This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          54uuU4xolxkLpuzxJiNgssehpM1SbIytGWotP6tC5H8=
Subject key identifier:   BB:10:65:3C:1E:F6:F3:20:6B:12:8F:A9:C4:71:2D:62:13:BE:53:B4
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019AF31D51D38C483C5D835E9880125F06D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          1438
Signing time:             Sat 06 Dec 2025 10:02:56 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:56 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:56 +0000
Files and hashes:         1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
                          2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: /LG0iCosyw1plv8nH6nchZCaib265uxHlKPXnyT/9x0=)
                          3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
                          4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
                          5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
                          6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
                          7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
                          8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:51:d3:8c:48:3c:5d:83:5e:98:80:12:5f:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Dec  6 10:02:56 2025 GMT
            Not After : Dec  7 10:02:56 2025 GMT
        Subject: CN=bb10653c1ef6f3206b128fa9c4712d6213be53b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:b7:14:0d:41:c8:8e:8b:f3:68:c8:a7:a5:
                    64:ac:2d:6c:1f:c3:af:f2:a3:89:bd:1f:8e:07:39:
                    9b:53:b3:53:e2:9e:a4:01:3c:99:ee:30:f0:3e:4d:
                    fb:d5:7e:ee:01:59:d0:53:6d:9e:17:8d:ea:5d:f7:
                    83:c5:11:25:79:4f:fa:70:87:61:8a:02:db:fd:fa:
                    40:67:b1:27:29:ad:04:8a:91:a8:9a:d7:55:62:a0:
                    fc:4c:cc:e7:77:3c:23:19:ee:22:2a:a4:17:f9:f1:
                    78:09:b1:d4:ce:ce:4d:23:c6:ea:f8:0f:26:bc:f8:
                    3a:f0:23:55:ac:01:8a:55:6d:75:6f:94:e6:82:83:
                    46:7c:6d:61:db:16:58:14:b3:2a:a1:c5:26:ec:14:
                    f6:d3:9b:69:71:00:b2:9a:ac:d9:da:22:3b:32:8b:
                    fc:07:ab:a8:68:5a:2d:ce:2a:2c:ad:fb:86:5f:6b:
                    8f:a6:1d:38:2d:b3:0b:31:cb:f1:30:5c:0d:fb:2a:
                    3f:34:17:a4:11:4d:55:23:53:c4:cb:74:88:cb:a7:
                    10:17:1f:44:69:4d:f8:3b:b5:72:83:30:7e:ff:12:
                    40:ec:dd:1a:d3:c7:13:32:74:fb:91:92:58:63:2d:
                    36:ae:3a:f6:85:3b:f2:d3:f0:6d:79:b4:29:3b:16:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:65:3C:1E:F6:F3:20:6B:12:8F:A9:C4:71:2D:62:13:BE:53:B4
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:04:64:71:9a:43:3f:93:d1:1f:d8:59:f6:65:5d:dd:ee:
         01:83:b3:1a:f2:19:d5:d1:b5:b9:24:d1:3a:de:43:e7:60:c1:
         3a:23:dd:97:73:2a:4b:9d:9e:a7:3c:c4:31:51:ec:21:19:da:
         34:3e:24:54:c8:de:68:76:11:bc:01:16:99:ed:69:86:36:6d:
         f7:41:a4:98:f3:80:fd:43:13:9f:00:ff:1c:87:39:e6:db:3f:
         04:94:29:7a:e6:bd:81:50:35:ab:db:42:f7:55:07:97:66:c0:
         b9:90:2d:32:27:6b:a7:7e:f9:67:95:a9:33:e6:cf:2a:d9:2b:
         67:e3:84:79:9e:ef:68:47:ac:85:62:81:76:27:fc:e5:9d:8c:
         36:7c:40:5c:df:b4:00:98:f5:6c:b7:e7:90:d3:97:da:3b:f1:
         09:b9:22:4c:c5:f6:44:0b:de:72:81:85:6c:b8:57:29:8b:97:
         e4:15:4a:f9:6a:7c:a7:92:71:d0:56:fc:d1:90:2d:23:4c:6c:
         da:51:92:bd:45:99:99:e5:9b:5a:ee:5a:f3:72:91:2b:e1:30:
         a7:f7:41:36:c4:1c:02:cb:70:a1:2b:d5:5e:51:1d:42:81:5c:
         40:ce:6e:1f:57:05:a3:ef:d3:a6:9d:b6:00:57:09:f8:f0:de:
         d0:79:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:14 2025 by rpki-client