This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File:                     AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier:          lZ9g8j40GpPUPgtAKBPXBuHTNygzslbNjUnFFT+EaMs=
Subject key identifier:   77:D3:56:84:3C:3B:AF:9F:FB:E6:2D:E4:CA:C2:85:E3:41:11:28:48
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer:       /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial:       019AF12CDA75EE1806EE432BBCE82C770AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number:          175B
Signing time:             Sat 06 Dec 2025 01:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:39 +0000
Files and hashes:         1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: UHtydarv83usXIGDH5ypQton8hQyITq+xsmGfvk+hyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:da:75:ee:18:06:ee:43:2b:bc:e8:2c:77:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
        Validity
            Not Before: Dec  6 01:00:39 2025 GMT
            Not After : Dec  7 01:00:39 2025 GMT
        Subject: CN=77d356843c3baf9ffbe62de4cac285e341112848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:92:2b:81:1a:dd:2f:75:9b:8c:7f:81:0d:
                    ed:0f:2f:58:5b:85:c6:27:8f:22:f9:36:92:cf:55:
                    3d:02:b0:6e:be:49:28:0a:c4:52:29:5b:4d:3c:3a:
                    2d:46:29:0d:74:8a:da:3d:7d:19:01:a3:98:70:1d:
                    1f:5c:9b:77:93:87:94:b9:03:34:b7:83:e5:96:22:
                    ad:e6:a1:78:ca:a6:95:06:09:cd:0b:26:6b:94:47:
                    15:60:88:82:71:50:0e:7b:0c:2a:bc:3f:ab:79:bd:
                    fb:b2:7e:42:5b:cd:8d:fa:e8:18:97:b5:b3:c4:57:
                    dc:72:d4:fd:2e:d4:0d:a1:9c:e7:0a:67:0b:e8:ac:
                    4b:f4:c8:2b:69:2e:94:36:38:d9:c0:84:f2:01:5a:
                    70:f6:67:6a:ea:b8:c5:56:b4:1f:c5:02:56:62:06:
                    b1:60:ee:d2:4d:d9:61:6c:94:ab:01:38:06:aa:27:
                    1a:e4:99:7d:ab:fc:bc:63:7d:26:b2:68:4c:84:51:
                    9c:75:37:73:97:db:b0:aa:7d:6e:f2:e7:52:d3:f0:
                    fe:13:b4:23:12:82:81:38:dc:9e:40:3e:63:ab:b3:
                    b0:1d:77:a4:f5:42:46:86:b3:53:82:a3:44:f1:c4:
                    38:53:63:9b:80:e5:ce:64:0e:cb:6b:d4:b2:0b:38:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:56:84:3C:3B:AF:9F:FB:E6:2D:E4:CA:C2:85:E3:41:11:28:48
            X509v3 Authority Key Identifier:
                keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:59:86:d6:0f:ba:60:22:92:d1:9e:58:40:61:35:e0:89:
         fa:10:8d:a8:5e:cb:a5:4e:b7:bf:f4:22:ec:df:0e:38:70:8c:
         c8:69:05:f9:7c:fc:d2:d5:f2:86:24:a1:90:f6:6f:6e:c4:9c:
         73:7b:bc:f2:cb:52:09:64:cf:78:78:e5:52:fd:0e:23:cf:9b:
         df:f9:21:06:54:2c:a7:0a:e1:30:76:31:a5:6d:45:9f:de:44:
         92:6a:dd:7b:c7:a2:2b:cd:f6:34:e2:da:62:ac:f7:46:37:44:
         8e:31:1a:0f:6b:91:9e:58:12:e1:8c:fe:98:f0:bf:2d:38:53:
         e1:d5:19:12:08:f1:e0:0b:1e:2d:1c:aa:7f:f7:84:eb:e7:7a:
         a7:4d:69:6b:33:e4:ed:62:84:d5:01:55:f8:58:53:2f:83:3e:
         a8:38:f7:9e:82:78:41:5e:7c:2f:12:11:6d:0c:10:c4:f2:3f:
         53:2c:a2:86:09:88:66:e8:99:e3:ad:88:db:63:03:ff:f4:54:
         f0:41:f9:c6:75:4f:e8:68:ff:ca:fd:0b:98:6f:e8:64:ce:0a:
         30:76:9b:7b:7c:9b:bc:ee:cb:f8:7a:63:2d:71:44:6c:da:35:
         9a:74:63:a4:bd:7c:3c:c4:37:54:26:ea:ef:2b:a3:1e:0a:68:
         45:8b:5c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLNp17hgG7kMrvOgsdwq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDIzMmNjNmZiMmJiZjc3ODZkOTJjNmM2YWViYWEwZWQ5
YTcxZTQwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD
Eyg3N2QzNTY4NDNjM2JhZjlmZmJlNjJkZTRjYWMyODVlMzQxMTEyODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54qSK4Ea3S91m4x/gQ3tDy9YW4XG
J48i+TaSz1U9ArBuvkkoCsRSKVtNPDotRikNdIraPX0ZAaOYcB0fXJt3k4eUuQM0
t4PlliKt5qF4yqaVBgnNCyZrlEcVYIiCcVAOewwqvD+reb37sn5CW82N+ugYl7Wz
xFfcctT9LtQNoZznCmcL6KxL9MgraS6UNjjZwITyAVpw9mdq6rjFVrQfxQJWYgax
YO7STdlhbJSrATgGqica5Jl9q/y8Y30msmhMhFGcdTdzl9uwqn1u8udS0/D+E7Qj
EoKBONyeQD5jq7OwHXek9UJGhrNTgqNE8cQ4U2ObgOXOZA7La9SyCzjSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfTVoQ8O6+f++Yt5MrCheNBEShIMB8GA1UdIwQY
MBaAFAHSMsxvsrv3eG2SxsauuqDtmnHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEt
ZDEwYTk3NzFkNzliLzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEtZDEwYTk3NzFkNzli
LzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKZZhtYP
umAiktGeWEBhNeCJ+hCNqF7LpU63v/Qi7N8OOHCMyGkF+Xz80tXyhiShkPZvbsSc
c3u88stSCWTPeHjlUv0OI8+b3/khBlQspwrhMHYxpW1Fn95Ekmrde8eiK832NOLa
Yqz3RjdEjjEaD2uRnlgS4Yz+mPC/LThT4dUZEgjx4AseLRyqf/eE6+d6p01pazPk
7WKE1QFV+FhTL4M+qDj3noJ4QV58LxIRbQwQxPI/UyyihgmIZuiZ462I22MD//RU
8EH5xnVP6Gj/yv0LmG/oZM4KMHabe3ybvO7L+HpjLXFEbNo1mnRjpL18PMQ3VCbq
7yujHgpoRYtcUg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:14 2025 by rpki-client