This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File:                     AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier:          ePDKMbL6hJjlILvq+rqn+gOLd+GobiJVvlKlrP7Cor0=
Subject key identifier:   13:16:7D:DC:20:5B:8F:08:50:ED:AE:27:7A:8C:93:77:BC:B9:C5:93
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer:       /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial:       019AF31B1CAD330E4B8B5D76DA1BB6F46773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 10:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:31 +0000
Files and hashes:         1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
                          2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: lorjWEXJeSzJ0ed80L2RzaFPcRqh5OsytJgd291sBpk=)
                          3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:1c:ad:33:0e:4b:8b:5d:76:da:1b:b6:f4:67:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
        Validity
            Not Before: Dec  6 10:00:31 2025 GMT
            Not After : Dec  7 10:00:31 2025 GMT
        Subject: CN=13167ddc205b8f0850edae277a8c9377bcb9c593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:54:5c:50:9f:93:37:e8:da:6b:c6:c0:88:
                    a5:9e:b9:32:04:95:19:68:c7:29:24:a5:3b:7f:2a:
                    ae:c6:b1:0c:10:a5:67:5b:00:75:35:c2:f9:ae:41:
                    a6:53:ca:65:16:fd:aa:f1:3e:78:77:af:23:41:36:
                    06:ae:56:8b:43:5a:d8:71:26:e2:ba:59:ab:d5:43:
                    ef:2c:9c:15:4b:a6:20:25:e2:94:a5:e4:7e:24:bf:
                    0c:37:49:6b:9b:61:40:f2:d8:2e:2f:d5:e6:cc:8e:
                    66:c6:e7:c9:c1:16:84:56:da:8b:e1:7f:27:d3:df:
                    26:75:26:4a:9f:d7:3c:ef:27:53:ad:52:e8:d7:66:
                    9a:06:63:35:ba:2e:b6:b4:73:d1:5b:04:f6:73:4d:
                    0a:6c:62:7f:ec:8e:59:2b:0a:5d:f5:66:d2:15:e4:
                    8f:36:d7:f2:1c:59:d1:5e:ba:9c:4f:1c:5a:30:4d:
                    b7:97:00:51:54:f1:8c:e4:a0:c7:1a:66:cd:e5:e3:
                    08:17:65:3e:3e:67:7d:18:fa:b6:f3:bc:d0:a5:26:
                    3a:f7:27:83:d7:3b:e9:f7:49:57:29:6a:23:cd:09:
                    e2:26:78:94:92:25:84:41:14:8e:a3:e0:8f:b5:e7:
                    1b:04:54:93:f5:0d:cd:0b:9f:39:56:34:c6:6a:73:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:7D:DC:20:5B:8F:08:50:ED:AE:27:7A:8C:93:77:BC:B9:C5:93
            X509v3 Authority Key Identifier:
                keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:df:f9:bf:ea:42:2c:7a:e5:6a:6e:c6:c2:4e:ae:a2:28:
         24:9f:20:94:41:90:67:dd:dd:96:4c:44:83:61:e8:a5:85:e3:
         f0:37:de:9c:48:99:5c:db:8a:84:37:ed:b1:b0:a9:3e:6d:37:
         6a:79:f7:95:07:ea:c9:1e:0a:1b:b3:4e:6b:bd:0a:fd:4f:f8:
         2b:e7:e0:ec:b2:af:29:32:42:6b:0f:09:9d:66:a7:3f:d8:2f:
         f7:9b:e1:81:50:81:30:71:e0:67:21:1b:df:93:83:64:32:a5:
         62:e4:16:de:d6:2c:ee:88:8e:4d:c8:e2:66:af:79:00:64:4e:
         68:bb:e6:b0:3a:b8:5c:b7:50:6e:43:50:cb:2e:34:df:17:09:
         6b:cd:5e:17:4b:d9:42:e1:81:22:7c:3f:81:49:6c:80:ab:6c:
         dc:a1:c2:9b:b5:fc:a8:8c:6b:d1:27:26:3b:3a:be:f1:db:6a:
         e1:ad:ff:50:fb:de:5a:fd:f6:1d:89:72:06:b6:af:b8:17:db:
         1d:52:1b:83:53:59:7a:ba:38:fe:67:73:4c:45:cb:08:83:6a:
         3b:fe:b5:11:58:74:5e:cb:df:e3:c2:22:ca:bb:a1:ad:38:c6:
         95:1f:b3:ad:78:f6:42:de:02:d6:ed:19:e9:ee:81:fb:c6:17:
         8c:b1:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:59:57 2025 by rpki-client