This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          CGKYS6oua1g5Kly64N5NmPeovUYJF5k6W5udec+LRLM=
Subject key identifier:   E8:4A:A4:42:25:AB:13:E8:DA:5E:D1:C9:AB:C1:89:FA:08:42:1E:33
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       019B06D8FB653CEEA8A1920E6D4EC3F854C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          178D
Signing time:             Wed 10 Dec 2025 06:00:41 +0000
Manifest this update:     Wed 10 Dec 2025 06:00:41 +0000
Manifest next update:     Thu 11 Dec 2025 06:00:41 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
                          3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: WGSfSpJmdZPxmwlYc3W2AWYdPyCrX1IB/ZJdfz2GEOM=)
                          5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:d8:fb:65:3c:ee:a8:a1:92:0e:6d:4e:c3:f8:54:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Dec 10 06:00:41 2025 GMT
            Not After : Dec 11 06:00:41 2025 GMT
        Subject: CN=e84aa44225ab13e8da5ed1c9abc189fa08421e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:ef:d9:a6:a7:90:7f:60:8f:36:63:e3:f9:
                    b1:b7:25:8a:84:6b:09:7f:15:25:b7:cd:2d:77:1f:
                    f0:86:c4:91:64:30:93:f5:45:b0:27:58:10:fa:21:
                    d2:bf:34:6c:71:c1:ad:9b:17:0e:7f:81:da:52:5d:
                    5a:48:90:44:a4:cb:3a:f7:0b:75:fc:0a:de:c0:eb:
                    24:31:33:7a:4f:5f:1c:d2:53:04:2b:37:01:76:a5:
                    13:e5:f8:b3:92:da:25:52:60:ef:39:47:57:76:ce:
                    7e:29:b8:28:0d:97:08:ab:f6:4f:b3:ec:9d:b2:78:
                    40:9e:0b:a7:9d:9f:ee:b3:14:1a:f9:0d:82:d9:f5:
                    6e:62:2c:23:4b:ad:d9:de:db:99:9c:a4:67:0d:2a:
                    10:8f:a1:4a:2c:9a:2a:d0:cb:f9:08:09:74:af:d7:
                    a7:ec:17:67:dc:35:06:27:98:13:24:4d:2e:4f:dc:
                    e7:15:42:fb:54:e0:97:e9:8d:2a:12:d5:42:cb:17:
                    26:d8:c5:2a:67:83:41:fa:0f:f7:53:52:c8:7d:a0:
                    f8:1f:56:41:e4:c4:13:71:74:37:0d:f7:2b:0b:ae:
                    ac:da:80:8f:82:66:a5:af:86:73:f8:05:0a:17:69:
                    7a:c7:c1:46:d2:98:fa:84:cf:b3:cc:8f:43:9f:31:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4A:A4:42:25:AB:13:E8:DA:5E:D1:C9:AB:C1:89:FA:08:42:1E:33
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:27:db:c5:14:bb:2d:81:84:a7:57:74:43:00:08:86:fe:3f:
         5d:83:54:43:f3:2a:62:78:c9:32:c2:3d:ec:a6:05:4c:50:95:
         e3:dc:9c:8b:a5:00:b9:5b:9a:a5:a8:37:a2:81:d8:39:6f:3d:
         96:b6:bd:11:31:7a:7b:fa:ee:c0:05:5f:2c:3a:e5:22:bb:6d:
         34:93:c4:56:36:db:49:7e:b1:c1:f0:56:c1:33:2c:4c:59:1f:
         f3:46:8f:ae:6a:fc:8c:41:75:22:a2:fc:26:34:9f:59:28:f3:
         35:d5:45:cc:86:4e:82:77:66:24:4a:b1:e6:2c:e6:b8:4e:b2:
         39:52:82:af:65:5b:96:9b:12:54:45:23:df:00:bf:bf:14:d9:
         89:cd:8b:4a:bd:df:34:f3:0f:3f:4c:38:cb:c9:05:2d:58:50:
         f6:eb:8c:1d:3e:4a:5a:27:7f:44:bf:09:31:82:dc:f2:11:13:
         79:c8:50:34:d9:b8:cd:a0:a0:81:a1:03:8c:8d:72:94:6c:e5:
         17:50:89:39:2a:bd:3a:49:0e:06:8f:dc:a0:af:0d:e0:9f:81:
         8c:2d:26:21:46:5a:73:c9:22:af:b0:a5:95:8e:bc:72:47:14:
         b7:3f:84:7d:d1:d4:af:30:21:b2:83:92:ae:e5:b4:b9:4e:46:
         5a:88:b2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsG2PtlPO6ooZIObU7D+FTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm
ZjhmMzkwHhcNMjUxMjEwMDYwMDQxWhcNMjUxMjExMDYwMDQxWjAzMTEwLwYDVQQD
EyhlODRhYTQ0MjI1YWIxM2U4ZGE1ZWQxYzlhYmMxODlmYTA4NDIxZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYHv2aankH9gjzZj4/mxtyWKhGsJ
fxUlt80tdx/whsSRZDCT9UWwJ1gQ+iHSvzRsccGtmxcOf4HaUl1aSJBEpMs69wt1
/ArewOskMTN6T18c0lMEKzcBdqUT5fizktolUmDvOUdXds5+KbgoDZcIq/ZPs+yd
snhAngunnZ/usxQa+Q2C2fVuYiwjS63Z3tuZnKRnDSoQj6FKLJoq0Mv5CAl0r9en
7Bdn3DUGJ5gTJE0uT9znFUL7VOCX6Y0qEtVCyxcm2MUqZ4NB+g/3U1LIfaD4H1ZB
5MQTcXQ3DfcrC66s2oCPgmalr4Zz+AUKF2l6x8FG0pj6hM+zzI9DnzFjcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhKpEIlqxPo2l7RyavBifoIQh4zMB8GA1UdIwQY
MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt
NzJjODMxMjg3NjFiLzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi
LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCfbxRS7
LYGEp1d0QwAIhv4/XYNUQ/MqYnjJMsI97KYFTFCV49yci6UAuVuapag3ooHYOW89
lra9ETF6e/ruwAVfLDrlIrttNJPEVjbbSX6xwfBWwTMsTFkf80aPrmr8jEF1IqL8
JjSfWSjzNdVFzIZOgndmJEqx5izmuE6yOVKCr2VblpsSVEUj3wC/vxTZic2LSr3f
NPMPP0w4y8kFLVhQ9uuMHT5KWid/RL8JMYLc8hETechQNNm4zaCggaEDjI1ylGzl
F1CJOSq9OkkOBo/coK8N4J+BjC0mIUZac8kir7CllY68ckcUtz+EfdHUrzAhsoOS
ruW0uU5GWoiyfg==
-----END CERTIFICATE-----
Generated at Wed Dec 10 09:24:15 2025 by rpki-client