This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File:                     n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier:          M/LOdVJ5m9qgN8+ybBXiQSQRMkrAbsMPSbtauxXpBuc=
Subject key identifier:   A3:AD:37:B3:CC:A9:99:17:1B:8C:5A:90:88:A6:AD:7B:B3:E3:9A:F2
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer:       /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial:       019AF12E397FAD776BE3406A7DAE126503E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number:          0C62
Signing time:             Sat 06 Dec 2025 01:02:09 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:09 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:09 +0000
Files and hashes:         1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
                          2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: hPkJXlpOJLQVZBUnNpTduyxVWg1CFt+ww6hFnkiaqBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:39:7f:ad:77:6b:e3:40:6a:7d:ae:12:65:03:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
        Validity
            Not Before: Dec  6 01:02:09 2025 GMT
            Not After : Dec  7 01:02:09 2025 GMT
        Subject: CN=a3ad37b3cca999171b8c5a9088a6ad7bb3e39af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:e5:eb:1e:12:ca:8d:53:05:db:99:07:d4:
                    4a:a1:96:63:52:bd:dc:8b:22:cf:17:4d:1c:8c:80:
                    38:7b:85:33:d2:97:0e:5a:a6:52:14:8c:ed:62:64:
                    55:86:8e:69:cb:60:52:17:a3:ae:6f:f4:a7:eb:c1:
                    5a:a7:12:50:31:6c:f6:da:7a:0d:f7:37:8d:06:e0:
                    af:0b:db:04:9f:ae:6f:48:7c:e1:88:61:f4:27:98:
                    91:be:f7:66:2c:b1:62:74:d3:97:b7:5a:b0:76:3e:
                    d7:81:30:e9:60:90:39:22:17:ea:cd:0d:36:ea:8c:
                    ae:ec:02:ad:dd:8b:c0:0c:68:57:65:0d:07:82:fb:
                    fe:a8:42:13:65:b7:af:ce:ca:7a:12:ca:0d:01:a0:
                    73:8b:bb:20:d0:9a:ba:97:b0:4e:4e:ca:1d:b3:29:
                    22:17:05:30:57:35:6e:c7:20:fe:53:e8:81:bb:2e:
                    df:42:bc:c9:8d:6e:00:5e:04:a4:e9:1f:dc:58:77:
                    c4:6a:fd:39:45:e5:04:3d:58:f9:08:9d:ef:f8:e8:
                    6e:c5:ff:f3:41:19:23:94:5a:5b:de:61:16:84:62:
                    ae:0b:97:d4:b3:aa:ce:e6:21:c0:00:00:fb:7a:53:
                    03:c0:81:e2:53:b5:ac:53:78:77:12:be:8c:4d:ab:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:37:B3:CC:A9:99:17:1B:8C:5A:90:88:A6:AD:7B:B3:E3:9A:F2
            X509v3 Authority Key Identifier:
                keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:74:71:00:1c:14:6d:27:43:28:38:4e:69:e7:6e:a1:8d:
         a0:a4:d8:dc:50:66:05:69:c8:a3:b6:47:94:22:d0:69:c3:9f:
         a0:aa:c6:8e:b7:ef:32:8e:a6:53:db:a1:c8:f9:8b:8b:60:e8:
         1d:3f:ba:12:65:4a:2a:ba:21:4c:f8:80:00:f7:1a:89:16:f4:
         d8:ae:2d:70:cb:2b:21:bb:dd:48:4a:fa:cb:54:94:8c:f1:53:
         52:33:c6:7d:79:04:61:00:30:8e:9d:3a:86:da:49:6c:af:4b:
         f6:0d:fe:c1:12:c2:98:95:ec:79:7b:6d:40:f9:ac:ef:e9:53:
         96:d9:62:0e:e7:8e:18:7a:b5:66:0c:ad:1d:6f:52:c9:a0:95:
         11:b8:da:3c:4a:80:13:1b:09:ad:5a:24:f7:49:48:c6:0f:06:
         8a:2e:71:df:e5:89:e7:68:2c:f8:a2:60:ec:9d:7f:50:8d:d9:
         13:bc:4d:cb:25:39:31:6d:e1:6c:c1:d7:46:65:83:7d:e5:ea:
         5e:06:14:97:00:76:5b:a1:ec:bd:7c:6c:76:84:ff:db:6f:b3:
         40:6d:49:53:6a:bd:a7:26:a2:25:74:a2:50:07:a5:e8:a8:9b:
         87:48:dc:8e:f9:96:d4:75:c6:b8:7f:31:30:98:1f:a2:58:b4:
         24:a5:b1:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLjl/rXdr40Bqfa4SZQPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmY2MyZjNlZTZiNWMzZmY2ZGM1MzQ2YTc1MzU1MDZmYTgy
NDEyM2UwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD
EyhhM2FkMzdiM2NjYTk5OTE3MWI4YzVhOTA4OGE2YWQ3YmIzZTM5YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYnl6x4Syo1TBduZB9RKoZZjUr3c
iyLPF00cjIA4e4Uz0pcOWqZSFIztYmRVho5py2BSF6Oub/Sn68FapxJQMWz22noN
9zeNBuCvC9sEn65vSHzhiGH0J5iRvvdmLLFidNOXt1qwdj7XgTDpYJA5IhfqzQ02
6oyu7AKt3YvADGhXZQ0Hgvv+qEITZbevzsp6EsoNAaBzi7sg0Jq6l7BOTsodsyki
FwUwVzVuxyD+U+iBuy7fQrzJjW4AXgSk6R/cWHfEav05ReUEPVj5CJ3v+Ohuxf/z
QRkjlFpb3mEWhGKuC5fUs6rO5iHAAAD7elMDwIHiU7WsU3h3Er6MTavUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOtN7PMqZkXG4xakIimrXuz45ryMB8GA1UdIwQY
MBaAFJ/MLz7mtcP/bcU0anU1UG+oJBI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUt
OGJmMDRhZjRiMmI0LzEvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83Zjg0MGQtM2JkNC00ZmFkLTlhMTUtOGJmMDRhZjRiMmI0
LzEvbjh3dlB1YTF3Xzl0eFRScWRUVlFiNmdrRWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO50cQAc
FG0nQyg4TmnnbqGNoKTY3FBmBWnIo7ZHlCLQacOfoKrGjrfvMo6mU9uhyPmLi2Do
HT+6EmVKKrohTPiAAPcaiRb02K4tcMsrIbvdSEr6y1SUjPFTUjPGfXkEYQAwjp06
htpJbK9L9g3+wRLCmJXseXttQPms7+lTltliDueOGHq1ZgytHW9SyaCVEbjaPEqA
ExsJrVok90lIxg8Gii5x3+WJ52gs+KJg7J1/UI3ZE7xNyyU5MW3hbMHXRmWDfeXq
XgYUlwB2W6HsvXxsdoT/22+zQG1JU2q9pyaiJXSiUAel6Kibh0jcjvmW1HXGuH8x
MJgfoli0JKWxKg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:24:28 2025 by rpki-client