This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          O823DELts74k2enkcNjjd+kJ3MMSW491u7/89cwoV+4=
Subject key identifier:   C9:BD:57:EE:D6:2C:49:E7:CA:BE:87:CC:96:58:29:EC:A9:4B:87:8C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       019AF8790579C8850F7A2BBAF47F71206179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          182A
Signing time:             Sun 07 Dec 2025 11:01:12 +0000
Manifest this update:     Sun 07 Dec 2025 11:01:12 +0000
Manifest next update:     Mon 08 Dec 2025 11:01:12 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: naa3piamzFD1TydsVl6XSzigyBLqjiuNBMah/S6K/fM=)
                          2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=)
                          3: 51SUNS4NzE-NFlYbOxa6dVSJlJg.roa (hash: pz2zCbZpIM5OE18+MtuDbYpRKziF5XB+qaDVBI26k5U=)
                          4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=)
                          5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          7: PKx0bsHKaxWX-4t6b4C2oQj6ZdA.roa (hash: A8fByKFvsFqD6jsKpJ3oefFEQhPGUAvgn7emwJzwq9M=)
                          8: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=)
                          9: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
                          10: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          11: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=)
                          12: nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa (hash: WWP6Qvn5sb0v16R7y7lOMfY54UvOgjr7TyOI6hQ1twA=)
                          13: p-NLwsw4XZb2x84j5S8WR2nP2QY.roa (hash: dy84ZCh6OBzC5pABeBNPTTlXjsQiBBFHY7p7FUFXzcQ=)
                          14: rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa (hash: B0jP1n50rUzyEhb8sNQfRdBvFRnGYSNgdCNKMzpwhpA=)
                          15: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          16: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          17: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f8:79:05:79:c8:85:0f:7a:2b:ba:f4:7f:71:20:61:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Dec  7 11:01:12 2025 GMT
            Not After : Dec  8 11:01:12 2025 GMT
        Subject: CN=c9bd57eed62c49e7cabe87cc965829eca94b878c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:f1:97:b5:95:ae:59:4c:22:29:b0:00:d9:
                    35:81:a0:f7:7f:2f:0b:8b:ee:46:bd:fa:b4:3d:ef:
                    8c:6e:4a:2f:34:f3:b4:7f:f0:96:c9:f5:3b:4b:61:
                    87:cc:0c:62:0c:bc:9d:ee:76:fb:23:54:9a:35:92:
                    3e:0a:63:53:19:f9:2c:0e:e7:30:22:79:89:d9:f6:
                    e7:46:dd:30:61:d9:76:b5:16:db:72:32:f1:50:e4:
                    02:ea:c9:05:89:3f:09:19:03:13:53:33:45:71:5a:
                    53:d5:c4:52:8f:8c:ba:c1:79:18:c0:fd:04:b6:70:
                    8d:8a:18:95:29:0a:fe:1f:e9:e9:25:15:c6:91:04:
                    03:fe:04:28:96:7e:0f:c4:09:56:0b:95:5c:e0:35:
                    20:ef:70:64:18:2c:2a:68:74:57:28:e8:6d:c4:34:
                    b3:f9:6b:df:2f:d3:20:c6:45:be:3f:10:e8:53:9d:
                    75:80:92:32:ef:24:c2:d2:1c:44:a3:1f:de:50:18:
                    09:bf:d3:59:55:16:b3:01:fc:88:41:5d:42:b1:44:
                    a1:de:89:06:bb:e0:cd:f3:79:ac:70:b8:77:69:81:
                    75:0e:65:b5:c7:ca:3d:72:50:1b:e3:10:5a:0f:89:
                    63:46:a6:a6:5d:b6:d8:13:93:33:1b:aa:17:ec:ac:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:57:EE:D6:2C:49:E7:CA:BE:87:CC:96:58:29:EC:A9:4B:87:8C
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:b1:75:cd:ec:4d:14:e4:e6:22:de:47:67:8f:e9:67:45:
         66:f6:a3:33:27:e4:24:0d:22:15:b9:06:1c:1d:2b:0c:e6:af:
         c4:6e:41:cf:d4:52:df:9f:b1:68:07:51:8d:0e:37:67:59:41:
         1c:c6:7b:22:dc:88:b5:1e:d6:87:ab:0c:ad:1f:f7:ba:99:6e:
         dd:fe:fc:8c:b6:9a:9b:4f:67:33:d4:1a:81:aa:15:5c:b7:8a:
         8d:94:a7:18:e9:5c:23:18:df:b0:73:95:05:4a:ad:e6:82:38:
         36:47:82:33:bf:a6:e1:65:62:73:e8:09:c0:c5:ba:1e:c3:0e:
         e8:cb:31:b0:2a:92:a8:19:73:f5:45:55:1b:3a:33:2d:b9:89:
         c5:35:e3:0a:8b:7f:cc:72:a1:f7:2f:a6:18:ec:4b:ca:09:83:
         2e:f5:5a:08:53:2a:ac:8f:f5:15:6f:01:0c:fa:cd:87:59:99:
         11:c7:1a:24:f2:9f:53:c5:69:a2:c5:1b:36:8b:ab:cb:ee:93:
         22:6a:cf:9b:7b:7f:9f:d6:05:1c:62:f3:c7:c4:50:ba:a1:b2:
         5b:00:10:b7:96:4f:2c:c5:74:32:8d:0c:c9:47:86:db:65:b2:
         b1:22:c7:ea:f9:ca:cb:2d:3c:a8:82:ab:e1:47:ea:6d:64:80:
         13:32:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:08:36 2025 by rpki-client