This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File:                     1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier:          MqDeiRkmWaZe7Upqlq3LIfybVF39EIgleXIJwVllE9A=
Subject key identifier:   85:13:92:27:9D:1D:4E:B2:1B:6E:C6:01:16:65:CC:A4:5F:62:B2:7A
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer:       /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial:       019B28527EEE3F0B605B0FFE30856D32E437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number:          075E
Signing time:             Tue 16 Dec 2025 18:00:53 +0000
Manifest this update:     Tue 16 Dec 2025 18:00:53 +0000
Manifest next update:     Wed 17 Dec 2025 18:00:53 +0000
Files and hashes:         1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 1YPD9IntM6ihrpbDObCsxV7gTgfE4iYafybARurSy9U=)
                          2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
                          3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:52:7e:ee:3f:0b:60:5b:0f:fe:30:85:6d:32:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
        Validity
            Not Before: Dec 16 18:00:53 2025 GMT
            Not After : Dec 17 18:00:53 2025 GMT
        Subject: CN=851392279d1d4eb21b6ec6011665cca45f62b27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:50:6c:4b:b0:64:53:e3:4f:15:89:a7:6f:
                    7e:3c:6e:f7:c5:87:8d:36:3b:7e:4a:3c:39:d1:9b:
                    da:20:a4:de:b4:38:f0:3b:66:3e:6b:39:25:9a:d8:
                    d3:3e:ff:23:30:ce:29:9a:d8:5a:11:53:7e:4b:d0:
                    7f:27:bf:b9:a4:2f:8c:04:b6:b8:93:28:22:d9:1c:
                    d2:43:1a:fb:bb:6f:05:65:00:33:d7:c1:64:61:6e:
                    ed:eb:ee:40:da:b1:d5:36:15:73:a8:5d:97:e9:44:
                    de:96:63:9e:7c:f2:b7:00:3b:68:76:d6:4d:f4:e5:
                    16:00:4d:35:68:6c:e7:85:a4:a1:d7:23:df:a5:e3:
                    92:9f:d6:39:8f:15:0b:d4:63:5e:22:05:d5:71:69:
                    e9:63:4f:4f:3a:21:3d:be:b0:75:34:29:2c:d3:0b:
                    60:4d:80:f1:89:e0:e8:52:66:4f:36:f0:b8:95:d2:
                    c4:4d:c6:e0:1a:88:eb:cd:1b:82:1f:0d:99:e8:39:
                    2b:61:4b:b9:f4:69:d4:17:7a:92:9f:86:e3:85:60:
                    6b:db:90:57:88:00:29:54:1c:17:47:fb:ad:73:ad:
                    1a:5b:d0:e7:f7:04:49:92:50:07:35:b0:61:c1:65:
                    97:ce:57:be:17:72:ee:b0:5a:d6:0f:d5:33:e7:fb:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:92:27:9D:1D:4E:B2:1B:6E:C6:01:16:65:CC:A4:5F:62:B2:7A
            X509v3 Authority Key Identifier:
                keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:1a:8e:78:59:03:1b:f5:ac:dc:bb:e0:59:e6:37:c6:73:
         f9:a6:d8:66:c9:60:6a:ce:43:66:32:bc:9f:87:7e:c6:7c:0e:
         a9:1e:e6:19:09:63:4a:71:44:3e:d1:c7:28:cf:cb:73:fd:a2:
         bd:a2:76:80:31:fe:0a:e8:e5:d0:9f:38:6a:a0:a8:9d:5f:2f:
         5b:89:3c:74:ab:27:97:1b:d1:69:be:a5:66:55:2b:a1:63:6a:
         de:87:cc:ae:5f:cc:67:c2:46:c6:80:24:a6:63:6f:4c:a0:88:
         20:7b:5e:15:dc:5d:bf:ec:91:19:fd:77:c8:6a:4c:72:21:9d:
         ee:53:0e:51:10:ce:9c:bf:f7:4a:bd:f1:b1:68:be:2d:7f:48:
         fb:2f:d7:f5:1b:a4:23:f5:95:95:8f:65:d7:f6:ac:18:38:e6:
         d5:42:1c:3b:0c:f4:36:2d:f9:d4:62:9f:ce:7a:f3:73:41:f0:
         e0:d8:a3:75:4f:6d:2e:1a:a1:41:9f:a0:9f:e5:63:bb:08:d6:
         be:db:41:ac:01:b7:6d:c7:8b:de:72:c6:14:c6:68:32:2a:f9:
         d2:c5:39:79:fc:67:75:9c:1f:83:61:75:58:42:f3:7b:18:c3:
         97:39:2d:ba:d7:9f:7a:ec:22:4a:ba:46:9e:67:35:4b:3e:52:
         6b:35:d6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsoUn7uPwtgWw/+MIVtMuQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3
Yzc4MzMwHhcNMjUxMjE2MTgwMDUzWhcNMjUxMjE3MTgwMDUzWjAzMTEwLwYDVQQD
Eyg4NTEzOTIyNzlkMWQ0ZWIyMWI2ZWM2MDExNjY1Y2NhNDVmNjJiMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxlQbEuwZFPjTxWJp29+PG73xYeN
Njt+Sjw50ZvaIKTetDjwO2Y+azklmtjTPv8jMM4pmthaEVN+S9B/J7+5pC+MBLa4
kygi2RzSQxr7u28FZQAz18FkYW7t6+5A2rHVNhVzqF2X6UTelmOefPK3ADtodtZN
9OUWAE01aGznhaSh1yPfpeOSn9Y5jxUL1GNeIgXVcWnpY09POiE9vrB1NCks0wtg
TYDxieDoUmZPNvC4ldLETcbgGojrzRuCHw2Z6DkrYUu59GnUF3qSn4bjhWBr25BX
iAApVBwXR/utc60aW9Dn9wRJklAHNbBhwWWXzle+F3LusFrWD9Uz5/vmBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUTkiedHU6yG27GARZlzKRfYrJ6MB8GA1UdIwQY
MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt
MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj
LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm4ajnhZ
Axv1rNy74FnmN8Zz+abYZslgas5DZjK8n4d+xnwOqR7mGQljSnFEPtHHKM/Lc/2i
vaJ2gDH+Cujl0J84aqConV8vW4k8dKsnlxvRab6lZlUroWNq3ofMrl/MZ8JGxoAk
pmNvTKCIIHteFdxdv+yRGf13yGpMciGd7lMOURDOnL/3Sr3xsWi+LX9I+y/X9Ruk
I/WVlY9l1/asGDjm1UIcOwz0Ni351GKfznrzc0Hw4NijdU9tLhqhQZ+gn+VjuwjW
vttBrAG3bceL3nLGFMZoMir50sU5efxndZwfg2F1WELzexjDlzktutefeuwiSrpG
nmc1Sz5SazXWyw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 21:05:54 2025 by rpki-client