This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          sT/58vfK6u6n3TcyIn1ix3gtJgsU/cjvIgBlu2grHuo=
Subject key identifier:   05:32:41:1A:B0:98:42:BE:D2:C5:40:00:64:9F:9D:B1:9D:CD:F1:CF
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       019B1D29E0C263576B69EF6FB3A058531FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          17CB
Signing time:             Sun 14 Dec 2025 14:00:42 +0000
Manifest this update:     Sun 14 Dec 2025 14:00:42 +0000
Manifest next update:     Mon 15 Dec 2025 14:00:42 +0000
Files and hashes:         1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=)
                          2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
                          3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: XP4/UtLWgrtt8kAnx2ytqHPVWwNTLR22u4g/BoeNvjg=)
                          4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
                          5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
                          6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
                          7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=)
                          8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:29:e0:c2:63:57:6b:69:ef:6f:b3:a0:58:53:1f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Dec 14 14:00:42 2025 GMT
            Not After : Dec 15 14:00:42 2025 GMT
        Subject: CN=0532411ab09842bed2c54000649f9db19dcdf1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:17:d7:b4:48:ca:4e:d3:4e:0e:c4:59:1a:
                    51:0b:12:54:93:91:01:86:cd:1b:2c:14:e1:c6:64:
                    91:cb:17:f9:f2:7a:0d:27:b1:f8:cb:8e:a5:e7:79:
                    98:aa:61:53:76:1e:a7:12:3a:45:f6:a9:8b:5c:15:
                    e4:12:fc:eb:57:93:bc:9e:80:51:55:df:7f:7f:cb:
                    fc:9e:ea:a5:aa:58:f7:4a:8a:3b:ff:83:eb:06:21:
                    57:b3:94:25:9c:df:58:ab:f4:a7:53:ab:70:5f:9a:
                    94:92:87:e2:c2:ad:11:95:ae:0d:c6:a2:03:40:8a:
                    7a:d7:7b:7c:c7:d9:a1:a6:8e:8e:bf:48:4e:ee:4f:
                    40:ca:18:0f:1b:10:38:eb:c5:2b:ad:8b:78:fc:8c:
                    76:06:a0:e0:85:b4:c0:7f:aa:e2:da:48:16:e3:65:
                    98:f1:59:c5:41:b4:ff:fa:2a:ff:0a:e2:3c:08:b4:
                    d6:42:09:76:68:c9:17:da:90:95:31:a1:8d:aa:3e:
                    9e:51:a7:76:14:44:e4:69:3b:e5:a5:d4:af:39:51:
                    96:41:55:a0:9a:1b:3d:43:dd:b5:8a:7d:7e:83:4c:
                    31:88:eb:6e:31:de:67:70:d8:17:b0:00:3a:a8:70:
                    cd:f8:1e:39:f4:46:49:ea:a5:43:90:6e:21:76:46:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:32:41:1A:B0:98:42:BE:D2:C5:40:00:64:9F:9D:B1:9D:CD:F1:CF
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:95:f6:12:49:29:fd:64:56:ff:8d:fd:ea:0d:ef:37:27:e1:
         0a:30:b2:c7:ae:c6:58:af:de:6c:72:96:bb:13:c3:00:dd:5b:
         77:aa:d0:77:4b:82:39:21:04:e8:0d:44:1a:4a:70:90:19:c5:
         cd:07:82:59:ef:da:70:62:d0:9d:88:12:b2:f7:79:1d:2d:e8:
         61:cd:4d:16:04:be:d8:79:32:16:2c:85:27:dd:3c:a0:67:a5:
         c4:42:39:e9:dc:26:f6:54:54:c5:61:41:c6:fd:b2:9d:97:82:
         8f:ba:cf:6f:26:95:85:f2:dc:00:65:55:73:64:20:a0:f9:33:
         f6:92:ab:1a:8a:bb:ff:28:e0:ad:f3:45:85:d0:23:80:c6:09:
         74:52:2b:17:16:01:45:ff:25:03:97:39:ee:8f:f3:e9:b7:1b:
         fc:a8:5a:42:10:72:82:ff:15:f3:4a:27:a1:b7:81:2e:cb:1e:
         3a:9a:18:52:f8:89:43:84:40:2d:72:cf:56:a9:40:8e:f2:ff:
         9d:41:da:e2:f3:22:54:4d:2a:c7:83:de:ce:a6:9d:15:b1:ad:
         82:e1:af:c9:e7:64:5b:78:aa:aa:3b:8b:a7:5a:fa:fb:cd:05:
         86:f8:f0:aa:c0:82:6e:52:3e:ec:56:0b:73:2d:58:af:8b:b6:
         fe:36:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:16:53 2025 by rpki-client