This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          PMfbcX2qqqUcba33TjOvJ4u5Vl0X+m1zVbyOvPBbk0U=
Subject key identifier:   EE:85:BA:B2:F1:F1:1C:25:16:3A:05:83:75:87:46:38:D0:2B:7A:41
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019AF31C8260314670E37A7A88C14F96F584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 10:02:03 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:03 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:03 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: viZgMYQx1FzzjWKqMa8GzwVIAVcjDEJh75yxxv0+/H0=)
                          2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=)
                          3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=)
                          4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=)
                          5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=)
                          6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=)
                          7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=)
                          8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=)
                          9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=)
                          10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=)
                          11: vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa (hash: Fo0TpQJlU+oLHQtTrtQM8XKofzaFbmPNMXg/+v+0LZE=)
                          12: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:82:60:31:46:70:e3:7a:7a:88:c1:4f:96:f5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Dec  6 10:02:03 2025 GMT
            Not After : Dec  7 10:02:03 2025 GMT
        Subject: CN=ee85bab2f1f11c25163a058375874638d02b7a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:b6:58:6f:54:71:3a:6e:56:22:f9:b8:96:
                    76:e3:7e:f9:30:a4:50:a6:94:fb:26:4c:bc:66:2b:
                    9d:5d:fc:eb:79:5e:ab:70:af:a4:6c:c7:8a:0a:73:
                    11:7c:3a:7d:be:02:17:80:de:d4:fd:47:9d:c9:85:
                    8f:ab:03:b4:6e:83:8a:c5:28:91:66:05:bf:c5:09:
                    bc:eb:20:28:2c:d5:c6:68:df:cb:59:2e:c9:f1:ae:
                    11:fa:b7:1f:d9:46:3c:8c:45:1d:68:6c:db:ca:3e:
                    2f:57:7e:91:72:7a:88:5f:d5:b3:fd:85:8c:1a:4a:
                    4f:c2:d3:57:bd:67:d2:ee:bd:c4:6c:88:36:51:23:
                    24:77:a0:42:f3:9b:d9:e4:de:99:19:62:95:b0:a9:
                    f4:2c:a6:cd:d8:d0:63:ae:5b:cc:0b:e5:d7:a6:24:
                    93:92:be:74:af:4c:8a:86:6c:9c:ac:7d:fd:87:6f:
                    95:89:d9:a4:f7:40:d8:1a:b3:af:11:e9:c5:6d:a6:
                    7c:60:44:ac:8b:dc:c9:e1:8c:13:e8:8e:fb:02:b0:
                    b3:71:48:7a:a2:f6:8c:4e:79:36:55:30:45:2a:b6:
                    b4:9f:e8:df:3f:a6:6f:74:27:e6:cd:70:d8:ae:9e:
                    5f:39:48:d0:ef:7f:16:4b:85:01:89:90:6a:eb:29:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:BA:B2:F1:F1:1C:25:16:3A:05:83:75:87:46:38:D0:2B:7A:41
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:dd:c1:a9:7e:0a:c0:c4:59:50:1b:56:10:b4:f6:f6:22:7f:
         7d:fb:c1:2a:01:8a:9e:e8:eb:ce:69:dc:97:60:51:26:62:b7:
         0b:5c:d5:c0:94:5e:c9:67:a9:49:f1:30:f9:80:5e:6f:09:f4:
         bc:8f:98:51:30:d8:e7:06:4e:28:21:6c:46:88:bd:70:79:31:
         db:38:dc:95:68:3f:1c:7b:6a:fa:9e:59:b8:47:87:59:7b:d0:
         b1:22:86:2a:fe:9d:25:33:ea:ea:35:10:aa:c3:26:48:f2:20:
         f8:19:c1:37:ac:a4:2e:b1:de:ee:ad:f7:77:11:a6:c7:3a:71:
         d0:5d:d4:a0:ea:89:c4:6e:93:ea:69:c2:78:78:1a:76:36:1d:
         9d:c3:9c:29:0a:4e:10:37:84:60:16:0f:cb:ea:60:8e:7f:9f:
         0a:11:15:54:cc:63:81:0e:07:e2:32:4c:b7:9b:66:fa:81:72:
         ab:f3:02:59:51:ba:61:98:d1:b3:bf:44:57:82:79:34:7f:96:
         70:8f:4a:3a:04:65:9b:a4:c5:9d:a5:63:4f:d4:8f:54:29:0e:
         d7:90:c7:36:d9:96:ab:22:cb:34:e2:4f:92:17:9b:39:d9:8c:
         9c:d8:b7:18:ad:f6:50:6e:2d:54:7f:b1:60:4c:d9:c0:6f:b7:
         fe:59:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:47:39 2025 by rpki-client