This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          pETZp30Vf0H0WNNY84VFQh4D4B28GLGPnwCt9MShcN8=
Subject key identifier:   41:A1:02:8B:BF:D8:D3:C0:13:DE:55:6B:B2:00:8F:C3:9C:74:D5:2A
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019AF16498CF08C2438A168147A9DE257594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          15A4
Signing time:             Sat 06 Dec 2025 02:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:33 +0000
Files and hashes:         1: 2vth8JCO_Wyd-5uRLg3PTDr-fFg.roa (hash: 9LUpst7vMTMHTa3hQ4R9T7kLec7gteJsYM3fKAc8ccE=)
                          2: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: ByIcyj5YbiLPzoP0dBD/3xClZBvYZW7jKOiQAp/NCKQ=)
                          3: LNIMITYAbnJvMYE5J7ei8eACNa0.roa (hash: TvpR/eCPWYxWewvW/DN1BJNGxjnk3BZ6oYY2B4jFvf8=)
                          4: TLJiRRlOwtTTUz20TZKNV_ibyho.roa (hash: nl+gTrTAcZwj7M8TY8eq7Uo7CmcdFRJEseyL47O4t3o=)
                          5: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:98:cf:08:c2:43:8a:16:81:47:a9:de:25:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Dec  6 02:01:33 2025 GMT
            Not After : Dec  7 02:01:33 2025 GMT
        Subject: CN=41a1028bbfd8d3c013de556bb2008fc39c74d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:c5:9d:d1:e4:77:a5:d8:c1:fa:3e:b8:e6:
                    12:db:aa:77:d4:ca:9d:99:54:d9:b6:9a:bc:9c:1e:
                    ee:25:0b:23:00:a3:4c:71:75:5d:18:86:b0:ec:7d:
                    50:4b:2b:2e:f4:f3:ac:da:3a:d9:18:9c:d2:9a:ae:
                    ac:fc:4e:0c:40:8b:b5:a3:75:6f:4f:0c:9b:c1:a6:
                    b4:23:8d:79:2b:43:80:af:80:06:f7:a9:70:e5:ed:
                    cc:26:28:12:c2:85:33:d0:6f:8d:dd:21:3e:80:94:
                    e6:2e:60:83:bd:e6:55:03:f6:69:b7:1d:01:aa:bf:
                    26:39:60:b9:34:1a:1e:c9:2b:1a:6b:c2:d8:fe:51:
                    b8:e3:e5:92:1e:d7:01:c8:60:16:e4:2a:4d:3b:8e:
                    0a:88:25:4d:03:39:cf:5f:3f:37:40:a0:ed:bc:dc:
                    5f:27:82:ea:c3:40:03:54:de:d4:b2:79:9f:5f:3e:
                    83:88:f3:c2:f2:85:da:a3:8e:5a:f9:5a:39:ea:13:
                    7a:52:a3:a1:56:13:f3:b7:26:57:bd:ca:3d:b1:27:
                    6f:5d:a7:d9:86:ef:b6:b1:17:a0:ec:bc:09:ba:93:
                    c5:e0:05:92:87:87:5c:82:93:04:f0:31:a9:a5:e5:
                    4e:b2:e6:78:33:b4:63:d2:61:28:c2:2e:74:4a:b3:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:02:8B:BF:D8:D3:C0:13:DE:55:6B:B2:00:8F:C3:9C:74:D5:2A
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:61:9d:4a:c7:b2:1e:b8:df:1d:46:96:4a:c1:84:fa:51:ec:
         4c:ed:69:94:48:3a:57:2b:fb:58:8e:fa:33:e5:35:9e:97:f2:
         0e:ee:e5:56:20:04:2c:db:0f:77:25:07:a9:89:a3:bb:65:65:
         3a:26:c5:d8:6b:fa:36:bc:87:4f:b9:df:fb:d8:52:88:78:e1:
         1c:ee:92:69:8b:e9:ea:06:78:f8:a2:15:e3:f7:f2:2f:fa:c1:
         8c:59:6a:48:90:e6:dd:08:49:99:cc:59:cc:59:38:34:a3:f8:
         e2:26:46:0d:75:21:2c:19:b7:95:27:3f:1b:1a:57:45:6a:9f:
         07:94:40:89:2a:b8:46:7e:7b:6a:76:54:af:b0:5a:34:49:68:
         c7:d4:44:56:eb:ad:e5:d6:95:da:95:da:c2:a6:09:cf:7b:7c:
         b4:8b:34:44:d7:f2:d8:c4:6c:59:36:7a:ec:36:2e:73:3d:04:
         2a:dd:ac:45:b2:b7:18:94:3c:f7:7f:16:45:73:ef:51:18:c9:
         62:12:5d:39:01:14:2f:52:e8:be:88:b9:b5:75:cc:e5:a9:11:
         84:21:e5:cf:e1:a1:36:20:18:78:a2:05:a8:12:5e:a7:8e:91:
         15:15:a6:50:04:f0:a8:56:5b:74:a9:27:17:83:67:df:9b:58:
         30:13:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:05:14 2025 by rpki-client