This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          1o7ronBqDeekS78UO9JsJZoyHtR5Atk+9IAlQ9bdmCY=
Subject key identifier:   D4:E5:9F:BE:FE:7C:7B:62:8C:E7:57:98:28:34:E9:9B:06:B1:55:45
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019AF31CE2A39850B170FD1F8D13B6945CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          1788
Signing time:             Sat 06 Dec 2025 10:02:27 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:27 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:27 +0000
Files and hashes:         1: 0tzBINqIR5UARhUC_SN4dqUsHbs.roa (hash: dkpQVlm2NilQ3sBxk5jABsHQoOKhZ/gA5zaornlR6rQ=)
                          2: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=)
                          3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=)
                          4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=)
                          5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=)
                          6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=)
                          7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=)
                          8: IXEJL_tdGYePOrA4C939NMYD3Cg.roa (hash: 6He4XuRiwlVVjToNZDkpS77/r8Qyg9qEq2S01FY4ymI=)
                          9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=)
                          10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: pLFQBs/LiWP2BFwBei2/+BKEKMW7RGLlE7QCoydLqcw=)
                          11: NRsmmESxlwOZ9E_FA7G05km4PzY.roa (hash: gj7FhRBAZvoKHYNfOr+mSSSV4JbsWKf5GeUgXwnq8h4=)
                          12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=)
                          13: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=)
                          14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=)
                          15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=)
                          16: hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa (hash: zejLevyjCi1eBLeaN7L1PcRyE8TcqoV2q3GNhHozY7Q=)
                          17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=)
                          18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=)
                          19: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=)
                          20: p_T_usfdv8xlZZdYjAIfsVouVbk.roa (hash: 6jbjq1+jiWQ0ooeWaGdPlb/s9JUI9tUJMn1ZAmNsUm8=)
                          21: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:e2:a3:98:50:b1:70:fd:1f:8d:13:b6:94:5c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Dec  6 10:02:27 2025 GMT
            Not After : Dec  7 10:02:27 2025 GMT
        Subject: CN=d4e59fbefe7c7b628ce757982834e99b06b15545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:13:59:cf:31:6e:8b:b3:4d:08:8c:ef:e9:
                    74:50:e1:fb:e0:14:83:f2:26:94:37:c4:27:74:98:
                    cb:1c:d2:9e:ee:5e:b4:0a:0e:18:af:7c:2a:43:be:
                    b7:26:f7:3a:90:93:f9:33:5e:ec:f6:f6:1b:2b:0e:
                    80:a0:f8:ea:20:45:c4:9e:7b:a1:53:89:18:c3:65:
                    95:e8:a4:80:fc:4d:3a:02:bd:0a:ee:6c:7c:32:65:
                    d2:5b:d1:37:af:86:28:69:aa:32:9e:7e:c9:2f:aa:
                    4a:0c:89:21:92:61:8b:bd:b4:3a:42:54:08:6f:70:
                    1e:36:51:03:b6:00:16:f6:a0:50:83:9c:9c:08:52:
                    70:d9:9b:91:e4:37:cf:0c:47:98:a5:4d:4e:33:a3:
                    4a:5c:f9:9f:ce:32:35:1e:30:9d:62:b6:c7:73:d0:
                    8f:b6:0f:be:90:38:02:8e:89:83:04:1d:b5:a2:70:
                    82:f5:05:b6:18:4d:e1:a9:d1:96:3a:b4:42:72:94:
                    c9:32:a4:3d:46:56:97:38:6d:b6:6b:c3:f3:e2:00:
                    96:fb:52:d6:c8:2e:f4:ac:e1:af:bc:b5:fb:d7:2f:
                    84:61:84:17:4e:b5:6c:80:f1:3e:59:bf:15:97:c4:
                    25:01:2a:4a:f9:22:db:20:58:d5:9c:58:6b:ec:bb:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:9F:BE:FE:7C:7B:62:8C:E7:57:98:28:34:E9:9B:06:B1:55:45
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:0b:9d:a6:6d:9d:6e:e1:2e:82:7d:8f:19:69:76:7c:ce:
         f9:c0:da:df:c5:1b:ef:dc:55:37:d9:ac:3a:ef:05:a7:bf:5d:
         0c:0f:d6:f5:d2:13:60:a3:bd:e9:4c:00:79:f1:45:e4:7b:c2:
         ee:54:df:41:b4:4e:fe:6c:b7:eb:6f:55:19:4a:2d:7d:2b:36:
         f0:32:f8:fa:04:7a:53:fa:ff:c7:f8:42:ff:91:93:e9:90:53:
         00:5e:9a:35:3d:f5:51:41:c7:ec:40:c8:2b:ce:9c:ad:ca:b8:
         23:c3:8e:b8:b2:08:4d:68:d7:0f:1f:69:77:62:67:03:78:1c:
         27:19:16:1e:f8:47:c3:7f:39:14:77:a1:ad:ed:b5:16:d7:eb:
         77:7b:5e:2e:02:4a:65:fb:23:c1:59:a2:62:f8:55:21:4f:dc:
         7c:50:2e:27:76:63:ca:5b:ea:fd:c4:35:e8:6c:75:94:01:ad:
         37:91:09:e7:3e:f0:34:b2:5c:72:83:db:49:4e:ee:d6:be:a3:
         8e:00:af:89:61:5c:84:77:51:a4:0b:a8:8c:05:3b:f7:64:a5:
         cf:c6:50:80:25:3f:49:85:16:36:b2:88:a9:b2:40:78:28:4b:
         e7:37:24:5f:65:49:ad:0e:20:96:1b:70:af:88:36:4e:95:ca:
         0f:bb:c1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHOKjmFCxcP0fjRO2lFywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD
EyhkNGU1OWZiZWZlN2M3YjYyOGNlNzU3OTgyODM0ZTk5YjA2YjE1NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24cTWc8xbouzTQiM7+l0UOH74BSD
8iaUN8QndJjLHNKe7l60Cg4Yr3wqQ763Jvc6kJP5M17s9vYbKw6AoPjqIEXEnnuh
U4kYw2WV6KSA/E06Ar0K7mx8MmXSW9E3r4Yoaaoynn7JL6pKDIkhkmGLvbQ6QlQI
b3AeNlEDtgAW9qBQg5ycCFJw2ZuR5DfPDEeYpU1OM6NKXPmfzjI1HjCdYrbHc9CP
tg++kDgCjomDBB21onCC9QW2GE3hqdGWOrRCcpTJMqQ9RlaXOG22a8Pz4gCW+1LW
yC70rOGvvLX71y+EYYQXTrVsgPE+Wb8Vl8QlASpK+SLbIFjVnFhr7LtSwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTln77+fHtijOdXmCg06ZsGsVVFMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5wLnaZt
nW7hLoJ9jxlpdnzO+cDa38Ub79xVN9msOu8Fp79dDA/W9dITYKO96UwAefFF5HvC
7lTfQbRO/my3629VGUotfSs28DL4+gR6U/r/x/hC/5GT6ZBTAF6aNT31UUHH7EDI
K86crcq4I8OOuLIITWjXDx9pd2JnA3gcJxkWHvhHw385FHehre21Ftfrd3teLgJK
ZfsjwVmiYvhVIU/cfFAuJ3Zjylvq/cQ16Gx1lAGtN5EJ5z7wNLJccoPbSU7u1r6j
jgCviWFchHdRpAuojAU792Slz8ZQgCU/SYUWNrKIqbJAeChL5zckX2VJrQ4glhtw
r4g2TpXKD7vBIw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:25:21 2025 by rpki-client