This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          GvA/yqR6jgEOIB5veoes65eeWTCAsosJ9f1HJWYQ0x4=
Subject key identifier:   83:D4:37:58:D9:74:ED:3A:3F:B8:6E:1B:91:63:CF:F4:83:FF:04:3D
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       019AF57809B92D31A1E2A795FB01383F98EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          1784
Signing time:             Sat 06 Dec 2025 21:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:15 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
                          3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: 6oC1qshkDTjJy+mSGu9zUuxwNbPsSsLqP0jdkkNvh+s=)
                          5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:09:b9:2d:31:a1:e2:a7:95:fb:01:38:3f:98:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Dec  6 21:01:15 2025 GMT
            Not After : Dec  7 21:01:15 2025 GMT
        Subject: CN=83d43758d974ed3a3fb86e1b9163cff483ff043d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:8e:ac:21:33:ee:e9:29:98:54:97:6d:9e:
                    01:15:51:a4:9f:8c:26:77:6c:46:f1:d6:c8:5d:09:
                    02:6c:b0:25:c0:0d:d9:e2:fe:ec:2d:fe:e8:87:9c:
                    d0:de:0f:1c:67:76:c2:87:00:16:03:75:a6:aa:92:
                    76:41:33:e7:01:b2:72:d0:28:b9:80:5d:7b:69:52:
                    12:12:3d:25:e2:0b:1f:96:d3:cc:d3:09:0e:1e:83:
                    19:bd:65:3a:a4:0f:d8:bc:10:cd:ab:e1:5c:21:86:
                    eb:c3:f2:4c:0b:46:b6:68:b0:37:7c:7d:5a:ca:92:
                    a9:1f:8e:56:9f:ab:31:48:d2:5f:f9:41:77:fa:65:
                    23:66:eb:65:86:0d:c1:e7:a5:7c:56:8f:c1:fd:cc:
                    b8:77:94:40:7e:67:57:69:c6:a8:e7:8c:4f:ec:6f:
                    10:18:97:b8:8b:06:6f:fa:ed:a3:3f:e9:d5:12:0b:
                    90:70:2b:5f:3d:2d:f5:4a:6d:0a:a2:30:c2:61:43:
                    69:3e:49:f6:5b:48:58:95:88:41:b3:2d:68:0f:8b:
                    34:be:8a:43:f8:99:62:8c:ac:13:f8:7e:2c:cb:fd:
                    ec:81:15:80:13:fa:6b:57:a4:ad:0f:79:ae:49:d0:
                    5e:1a:cb:53:7a:a4:54:e5:5d:ff:e5:3a:7f:00:6a:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:37:58:D9:74:ED:3A:3F:B8:6E:1B:91:63:CF:F4:83:FF:04:3D
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:25:03:64:38:94:84:09:38:3f:f2:0e:0b:e2:24:e4:35:0c:
         61:3d:04:4d:34:07:56:02:04:be:45:9a:84:6f:d6:e7:d2:f0:
         65:9d:c7:67:ce:e8:d2:a6:25:4f:85:e3:84:82:2f:7d:74:67:
         f5:34:b6:b7:7f:fb:e4:47:3d:f0:c5:1e:34:d6:8b:ce:44:52:
         ee:08:7f:c3:25:3a:87:fd:d4:ec:7d:e2:97:4a:b2:b6:5f:e1:
         b8:59:48:67:30:7c:32:31:35:39:2d:d6:9f:c7:e9:c1:24:da:
         6f:03:7e:f7:b4:ef:cd:61:89:ce:5e:52:d3:82:e6:ed:6f:a8:
         ba:4e:37:94:75:a3:e5:77:55:1c:cc:77:d2:ee:ad:ca:24:ad:
         0a:76:6b:12:9a:71:68:7a:c0:0e:4b:a0:ce:8d:e9:b6:d5:f6:
         d3:49:a3:34:1b:6b:2a:2e:b1:ec:26:f2:51:3b:94:58:6a:27:
         ed:77:d5:ce:77:e7:6e:f0:3d:21:fa:f1:b7:f6:79:52:fa:40:
         a3:c1:49:03:51:5a:ad:67:ec:8c:a5:8c:7f:ef:6c:06:3f:5e:
         6e:00:d2:56:e7:02:53:5e:bd:cd:5b:a5:90:d1:3f:89:29:fd:
         80:ff:d6:46:76:ff:1b:3d:f8:be:1b:11:02:09:a4:d2:1e:5e:
         a7:45:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:41:16 2025 by rpki-client