This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File:                     dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier:          CSqGBWYjL9rubWwh4LD+lyKXtmSk+GY8RWaW0qyOsWQ=
Subject key identifier:   EE:DD:C2:12:CA:B2:68:16:F9:CC:F4:04:0D:12:17:E0:3E:FC:C0:BF
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer:       /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial:       019AF2771D97F957AAECD00B6EC4097A9203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 07:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:23 +0000
Files and hashes:         1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: jwuHpdtFfOoAH2qXyujB04xXBNricTJ+Sh84hLtDrvc=)
                          2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
                          3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:1d:97:f9:57:aa:ec:d0:0b:6e:c4:09:7a:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
        Validity
            Not Before: Dec  6 07:01:23 2025 GMT
            Not After : Dec  7 07:01:23 2025 GMT
        Subject: CN=eeddc212cab26816f9ccf4040d1217e03efcc0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:81:bb:9e:13:5c:e7:c4:b0:c8:1f:a7:e4:
                    68:29:74:04:f7:0a:b1:fe:2c:07:a6:e9:03:93:1c:
                    4c:7a:29:04:57:3e:a4:8c:12:36:37:2b:01:dc:a8:
                    12:f8:25:c0:9e:e1:f7:d3:42:26:cb:fd:12:99:f2:
                    96:e4:f1:cc:71:48:7e:44:5c:39:45:50:e1:7a:cc:
                    6a:9b:6a:d8:70:a2:6d:b7:ef:03:cf:f1:6d:4d:f0:
                    ff:d3:00:36:f7:80:a9:00:48:4f:a8:13:a2:1b:39:
                    1f:65:30:26:10:35:bc:fd:43:cd:b6:c8:5d:8a:5b:
                    21:97:46:12:57:60:a6:e4:fa:f1:9a:ce:25:ff:1e:
                    c7:db:08:48:6b:e0:7f:e6:34:d1:32:90:fb:9c:c7:
                    92:87:b5:32:0e:bf:70:fb:c7:05:d4:bf:21:26:48:
                    6e:35:87:18:0b:1f:76:7d:8f:66:c5:75:47:d5:40:
                    e7:41:f4:96:db:94:39:2a:ed:c6:70:f4:4b:ab:9a:
                    30:f8:19:cc:b1:fb:48:18:78:78:7d:a5:b4:0c:88:
                    87:10:02:a1:38:b4:28:d0:b2:99:9d:82:4e:35:52:
                    4b:17:8d:51:cb:3f:51:10:1a:7f:0a:8f:16:95:42:
                    f2:e7:72:d4:40:80:cb:b8:c9:d0:31:30:48:7c:56:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:C2:12:CA:B2:68:16:F9:CC:F4:04:0D:12:17:E0:3E:FC:C0:BF
            X509v3 Authority Key Identifier:
                keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:18:88:aa:f9:40:65:69:12:01:81:0e:5f:70:47:34:86:
         51:58:87:6f:09:35:8d:26:52:43:c0:e5:d0:5e:c1:58:77:b3:
         ba:79:25:5f:2c:45:4b:5b:60:a3:69:dc:ad:b8:8e:0d:9c:be:
         5d:46:83:76:16:bd:db:6f:23:3f:fe:a9:00:11:60:c9:a3:01:
         8f:03:46:c6:6c:e7:b3:39:12:4a:f6:e9:fb:1c:7e:c7:55:34:
         1f:56:1a:b7:39:ea:b8:4c:10:91:71:74:c9:32:c3:e5:35:07:
         18:bb:3a:d2:22:4f:39:a3:37:c0:10:ec:9a:87:c1:75:3c:ef:
         e6:14:a2:56:63:67:5a:04:45:00:f7:d2:1e:40:33:96:ce:45:
         e5:7b:79:39:7a:fa:59:bd:82:a3:ad:37:0a:74:19:89:e9:34:
         46:64:52:6a:34:1f:dd:0d:77:64:79:42:d1:cd:14:75:cd:b3:
         37:30:9b:1f:d6:af:c2:a5:4a:ca:94:52:f2:7f:09:fc:bb:cd:
         48:1b:d8:a6:72:a5:09:14:cf:4e:e1:5c:ba:9a:27:db:a2:5a:
         40:aa:02:f4:0d:a2:44:c8:11:33:fe:11:55:19:18:52:dc:a3:
         2f:b2:f1:df:55:92:31:0f:56:dd:82:8a:92:35:c7:69:8b:09:
         7a:77:5a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydx2X+Veq7NALbsQJepIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDBkNTAxM2MxMjg1MjI0MjM0MzA5M2NiZjUxNDhkNGVh
ZWFhZjkwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD
EyhlZWRkYzIxMmNhYjI2ODE2ZjljY2Y0MDQwZDEyMTdlMDNlZmNjMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeeBu54TXOfEsMgfp+RoKXQE9wqx
/iwHpukDkxxMeikEVz6kjBI2NysB3KgS+CXAnuH300Imy/0SmfKW5PHMcUh+RFw5
RVDhesxqm2rYcKJtt+8Dz/FtTfD/0wA294CpAEhPqBOiGzkfZTAmEDW8/UPNtshd
ilshl0YSV2Cm5Prxms4l/x7H2whIa+B/5jTRMpD7nMeSh7UyDr9w+8cF1L8hJkhu
NYcYCx92fY9mxXVH1UDnQfSW25Q5Ku3GcPRLq5ow+BnMsftIGHh4faW0DIiHEAKh
OLQo0LKZnYJONVJLF41Ryz9REBp/Co8WlULy53LUQIDLuMnQMTBIfFZBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7dwhLKsmgW+cz0BA0SF+A+/MC/MB8GA1UdIwQY
MBaAFHQA1QE8EoUiQjQwk8v1FI1Orqr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAt
ZTA4OTJhMjhhYWM5LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAtZTA4OTJhMjhhYWM5
LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabwYiKr5
QGVpEgGBDl9wRzSGUViHbwk1jSZSQ8Dl0F7BWHezunklXyxFS1tgo2ncrbiODZy+
XUaDdha9228jP/6pABFgyaMBjwNGxmznszkSSvbp+xx+x1U0H1YatznquEwQkXF0
yTLD5TUHGLs60iJPOaM3wBDsmofBdTzv5hSiVmNnWgRFAPfSHkAzls5F5Xt5OXr6
Wb2Co603CnQZiek0RmRSajQf3Q13ZHlC0c0Udc2zNzCbH9avwqVKypRS8n8J/LvN
SBvYpnKlCRTPTuFcupon26JaQKoC9A2iRMgRM/4RVRkYUtyjL7Lx31WSMQ9W3YKK
kjXHaYsJendaRQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:14 2025 by rpki-client