This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          b5ylx+A0g641aS6V2ChipB4nEKHVw2wh/S1oXIxyvRU=
Subject key identifier:   61:0D:A2:E1:1B:E0:F5:71:12:E9:A2:96:79:03:96:73:01:C7:E5:F1
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       019B4927371DEC38AFD195E152470FAB20C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          1791
Signing time:             Tue 23 Dec 2025 03:01:05 +0000
Manifest this update:     Tue 23 Dec 2025 03:01:05 +0000
Manifest next update:     Wed 24 Dec 2025 03:01:05 +0000
Files and hashes:         1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
                          2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
                          3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: MRAEBtSLr1bbP4OHWk6ZORMVxrYlAyL5sUcYTKWtliw=)
                          4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:27:37:1d:ec:38:af:d1:95:e1:52:47:0f:ab:20:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: Dec 23 03:01:05 2025 GMT
            Not After : Dec 24 03:01:05 2025 GMT
        Subject: CN=610da2e11be0f57112e9a2967903967301c7e5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:b8:31:c3:b6:ce:c4:50:fa:bf:ad:23:4b:
                    2b:d7:45:6e:45:58:cf:88:5e:52:94:c0:8b:3c:c7:
                    ed:1e:ed:87:c7:4c:4d:79:cf:99:6f:b8:42:c0:d2:
                    5b:50:8b:2c:5d:c7:81:6d:7f:1f:75:de:8e:9a:f5:
                    93:ba:8d:ff:7f:7c:af:ed:61:76:05:16:be:b4:c5:
                    97:5a:d5:ee:8f:44:7e:54:ae:b7:a4:56:f8:32:d3:
                    2e:f2:87:27:cb:f6:e4:1e:47:5b:98:35:14:af:8e:
                    03:c4:9f:e2:8e:14:eb:ea:58:a3:c0:77:0e:fe:4a:
                    62:a6:79:92:28:30:6e:6f:c8:17:2b:eb:48:0f:94:
                    a7:63:74:cb:64:01:e3:60:fc:a8:2f:f0:c0:81:41:
                    cf:e0:86:ce:3e:7f:5b:0d:f6:38:49:fe:16:02:6e:
                    2f:f9:cd:cb:f8:fd:4f:da:27:2f:b8:24:24:6f:ab:
                    b9:79:3f:ef:19:9e:33:9d:93:d6:af:89:a3:fa:dc:
                    14:cd:89:5c:d6:99:74:cb:40:95:a5:d5:15:30:0c:
                    21:39:37:65:6c:c4:53:83:eb:67:91:63:40:d3:30:
                    c0:d7:7c:75:be:a9:22:c8:a7:93:20:e0:8a:73:2e:
                    63:bc:7d:d9:b3:a0:95:06:7b:ab:53:c0:83:38:ca:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0D:A2:E1:1B:E0:F5:71:12:E9:A2:96:79:03:96:73:01:C7:E5:F1
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:0d:16:f5:e4:5f:c3:6e:4d:d8:34:d9:19:99:a2:dc:f9:
         d6:55:2f:b1:c4:f4:e6:38:5a:87:8b:c6:23:31:a1:43:11:9d:
         31:e5:d3:2f:68:cb:07:4b:a9:f5:bd:3c:36:34:eb:9b:dd:c4:
         20:18:f4:24:06:eb:74:9c:cd:71:94:63:43:ea:ae:8d:c2:d5:
         ee:8c:e9:67:12:5b:e9:59:5a:00:2d:bd:9d:7a:fc:5e:4a:7c:
         53:73:d4:c8:44:50:95:d6:80:26:c9:b2:f5:fd:f2:d5:c6:f1:
         cc:0a:f9:4d:c0:4e:75:64:68:04:b5:dd:4b:53:2a:65:83:93:
         9d:14:98:e5:9b:43:6a:d6:02:df:e0:9a:9a:cb:3b:ca:a9:9a:
         68:2e:28:cf:51:0e:47:51:86:45:5e:a3:02:e6:46:2d:c6:63:
         ba:00:5b:6f:b9:2b:03:4b:ba:e7:9a:d9:d2:9f:56:aa:16:9b:
         11:c5:5b:67:31:81:09:0a:cc:8c:26:12:c5:5d:e8:38:a2:c8:
         fd:34:cc:c5:90:6b:2a:ea:aa:c8:97:20:d4:58:a8:66:49:be:
         4e:58:24:1f:a7:bc:2d:bf:23:ce:bf:0a:bb:a9:73:4d:f3:39:
         67:96:2b:93:b2:0f:2e:31:21:47:3d:91:eb:42:88:52:ab:a1:
         08:af:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:40:26 2025 by rpki-client