This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          oBg8GP4sKz1W41xwuT3V6C5/S+PJnmNl60kC4SmJXiw=
Subject key identifier:   C0:9C:A3:4C:0F:0F:4E:97:2E:2F:53:E3:09:70:3C:B1:E7:62:38:E7
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       019AF5782144F2B23AD61F8D3FB9C73C6B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          155A
Signing time:             Sat 06 Dec 2025 21:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:21 +0000
Files and hashes:         1: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: UYdVrxUHOyYe2aQnvlDBrbZwljjVRF7zx+1Vfpcd7JI=)
                          2: OnXC0EMmctW1l-eN0LPWNOjUqPw.roa (hash: k0QnDPc78XQxy2Jh6N0H9Na60K6yINLRvcu8aefMv80=)
                          3: SdvawK2l2QMTxWUsBzsvDK2l55Y.roa (hash: 0IwztZlDbvlCLqvgLhsygToSdfiJSQpbte+efGKPWYs=)
                          4: Yes96KlqbG0mr87JhVnZBvHYB_g.roa (hash: n9jcRd3MdFn9mVFhJ/Pv7xaxOHOW7HhKsR2CUBypqZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:21:44:f2:b2:3a:d6:1f:8d:3f:b9:c7:3c:6b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: Dec  6 21:01:21 2025 GMT
            Not After : Dec  7 21:01:21 2025 GMT
        Subject: CN=c09ca34c0f0f4e972e2f53e309703cb1e76238e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:49:00:db:e0:f1:cb:c5:83:21:52:61:34:75:
                    f7:11:71:8a:97:0d:f4:1a:37:b0:5f:87:a1:fe:6b:
                    89:30:21:0e:b8:f7:5b:25:1c:79:93:5d:f6:09:09:
                    78:ad:d4:a8:c6:11:6d:14:ef:7e:28:57:b0:33:48:
                    5f:53:bd:83:d1:72:04:63:cc:44:0b:96:ff:94:7f:
                    e5:8d:ed:fe:4f:d6:bf:fc:88:76:ab:43:82:2e:33:
                    ef:7f:f0:fc:6a:18:0c:8d:a6:fd:53:f6:8d:66:1c:
                    67:32:8c:df:67:31:c0:38:ef:d7:7d:07:21:65:f5:
                    a7:08:3f:ac:67:ee:d5:4f:3a:ba:58:e9:85:37:fe:
                    6f:c4:60:54:69:f9:3d:2d:1e:a0:64:fc:76:77:87:
                    a2:45:57:b7:9a:5f:e0:fd:06:c6:b6:e4:74:e1:af:
                    3c:49:22:ab:96:7f:7c:e6:41:97:87:ef:05:10:44:
                    10:80:43:49:50:64:8c:bf:16:a2:cd:93:32:36:c7:
                    5b:26:60:91:6f:5f:90:19:48:4f:cd:b3:bb:f3:3c:
                    0d:52:58:1d:77:4b:d8:b0:17:f8:b7:56:50:14:4a:
                    79:24:9e:64:2f:77:7a:10:94:73:d9:11:a9:9f:e9:
                    e1:36:af:6b:ee:53:1e:6d:08:10:07:61:ef:8f:12:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9C:A3:4C:0F:0F:4E:97:2E:2F:53:E3:09:70:3C:B1:E7:62:38:E7
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:90:27:e7:79:57:24:a6:b7:c7:01:77:64:02:44:c9:e3:
         d9:8c:dd:9b:a5:ae:1f:c9:be:ba:c2:c5:aa:a0:ea:0a:e4:2e:
         5d:3a:cd:fb:14:7e:e3:65:5f:d8:83:ad:c4:4b:56:2b:9f:92:
         a1:60:ca:6b:54:da:6a:51:cc:36:ec:14:e6:4d:75:36:7f:6d:
         6f:a9:16:07:36:47:41:2b:8d:be:06:a5:45:24:65:7e:8f:d6:
         c4:5a:77:2a:78:18:99:35:bc:44:8b:b8:e9:f7:ce:62:11:7e:
         67:b3:6d:6e:ae:31:9f:a1:58:98:9f:b5:7f:d2:ec:db:76:ef:
         42:d0:c7:36:64:9d:21:eb:86:93:99:78:82:0d:ca:c6:b4:56:
         29:ae:fa:02:bb:18:15:2a:03:ab:33:47:09:93:08:ba:4a:37:
         5b:45:b2:d3:64:e2:06:11:65:c1:6a:65:64:c3:ce:18:b1:a1:
         90:70:a1:60:5e:46:5c:81:24:25:a1:7a:14:50:5b:48:4a:05:
         a4:b4:31:9a:01:27:02:a4:b3:d7:86:db:ab:8a:a4:61:65:4b:
         6c:30:3d:56:fa:df:9e:fa:37:6e:3d:5a:07:f7:ae:d6:ce:8b:
         2b:34:a1:d8:af:0f:be:25:8b:2e:31:45:52:53:f4:8e:a2:ee:
         56:7c:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:06 2025 by rpki-client