This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File:                     1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier:          cxrNbuPgq4ZC/VyTr92/IJ2+j8ra5OwlA0WZ+lgm+nw=
Subject key identifier:   15:A6:38:7C:B8:F5:2A:42:27:68:FE:58:3C:28:4B:A0:47:C9:A8:F3
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer:       /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial:       019AF12E94FF9D3A7EEA5E09D9CD0D8A0850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 01:02:33 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:33 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:33 +0000
Files and hashes:         1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: AIFe3ncE489a5dPqHgBAJFQzkJHAoLzsNDnE6eX3sto=)
                          2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
                          3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:94:ff:9d:3a:7e:ea:5e:09:d9:cd:0d:8a:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
        Validity
            Not Before: Dec  6 01:02:33 2025 GMT
            Not After : Dec  7 01:02:33 2025 GMT
        Subject: CN=15a6387cb8f52a422768fe583c284ba047c9a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:b5:5b:ae:d3:b4:94:62:2c:cd:51:89:4f:
                    1a:cc:bd:87:a3:87:59:ba:50:33:3c:77:a0:4d:87:
                    cf:6c:66:04:cf:c1:da:2d:4e:6e:3b:fd:55:a0:94:
                    47:1c:84:32:9c:72:f2:c0:4f:5c:83:02:44:60:46:
                    f8:ca:d4:f5:15:d4:ca:35:53:1d:f6:5f:8f:5f:73:
                    69:ec:7a:b1:f7:2d:2f:fc:9d:31:60:11:42:69:ae:
                    37:e9:28:c4:f2:f5:e6:27:58:ca:01:10:dd:1c:69:
                    79:b7:87:21:24:fa:91:2e:a9:4a:43:7b:08:91:92:
                    c3:42:07:8b:d6:27:7c:79:82:36:04:9d:ab:5a:3c:
                    08:18:7f:03:49:46:79:8e:58:1e:46:60:05:2d:3e:
                    35:6b:45:cb:84:d3:3f:ef:8d:bb:36:01:fe:b3:a5:
                    91:a3:ed:e5:3f:de:b2:f2:ad:eb:a3:d6:cb:3c:65:
                    04:d3:f6:8a:cc:07:25:c8:59:84:34:65:3b:5e:b4:
                    e3:02:c7:a4:27:e0:51:57:8c:61:bd:61:fb:16:bd:
                    95:39:dd:57:a2:1f:2a:a8:4e:39:f1:eb:87:fd:8f:
                    57:85:4c:5e:5f:57:40:ec:a6:76:fc:b2:62:17:97:
                    3d:6c:7c:c4:97:ab:6a:fd:a2:b4:c0:e7:6f:18:f9:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:38:7C:B8:F5:2A:42:27:68:FE:58:3C:28:4B:A0:47:C9:A8:F3
            X509v3 Authority Key Identifier:
                keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:61:96:01:3d:8a:0c:8c:12:7c:04:3d:74:61:8d:d3:54:c4:
         8a:9d:59:08:de:a5:e5:a9:2e:a5:27:f4:7c:fc:09:9e:a7:03:
         3a:28:4f:3e:61:a4:24:5b:52:ae:26:a4:34:98:b6:99:27:4a:
         29:1b:78:52:b5:a1:83:e9:34:ed:07:6f:b0:c3:02:1f:54:54:
         af:b7:ce:01:5b:e5:5c:02:f9:71:ff:84:65:a2:b0:7d:e0:88:
         97:92:0e:9a:4b:9f:06:97:13:db:ab:a0:e7:80:56:12:ff:4e:
         25:d5:f2:7c:5f:a7:e5:55:f5:1e:6c:8a:d1:76:ee:c5:55:a0:
         8d:fd:4f:98:2d:6d:e5:6f:7c:a6:ce:75:f5:04:f4:9d:c4:c9:
         c5:97:57:74:33:92:f9:5a:4e:4f:a7:92:52:ee:3e:a3:a0:cf:
         37:00:10:df:e3:ac:39:56:a8:7b:09:3b:8e:06:b0:75:d8:b7:
         30:cf:29:38:41:36:37:06:b7:f1:48:fa:1f:be:6c:c4:a6:84:
         82:13:e8:63:45:3a:3f:ac:6c:f4:ef:6f:18:6c:16:2e:de:b4:
         41:b2:72:cb:b4:fa:b0:72:4d:12:5c:c6:f1:8e:c9:3c:f9:11:
         a3:df:9c:75:b5:e6:1f:4e:bf:28:58:d6:76:db:08:d1:ae:fd:
         0a:c7:47:9a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZrxLpT/nTp+6l4J2c0NighQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw
NjM1NzAwHhcNMjUxMjA2MDEwMjMzWhcNMjUxMjA3MDEwMjMzWjAzMTEwLwYDVQQD
EygxNWE2Mzg3Y2I4ZjUyYTQyMjc2OGZlNTgzYzI4NGJhMDQ3YzlhOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTm1W67TtJRiLM1RiU8azL2Ho4dZ
ulAzPHegTYfPbGYEz8HaLU5uO/1VoJRHHIQynHLywE9cgwJEYEb4ytT1FdTKNVMd
9l+PX3Np7Hqx9y0v/J0xYBFCaa436SjE8vXmJ1jKARDdHGl5t4chJPqRLqlKQ3sI
kZLDQgeL1id8eYI2BJ2rWjwIGH8DSUZ5jlgeRmAFLT41a0XLhNM/7427NgH+s6WR
o+3lP96y8q3ro9bLPGUE0/aKzAclyFmENGU7XrTjAsekJ+BRV4xhvWH7Fr2VOd1X
oh8qqE458euH/Y9XhUxeX1dA7KZ2/LJiF5c9bHzEl6tq/aK0wOdvGPmYlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBWmOHy49SpCJ2j+WDwoS6BHyajzMB8GA1UdIwQY
MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5
LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4
YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmGW
AT2KDIwSfAQ9dGGN01TEip1ZCN6l5akupSf0fPwJnqcDOihPPmGkJFtSriakNJi2
mSdKKRt4UrWhg+k07QdvsMMCH1RUr7fOAVvlXAL5cf+EZaKwfeCIl5IOmkufBpcT
26ug54BWEv9OJdXyfF+n5VX1HmyK0XbuxVWgjf1PmC1t5W98ps519QT0ncTJxZdX
dDOS+VpOT6eSUu4+o6DPNwAQ3+OsOVaoewk7jgawddi3MM8pOEE2Nwa38Uj6H75s
xKaEghPoY0U6P6xs9O9vGGwWLt60QbJyy7T6sHJNElzG8Y7JPPkRo9+cdbXmH06/
KFjWdtsI0a79CsdHmg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:20:33 2025 by rpki-client