This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File:                     1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier:          4dqMMwgttdbH+pvO3MQSPiO962eIdNL521WmtY/co54=
Subject key identifier:   41:8B:CF:59:72:68:B6:EB:9F:67:57:C8:50:10:61:43:9F:FD:72:2C
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer:       /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial:       019AF2093799752AA57282D11863FF27BE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number:          1699
Signing time:             Sat 06 Dec 2025 05:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:21 +0000
Files and hashes:         1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: DcE53T5CVsIgcruC4NgIJq3ujVvqc9a4pINVQaUVkuw=)
                          2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
                          3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:37:99:75:2a:a5:72:82:d1:18:63:ff:27:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
        Validity
            Not Before: Dec  6 05:01:21 2025 GMT
            Not After : Dec  7 05:01:21 2025 GMT
        Subject: CN=418bcf597268b6eb9f6757c8501061439ffd722c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:16:94:7b:87:3d:fc:03:4b:60:e8:c5:3c:
                    6d:da:5e:d1:a2:10:cd:a4:50:39:ca:b8:a1:5e:03:
                    7f:3f:c9:0a:3e:81:87:45:57:f3:01:01:b8:fb:31:
                    d6:d3:55:e7:94:01:cc:18:b0:4a:06:ec:ea:bf:9c:
                    ec:14:71:95:32:25:8b:50:b4:1c:00:af:89:ea:1d:
                    68:83:a7:6c:82:c0:c0:e4:aa:4d:06:b3:03:6a:ee:
                    6d:3f:59:74:13:0a:0e:61:da:21:95:76:8b:76:84:
                    c7:46:fa:67:ab:82:21:09:ae:38:5e:b6:79:f1:e4:
                    39:b4:32:a3:57:a1:12:87:12:58:03:fe:af:12:0d:
                    b8:c2:c7:f0:97:0b:c9:eb:ca:68:1f:27:57:69:34:
                    e1:e5:0f:c9:95:0f:c0:9a:12:55:03:6e:6c:29:9a:
                    5d:b3:b5:0a:5c:e8:96:ae:b9:f8:06:bc:2f:7e:ac:
                    7a:79:e7:2d:7f:2f:f8:bf:41:74:33:54:f7:89:d0:
                    87:70:e5:05:76:f7:92:de:73:5b:a5:93:2e:c1:cf:
                    f1:ac:6a:b9:84:0d:a0:64:11:56:d0:3d:dc:ce:33:
                    0a:02:42:ae:13:d3:51:91:2a:ed:00:e5:b6:e4:76:
                    1d:2d:84:d3:9e:ed:90:84:5f:3a:ff:a3:d6:9e:47:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:CF:59:72:68:B6:EB:9F:67:57:C8:50:10:61:43:9F:FD:72:2C
            X509v3 Authority Key Identifier:
                keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:48:19:c9:19:cf:4b:0c:6c:bb:92:b5:df:5d:09:0d:f4:6e:
         5d:bd:db:63:58:90:a5:3c:8f:bb:82:4d:8e:d3:c7:60:ab:e8:
         d3:6c:21:45:a5:0e:c1:91:8b:6b:32:55:5a:2b:54:ef:96:2d:
         fe:7b:36:5d:a7:ae:d1:c0:ef:7a:1b:f7:ff:df:d7:66:73:0f:
         df:34:c7:ca:2d:b8:39:a9:01:c5:59:9d:ba:23:ba:48:fc:cf:
         de:74:30:f4:9c:ac:a2:a4:88:63:6b:5b:02:b3:f4:bb:aa:18:
         35:7e:86:20:1b:0b:92:5c:a1:39:d9:71:8b:c0:4f:c9:44:a6:
         74:72:a9:2c:4d:e6:fc:82:99:50:c9:ac:ca:90:2a:42:0d:5b:
         4d:0e:33:5b:91:89:5a:a2:d3:0b:e7:a2:a4:6e:d6:a8:10:50:
         0a:82:c4:7e:72:23:70:f6:de:f6:88:61:0c:c9:49:2f:23:f0:
         67:e4:40:3d:e7:14:d2:10:60:c0:04:46:cd:ac:f8:ff:9f:27:
         a5:b1:b3:68:75:9b:33:c6:73:53:aa:fc:80:02:ef:de:6c:c5:
         79:e5:51:0b:80:23:08:5d:d3:fe:b8:a0:95:82:e6:2c:fe:4f:
         47:8d:f0:ae:87:9c:b2:9e:24:4f:22:b1:e9:d0:91:2f:13:29:
         bc:2b:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:02:37 2025 by rpki-client