This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File:                     C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier:          Dm3AgH4MHvSkMzZHj++Mx+pQOeR6UpCiMdn32rOcHt4=
Subject key identifier:   AE:DC:6C:8A:1E:1A:1A:2D:AD:B1:32:98:9A:D0:09:23:06:77:74:D4
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer:       /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial:       019B2EF9125B48CE71A5E24893442141ED80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number:          1492
Signing time:             Thu 18 Dec 2025 01:00:33 +0000
Manifest this update:     Thu 18 Dec 2025 01:00:33 +0000
Manifest next update:     Fri 19 Dec 2025 01:00:33 +0000
Files and hashes:         1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
                          2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: tgwA+H+Sfm2aEZ3VMMU1BvnR+OpZNj67U7dqZS4vaZk=)
                          3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:f9:12:5b:48:ce:71:a5:e2:48:93:44:21:41:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
        Validity
            Not Before: Dec 18 01:00:33 2025 GMT
            Not After : Dec 19 01:00:33 2025 GMT
        Subject: CN=aedc6c8a1e1a1a2dadb132989ad00923067774d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:d9:ef:15:97:f2:4a:4b:49:5c:6a:26:70:
                    69:af:cd:f5:fc:90:66:d5:7b:98:34:61:c9:88:c1:
                    eb:60:eb:7b:d7:21:f1:4e:4e:ee:b8:6b:90:03:6a:
                    b0:93:07:c2:cf:3b:61:9d:a3:0e:b9:93:00:1d:33:
                    d6:67:9b:b4:97:62:dc:68:f7:41:78:ef:c2:ee:6b:
                    a7:d6:06:49:45:64:9b:89:bb:ce:8f:da:de:94:48:
                    60:35:eb:2c:dc:60:8e:a5:84:10:5a:91:0c:03:7f:
                    a3:26:70:b1:3f:a7:ab:cb:31:b6:97:83:ee:bb:42:
                    c6:6c:a0:44:4b:9b:f3:64:04:57:77:58:d4:2c:72:
                    dd:63:8d:53:22:17:ef:0f:0c:5e:5e:b4:df:06:43:
                    38:49:d4:be:10:43:0c:36:3a:55:c3:e6:26:ea:05:
                    f2:6e:fa:51:2a:1a:90:80:d3:77:29:48:64:68:0a:
                    bb:73:9a:e6:f4:0d:14:c6:1c:11:61:2c:48:0d:be:
                    f4:a1:4d:38:51:c3:27:fb:78:f1:00:f7:aa:a0:39:
                    4e:48:ad:74:39:8c:5f:83:1d:a7:3d:bb:fa:aa:54:
                    42:d1:1c:41:3f:46:93:b0:89:0e:7e:c5:94:83:b9:
                    7f:82:6f:46:f2:a3:4d:4b:67:38:96:cd:82:7d:09:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DC:6C:8A:1E:1A:1A:2D:AD:B1:32:98:9A:D0:09:23:06:77:74:D4
            X509v3 Authority Key Identifier:
                keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:ee:4b:fc:a7:33:6c:77:7f:b4:62:af:88:93:16:2e:2c:
         92:6e:bf:ad:27:2e:6e:0f:57:cf:36:71:a5:97:e7:3a:c2:77:
         8f:b8:99:93:76:3e:f3:86:18:75:4b:19:3d:d2:6a:02:64:78:
         eb:a3:76:00:38:b6:e3:e6:a2:0c:70:81:8f:d2:34:3f:6d:fc:
         19:29:ac:a9:0e:5f:8e:33:f8:48:40:89:f9:fb:70:3d:97:58:
         dd:af:48:8c:6c:ef:86:db:ce:b0:cc:d7:ac:fe:19:1c:c7:d7:
         e2:db:6c:3e:b3:0b:5a:7a:5f:37:e5:0c:18:bc:20:b8:08:12:
         8c:20:37:57:1b:d7:4e:c7:a3:62:fa:7c:e3:b7:8d:5b:81:0f:
         e3:48:11:ad:28:52:b4:e0:26:39:52:cb:21:63:7b:d7:6f:40:
         aa:7b:c3:e4:08:51:e3:5b:bb:0b:93:b8:91:10:fe:08:f8:d9:
         fd:f4:61:55:90:c3:0c:02:75:13:48:24:01:c2:f5:f4:0f:43:
         d0:94:2c:dd:7b:72:e2:19:c9:f2:9d:8c:f2:4e:cb:d9:a2:f5:
         16:bf:93:7b:30:64:2e:d3:c2:e4:00:99:87:99:a5:3d:ba:65:
         f3:13:60:df:92:f7:c6:39:1f:1e:b6:da:de:93:14:f9:a6:cb:
         95:15:1a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsu+RJbSM5xpeJIk0QhQe2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjUxMjE4MDEwMDMzWhcNMjUxMjE5MDEwMDMzWjAzMTEwLwYDVQQD
EyhhZWRjNmM4YTFlMWExYTJkYWRiMTMyOTg5YWQwMDkyMzA2Nzc3NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNjZ7xWX8kpLSVxqJnBpr831/JBm
1XuYNGHJiMHrYOt71yHxTk7uuGuQA2qwkwfCzzthnaMOuZMAHTPWZ5u0l2LcaPdB
eO/C7mun1gZJRWSbibvOj9relEhgNess3GCOpYQQWpEMA3+jJnCxP6eryzG2l4Pu
u0LGbKBES5vzZARXd1jULHLdY41TIhfvDwxeXrTfBkM4SdS+EEMMNjpVw+Ym6gXy
bvpRKhqQgNN3KUhkaAq7c5rm9A0UxhwRYSxIDb70oU04UcMn+3jxAPeqoDlOSK10
OYxfgx2nPbv6qlRC0RxBP0aTsIkOfsWUg7l/gm9G8qNNS2c4ls2CfQkDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7cbIoeGhotrbEymJrQCSMGd3TUMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnefuS/yn
M2x3f7Rir4iTFi4skm6/rScubg9XzzZxpZfnOsJ3j7iZk3Y+84YYdUsZPdJqAmR4
66N2ADi24+aiDHCBj9I0P238GSmsqQ5fjjP4SECJ+ftwPZdY3a9IjGzvhtvOsMzX
rP4ZHMfX4ttsPrMLWnpfN+UMGLwguAgSjCA3VxvXTsejYvp847eNW4EP40gRrShS
tOAmOVLLIWN7129AqnvD5AhR41u7C5O4kRD+CPjZ/fRhVZDDDAJ1E0gkAcL19A9D
0JQs3Xty4hnJ8p2M8k7L2aL1Fr+TezBkLtPC5ACZh5mlPbpl8xNg35L3xjkfHrba
3pMU+abLlRUa7g==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:22:25 2025 by rpki-client