This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File:                     76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier:          8CqGviZ6QbXKD/NrZlcMHG1VGOE6ScNLMBGxA/D+dgU=
Subject key identifier:   49:C7:37:AC:0C:35:23:BD:1F:6B:6A:D9:74:72:AF:2B:1D:F4:24:0A
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer:       /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial:       019B44007F628D651B16BA4529DF52BEC02B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number:          01C3
Signing time:             Mon 22 Dec 2025 03:00:41 +0000
Manifest this update:     Mon 22 Dec 2025 03:00:41 +0000
Manifest next update:     Tue 23 Dec 2025 03:00:41 +0000
Files and hashes:         1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: W4qa3A7m7e5iMa8LaRYN/NipWlkOs8SIgfddtEUb0Pw=)
                          2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=)
                          3: Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa (hash: URIulXseWmtHdVMSkEKr6LgwVbHHo5nHTKefaj4mCqk=)
                          4: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=)
                          5: ZwlhiYyWQkRGz3NJHJFyM_Rg7Cg.roa (hash: 5by/fhrdm7/3f06Vze3ay8vgCnkJXF3Gh0BeggMxG98=)
                          6: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=)
                          7: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
                          8: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (hash: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:00:7f:62:8d:65:1b:16:ba:45:29:df:52:be:c0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
        Validity
            Not Before: Dec 22 03:00:41 2025 GMT
            Not After : Dec 23 03:00:41 2025 GMT
        Subject: CN=49c737ac0c3523bd1f6b6ad97472af2b1df4240a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:d1:41:1e:b4:67:dc:4a:48:c5:a2:fd:8c:
                    49:60:27:3f:7a:a3:25:df:8b:81:a2:83:2c:76:c4:
                    66:a3:a3:10:fc:af:a9:32:80:7d:24:f3:b6:e7:f5:
                    51:fe:07:8a:09:dc:b4:21:dd:a3:27:11:48:3a:44:
                    c1:2e:30:93:47:2f:ff:8f:66:b2:de:b0:ad:9a:f6:
                    4a:70:3d:61:f3:e3:ad:9e:d1:47:5b:e4:51:84:8f:
                    d7:7f:5d:be:37:1c:6b:67:aa:17:53:f7:1b:47:43:
                    b0:27:9e:f9:2f:ea:04:f4:c4:91:89:0c:29:2c:51:
                    fa:80:56:51:ba:5d:fb:75:7c:92:b3:4f:66:79:6d:
                    2d:75:36:9a:e0:e0:cc:b4:d4:7c:5f:3f:20:35:7f:
                    8e:4d:7b:0a:37:84:4a:13:15:ae:a1:33:1d:c5:3e:
                    32:0d:a2:2b:bf:8c:56:11:ee:77:3d:61:fe:d2:47:
                    0b:86:6b:22:6e:94:51:6f:a3:17:0d:fc:7c:ba:37:
                    bb:da:4c:a6:a4:77:7e:89:e8:fd:eb:28:02:75:25:
                    46:59:73:72:21:e8:3f:0e:52:d7:cb:35:68:7a:31:
                    23:d3:cf:16:32:3d:aa:6b:ca:9f:9b:dd:8b:b9:04:
                    e8:cf:cf:44:6c:1d:50:60:2f:fc:a0:e7:69:a8:4d:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:37:AC:0C:35:23:BD:1F:6B:6A:D9:74:72:AF:2B:1D:F4:24:0A
            X509v3 Authority Key Identifier:
                keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:84:fa:c2:82:9d:24:bc:bc:10:b2:49:b1:a8:cb:ef:91:a5:
         55:e6:1c:6c:99:2e:4a:32:2c:bd:fb:de:1c:65:b1:ac:a1:41:
         73:c0:65:c2:cf:b0:41:2a:71:ae:5f:77:28:68:55:32:e9:96:
         d4:35:43:99:83:e5:94:32:b4:57:b2:7f:3d:87:83:d5:a9:c2:
         ac:fd:de:81:62:db:fc:a5:57:d8:c9:1e:ba:77:eb:2f:fc:a9:
         b5:63:e5:f2:a9:4d:68:a5:83:07:dd:07:5a:04:3f:06:ab:e4:
         9e:da:33:f7:fd:71:ec:9f:d0:22:3a:2e:b2:43:31:4d:bb:a8:
         dd:d3:93:51:de:ed:e8:f7:2e:10:54:91:8c:86:82:52:06:6f:
         6f:31:d1:1c:4e:4f:27:b8:3a:5a:2f:f6:91:46:9e:01:13:0b:
         22:e2:1c:1c:eb:c1:99:ad:4c:b4:ee:f5:e0:85:e9:69:ac:ed:
         46:f2:ae:e0:3d:c1:66:6b:ac:39:4c:31:13:c4:70:d5:1d:0c:
         be:4c:64:ea:57:5d:e8:36:d6:94:91:41:aa:7a:f4:88:af:2b:
         49:82:d7:41:3f:64:8d:fa:4e:b4:8a:29:a6:db:7d:6c:99:28:
         a6:51:68:95:31:46:57:d8:24:05:38:0a:f1:61:2f:1c:d5:6a:
         97:b4:d8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEAH9ijWUbFrpFKd9SvsArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjUxMjIyMDMwMDQxWhcNMjUxMjIzMDMwMDQxWjAzMTEwLwYDVQQD
Eyg0OWM3MzdhYzBjMzUyM2JkMWY2YjZhZDk3NDcyYWYyYjFkZjQyNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyILRQR60Z9xKSMWi/YxJYCc/eqMl
34uBooMsdsRmo6MQ/K+pMoB9JPO25/VR/geKCdy0Id2jJxFIOkTBLjCTRy//j2ay
3rCtmvZKcD1h8+OtntFHW+RRhI/Xf12+NxxrZ6oXU/cbR0OwJ575L+oE9MSRiQwp
LFH6gFZRul37dXySs09meW0tdTaa4ODMtNR8Xz8gNX+OTXsKN4RKExWuoTMdxT4y
DaIrv4xWEe53PWH+0kcLhmsibpRRb6MXDfx8uje72kympHd+iej96ygCdSVGWXNy
Ieg/DlLXyzVoejEj088WMj2qa8qfm92LuQToz89EbB1QYC/8oOdpqE1bzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnHN6wMNSO9H2tq2XRyrysd9CQKMB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4T6woKd
JLy8ELJJsajL75GlVeYcbJkuSjIsvfveHGWxrKFBc8Blws+wQSpxrl93KGhVMumW
1DVDmYPllDK0V7J/PYeD1anCrP3egWLb/KVX2MkeunfrL/yptWPl8qlNaKWDB90H
WgQ/Bqvkntoz9/1x7J/QIjouskMxTbuo3dOTUd7t6PcuEFSRjIaCUgZvbzHRHE5P
J7g6Wi/2kUaeARMLIuIcHOvBma1MtO714IXpaaztRvKu4D3BZmusOUwxE8Rw1R0M
vkxk6ldd6DbWlJFBqnr0iK8rSYLXQT9kjfpOtIopptt9bJkoplFolTFGV9gkBTgK
8WEvHNVql7TYNQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:16:46 2025 by rpki-client