:95:db:1a:f1:e3:6c:
                    cf:4a:2a:7a:35:9f:32:48:49:08:9e:fa:cd:64:02:
                    2b:c0:64:bf:8c:19:42:60:ac:05:42:30:15:7d:ab:
                    19:f7:5a:f3:04:da:35:4e:9f:02:50:98:d6:81:01:
                    f8:b1:d6:1a:4e:27:c4:1d:7f:4f:51:3c:14:bc:16:
                    21:50:1c:c9:0d:87:4f:cd:a0:1e:84:31:18:f3:62:
                    e3:36:64:7b:51:4a:23:80:ef:00:42:3a:53:66:b2:
                    16:d5:59:4e:41:17:44:71:83:63:a3:ed:84:76:25:
                    a6:38:1d:6c:31:4d:e1:a5:ce:49:31:e2:4d:a4:4e:
                    dc:1c:fd:94:9a:ff:d0:4c:5b:2d:0d:3a:74:97:86:
                    59:fc:a9:bf:bd:ee:2b:b1:8c:29:f5:6f:81:c1:d4:
                    0e:fd:bc:0e:05:bd:00:e5:f0:c8:1b:91:5a:5a:a9:
                    e3:6b:a5:9c:1c:8c:25:e9:be:f4:24:58:72:46:1d:
                    22:2a:cc:1a:49:98:d7:e6:f5:3b:44:d2:4f:b5:5a:
                    24:60:f2:75:fc:96:0b:23:1f:e5:3a:09:39:18:cc:
                    4a:df:3a:05:76:56:3b:ec:16:f8:cc:54:a2:89:c8:
                    fc:e9:74:b1:45:8f:a3:1a:92:a8:34:fa:e5:fe:a6:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:AC:EB:93:F6:F7:FB:03:3E:A9:93:7C:86:D4:B6:5B:18:18:77
            X509v3 Authority Key Identifier:
                keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:4d:d2:06:95:74:9b:bb:d5:1c:9a:5e:4b:5d:40:81:1f:
         fb:9e:9e:cd:54:ef:df:63:77:94:5a:4f:b9:e9:2a:5a:8c:e7:
         2f:08:4d:3f:22:24:0c:45:68:5c:dc:f2:3d:54:56:e9:44:67:
         6e:10:67:71:4e:89:63:50:ea:7f:48:cc:ea:92:63:fb:3b:46:
         aa:61:f7:98:71:56:5c:11:2e:4d:b8:b5:d0:26:50:13:0c:06:
         2e:ba:05:38:25:1c:1a:05:1c:46:06:62:ee:9a:80:5f:b1:0d:
         0b:ba:5b:cc:e8:bf:ce:7e:9d:ce:82:57:ba:c9:14:0b:e6:2b:
         18:67:eb:b4:c7:dd:42:ac:3d:33:e0:6a:2e:c2:b6:57:fb:22:
         a8:43:44:cf:f6:4c:2b:79:75:7a:67:64:29:c9:16:4b:4e:09:
         28:26:bc:be:e2:7e:ee:40:7e:4c:4d:3f:58:85:32:2e:bb:88:
         db:82:03:16:81:05:92:25:cf:3a:d6:71:9e:bb:c5:93:84:5e:
         02:cf:3c:02:45:dd:4a:02:be:54:7a:30:d2:52:53:ce:47:a3:
         5b:8f:d7:fe:a6:96:02:93:53:6a:e9:64:08:44:66:a3:15:96:
         14:4c:d8:48:b4:c2:19:19:4e:8e:60:c9:fd:25:13:16:cd:ee:
         26:ff:16:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrULjZD08FD8iYnNkGIcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD
EyhjNGI3YWNlYjkzZjZmN2ZiMDMzZWE5OTM3Yzg2ZDRiNjViMTgxODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxqOl3x+NPOV2xrx42zPSip6NZ8y
SEkInvrNZAIrwGS/jBlCYKwFQjAVfasZ91rzBNo1Tp8CUJjWgQH4sdYaTifEHX9P
UTwUvBYhUBzJDYdPzaAehDEY82LjNmR7UUojgO8AQjpTZrIW1VlOQRdEcYNjo+2E
diWmOB1sMU3hpc5JMeJNpE7cHP2Umv/QTFstDTp0l4ZZ/Km/ve4rsYwp9W+BwdQO
/bwOBb0A5fDIG5FaWqnja6WcHIwl6b70JFhyRh0iKswaSZjX5vU7RNJPtVokYPJ1
/JYLIx/lOgk5GMxK3zoFdlY77Bb4zFSiicj86XSxRY+jGpKoNPrl/qaFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS3rOuT9vf7Az6pk3yG1LZbGBh3MB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMRN0gaV
dJu71RyaXktdQIEf+56ezVTv32N3lFpPuekqWoznLwhNPyIkDEVoXNzyPVRW6URn
bhBncU6JY1Dqf0jM6pJj+ztGqmH3mHFWXBEuTbi10CZQEwwGLroFOCUcGgUcRgZi
7pqAX7ENC7pbzOi/zn6dzoJXuskUC+YrGGfrtMfdQqw9M+BqLsK2V/siqENEz/ZM
K3l1emdkKckWS04JKCa8vuJ+7kB+TE0/WIUyLruI24IDFoEFkiXPOtZxnrvFk4Re
As88AkXdSgK+VHow0lJTzkejW4/X/qaWApNTaulkCERmoxWWFEzYSLTCGRlOjmDJ
/SUTFs3uJv8WyQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:39:04 2025 by rpki-client