This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File:                     x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier:          2wnv431pP/cuDkNtj16kaszdm6d8lytcvMHVFS3RSuQ=
Subject key identifier:   6A:AE:95:E1:AC:2C:64:C1:59:A5:16:FD:E5:DC:AA:4B:94:18:16:6F
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer:       /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial:       019AF208E07AFA501DAEA0A5C70F4D0EB0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number:          1231
Signing time:             Sat 06 Dec 2025 05:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:59 +0000
Files and hashes:         1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
                          2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
                          3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: 42bd+P87/C9MxXnPVakrDC+y5bkZRiyvqMeaZp/x5cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:e0:7a:fa:50:1d:ae:a0:a5:c7:0f:4d:0e:b0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
        Validity
            Not Before: Dec  6 05:00:59 2025 GMT
            Not After : Dec  7 05:00:59 2025 GMT
        Subject: CN=6aae95e1ac2c64c159a516fde5dcaa4b9418166f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:97:3e:75:06:55:ea:4f:f6:cf:e7:8a:2d:
                    6e:ca:e9:88:f2:3c:47:32:4f:0b:d9:5a:75:a5:83:
                    da:7d:82:44:9f:e1:3c:7e:f5:f7:de:21:21:af:90:
                    8f:4c:a0:6f:f8:a6:97:be:37:7c:8f:85:b9:7e:31:
                    7a:b5:b4:fb:c6:1e:8f:d7:af:aa:75:a4:73:ea:62:
                    81:75:ad:7a:c5:3a:33:eb:4b:fc:58:de:c5:34:3d:
                    e0:e4:f6:33:0d:86:99:86:13:10:da:e8:a0:df:a1:
                    13:d2:ec:65:d1:24:83:24:69:65:ce:51:04:fa:3f:
                    9b:87:eb:ee:7e:73:70:df:50:d0:87:a0:c4:e8:42:
                    8a:81:c5:0f:e6:16:ad:fb:c1:9a:ef:97:ee:93:0c:
                    47:d0:c7:18:e0:1b:2d:d7:bc:61:02:a3:86:19:5e:
                    1d:cf:bd:b5:87:ea:e2:0a:4a:62:d9:62:f6:ac:9d:
                    e8:45:e0:12:e3:48:ec:10:20:bc:45:74:4f:af:0e:
                    bc:23:d5:50:e7:ef:7d:2f:80:d7:c0:59:23:ce:37:
                    50:91:b1:59:7b:1c:5a:f6:a8:1f:07:e1:ac:f1:33:
                    36:f9:13:0c:41:c1:22:e4:ae:9b:db:60:13:6e:a2:
                    d4:66:0e:3a:96:78:78:f4:59:5e:01:83:fe:5e:37:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:95:E1:AC:2C:64:C1:59:A5:16:FD:E5:DC:AA:4B:94:18:16:6F
            X509v3 Authority Key Identifier:
                keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:02:b9:d3:06:9b:4b:2b:f4:e1:cf:94:8d:74:c0:f5:9c:00:
         3b:ad:d2:33:5a:4e:a8:00:94:21:02:26:bf:9e:1c:38:12:5e:
         9e:a4:ee:1f:f4:b5:ad:d6:b0:47:f3:e4:7f:c7:e5:b3:ed:68:
         27:73:ab:57:36:c5:34:e3:6f:19:c9:75:54:9b:fc:70:eb:97:
         ce:91:f4:9e:ca:25:ab:d1:b8:6c:66:60:27:bc:76:dd:29:bd:
         74:7f:fa:d9:4e:ac:ba:f1:3a:3a:86:62:a0:b8:fb:3e:1b:c4:
         ea:ad:6f:98:da:02:11:db:2a:6c:43:bc:15:64:d4:42:1c:0f:
         3f:94:59:91:39:59:42:5c:39:f4:43:24:59:85:27:b9:ca:29:
         7c:fa:16:ea:9e:e5:e7:7c:c4:c5:fc:fd:34:9f:5e:df:20:8c:
         da:de:3d:81:49:57:15:58:f0:09:29:f5:c8:ad:c1:0f:c4:3c:
         d6:1b:b0:2c:ac:dc:e8:1a:bf:8d:1e:3e:ae:88:3b:6f:78:c1:
         09:b2:6c:67:88:2f:38:c4:67:a8:7b:e8:cf:1b:bf:ab:2d:8b:
         d1:e8:43:f0:31:e2:80:dc:4c:5e:36:aa:a3:60:c8:38:01:c2:
         78:d9:bd:30:b8:12:d2:2e:98:39:e0:3f:a4:e7:6d:0f:88:38:
         fe:bd:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:48 2025 by rpki-client