This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File:                     adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier:          dSwugtxwuzYa6HxY7+C65RwmugpeLrKD+qTkVw5vPEU=
Subject key identifier:   99:8D:49:46:B8:AD:65:55:74:08:68:35:E9:E8:CE:AD:B7:28:41:8C
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer:       /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial:       019AF31C1632D6C1F46072A7A4CAE1CFB0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number:          0764
Signing time:             Sat 06 Dec 2025 10:01:35 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:35 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:35 +0000
Files and hashes:         1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
                          2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
                          3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: fv37KKiVe0mcxuAWxppXYJ/Z5AHx8wXN+Bczjs2IAgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:16:32:d6:c1:f4:60:72:a7:a4:ca:e1:cf:b0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
        Validity
            Not Before: Dec  6 10:01:35 2025 GMT
            Not After : Dec  7 10:01:35 2025 GMT
        Subject: CN=998d4946b8ad655574086835e9e8ceadb728418c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:10:ff:3a:e5:52:1f:71:e7:b8:0e:d4:4d:
                    be:37:29:5d:c2:64:f1:b0:9f:55:ab:24:1d:1e:f9:
                    fd:09:b7:aa:e9:3a:ca:c1:5c:90:89:4a:94:ce:1e:
                    68:b9:b1:be:ae:7e:0e:33:0d:e8:f1:f7:e7:38:8f:
                    06:74:d7:9a:2c:e3:e7:3e:1c:01:87:64:fc:5a:03:
                    0a:69:4c:c4:2b:9e:c2:e1:c8:f9:45:f5:f0:ad:f9:
                    42:1d:df:68:04:28:a6:41:af:0f:ab:bf:20:aa:18:
                    b1:c0:ad:5a:73:15:61:fd:c4:d2:e8:97:2f:1e:7b:
                    9c:f7:97:ed:c7:06:82:e9:01:8d:6b:59:8f:fd:c6:
                    27:12:fc:19:83:c9:bc:1e:7d:ea:00:b9:9f:1f:4d:
                    b1:f6:c0:58:fa:3e:19:bc:53:85:e9:64:fc:33:ab:
                    cc:68:be:68:4b:77:01:79:b6:ed:60:8e:a2:3f:c0:
                    62:43:1a:91:2e:e3:26:07:3a:73:e6:bf:dd:3d:d2:
                    f0:e0:ec:d1:41:c4:34:85:7a:b2:30:1f:e0:7f:ca:
                    86:c5:56:1e:da:10:50:53:ad:10:2c:8f:0d:68:55:
                    59:2b:48:02:4e:84:7d:90:8f:b5:48:cd:8f:d1:62:
                    e4:74:af:db:b7:69:a4:2e:99:f0:f9:cb:ed:f9:d7:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8D:49:46:B8:AD:65:55:74:08:68:35:E9:E8:CE:AD:B7:28:41:8C
            X509v3 Authority Key Identifier:
                keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:47:6d:08:72:32:4c:16:d7:07:21:a5:18:ab:04:18:d7:
         b1:b9:c6:56:20:a4:e9:54:4a:49:29:ab:ac:db:39:02:8f:2a:
         c9:14:78:d8:23:b6:18:c6:51:d6:2d:4a:96:7f:34:19:fe:9d:
         46:ca:09:47:76:b3:b9:b9:28:47:49:63:bc:41:b9:fe:a7:c1:
         a6:d5:d5:2d:6d:0a:ec:75:81:7f:b2:c8:6f:51:e0:b4:38:21:
         05:3a:54:c0:56:c4:4c:04:a7:1f:fa:3e:22:14:3a:88:cb:3e:
         eb:40:2e:ee:57:eb:ba:67:8d:ec:54:26:b6:5a:d3:65:df:47:
         9e:3d:1c:d5:23:10:bb:f0:e4:9b:cd:53:bc:d1:68:87:ad:81:
         f2:ee:c7:31:b6:1a:50:26:57:0c:79:5d:9a:f7:dc:4d:3d:d8:
         29:50:fd:97:ca:b9:63:10:08:75:99:b4:b2:81:e1:4f:59:aa:
         38:1b:26:9e:94:79:3d:5f:fb:51:ae:0f:61:b0:56:d7:ba:be:
         90:41:f1:f6:28:8e:14:b0:44:ff:10:3a:0f:32:18:32:13:fb:
         ad:c0:cc:12:76:ad:1e:94:33:17:1c:a8:af:cf:76:2f:43:94:
         06:7d:b1:03:c3:b1:bf:27:33:9b:65:3a:42:42:22:47:1c:e1:
         a4:a1:f2:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHBYy1sH0YHKnpMrhz7CpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD
Eyg5OThkNDk0NmI4YWQ2NTU1NzQwODY4MzVlOWU4Y2VhZGI3Mjg0MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oQ/zrlUh9x57gO1E2+NyldwmTx
sJ9VqyQdHvn9Cbeq6TrKwVyQiUqUzh5oubG+rn4OMw3o8ffnOI8GdNeaLOPnPhwB
h2T8WgMKaUzEK57C4cj5RfXwrflCHd9oBCimQa8Pq78gqhixwK1acxVh/cTS6Jcv
Hnuc95ftxwaC6QGNa1mP/cYnEvwZg8m8Hn3qALmfH02x9sBY+j4ZvFOF6WT8M6vM
aL5oS3cBebbtYI6iP8BiQxqRLuMmBzpz5r/dPdLw4OzRQcQ0hXqyMB/gf8qGxVYe
2hBQU60QLI8NaFVZK0gCToR9kI+1SM2P0WLkdK/bt2mkLpnw+cvt+deLjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmNSUa4rWVVdAhoNenozq23KEGMMB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3FHbQhy
MkwW1wchpRirBBjXsbnGViCk6VRKSSmrrNs5Ao8qyRR42CO2GMZR1i1Kln80Gf6d
RsoJR3azubkoR0ljvEG5/qfBptXVLW0K7HWBf7LIb1HgtDghBTpUwFbETASnH/o+
IhQ6iMs+60Au7lfrumeN7FQmtlrTZd9Hnj0c1SMQu/Dkm81TvNFoh62B8u7HMbYa
UCZXDHldmvfcTT3YKVD9l8q5YxAIdZm0soHhT1mqOBsmnpR5PV/7Ua4PYbBW17q+
kEHx9iiOFLBE/xA6DzIYMhP7rcDMEnatHpQzFxyor892L0OUBn2xA8Oxvyczm2U6
QkIiRxzhpKHyIw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:50 2025 by rpki-client