This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File:                     cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier:          Cz064hzLg94/tofc+2aE90pli4kbFq1ssF+e3DNEeWQ=
Subject key identifier:   46:B0:2F:98:22:C3:F3:2B:7D:4D:BE:82:CA:00:5C:F3:3A:EC:6D:FD
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer:       /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial:       019B46CA6EAA24F5CDCC130633A440B98172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number:          1793
Signing time:             Mon 22 Dec 2025 16:00:30 +0000
Manifest this update:     Mon 22 Dec 2025 16:00:30 +0000
Manifest next update:     Tue 23 Dec 2025 16:00:30 +0000
Files and hashes:         1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=)
                          2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=)
                          3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: u3l1epQxyW6r24oBZxMnUx7j3Sga/zfzANU9hU7wZvE=)
                          4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:ca:6e:aa:24:f5:cd:cc:13:06:33:a4:40:b9:81:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
        Validity
            Not Before: Dec 22 16:00:30 2025 GMT
            Not After : Dec 23 16:00:30 2025 GMT
        Subject: CN=46b02f9822c3f32b7d4dbe82ca005cf33aec6dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:34:8e:01:cd:22:aa:e2:80:ea:16:cb:0f:
                    3f:7b:51:9f:cc:a1:ab:1a:aa:4e:fc:fd:c6:96:bd:
                    45:d9:50:a4:d7:32:56:1a:12:44:aa:46:bb:8a:ff:
                    e7:19:ad:04:2e:ce:a9:09:4e:08:0f:dc:cd:09:71:
                    6a:0f:ba:a8:2c:5b:b6:ab:98:34:04:a6:73:0b:90:
                    5a:cf:f7:d9:33:82:80:10:2c:e2:ba:76:e7:54:9f:
                    7b:bb:40:7a:f3:72:d5:e4:8a:7e:59:81:00:ba:b1:
                    09:f0:df:ad:c9:ad:27:0b:a1:96:76:97:b5:6e:8e:
                    97:15:7f:4a:4a:e7:6f:24:5f:71:18:3b:9b:20:d8:
                    90:d5:2f:db:32:62:85:86:31:00:c3:e4:4e:e7:37:
                    ab:5e:46:d4:5f:e7:40:62:88:ba:7b:6f:00:06:9b:
                    97:24:a1:0e:1c:ac:13:c5:bb:2b:10:79:46:39:3d:
                    2d:a2:31:a4:cc:ee:33:3a:ca:8c:1c:05:28:ab:b3:
                    d4:81:f5:05:d7:75:e2:c2:32:cb:22:c4:69:fa:3e:
                    95:af:14:94:23:35:06:9c:9e:72:e9:10:35:9b:93:
                    55:8f:8b:b0:9a:5e:27:bb:74:46:00:b8:9d:b8:b1:
                    85:c7:cb:a0:ee:d4:e5:f6:9e:02:a2:93:8d:29:a5:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B0:2F:98:22:C3:F3:2B:7D:4D:BE:82:CA:00:5C:F3:3A:EC:6D:FD
            X509v3 Authority Key Identifier:
                keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:dc:60:84:1a:c8:27:4b:51:77:34:a3:82:5b:42:59:fe:8f:
         05:d7:90:55:b4:f2:53:d4:70:91:96:45:94:94:0b:db:d8:fc:
         9a:1a:09:61:15:6c:4d:1e:bb:b4:ec:48:f8:47:41:07:9d:4d:
         c8:43:5e:d3:24:e1:46:46:5d:69:05:28:42:9d:f8:b4:40:a9:
         ff:2a:e3:64:8f:e4:24:ad:28:48:4d:45:d2:71:99:6d:7d:4e:
         af:5c:b7:35:75:df:97:68:65:55:3f:b9:5f:26:a0:35:2c:d2:
         d3:54:96:1a:82:ea:0f:cf:28:6e:fe:0d:a1:52:8d:dd:7d:11:
         21:8b:16:4b:b6:46:c5:63:57:89:55:2b:29:a4:03:ed:d6:4d:
         6e:72:28:60:b1:85:ed:75:34:cc:39:d7:bf:30:85:a6:e6:18:
         54:f0:fa:67:f8:56:69:79:d1:fa:02:4d:78:78:33:39:36:8e:
         16:39:5e:55:b4:e9:4d:23:28:20:b8:62:a2:04:3a:8b:2c:64:
         e1:03:be:b9:be:f3:b7:3e:8c:61:8b:d4:29:66:c8:63:35:d6:
         d4:c4:d2:6d:40:29:6a:70:d3:5f:26:61:11:45:40:f5:d9:11:
         63:8b:7a:7c:5c:28:dc:5c:ed:6e:a5:4f:2c:3d:a5:ea:e1:81:
         86:da:22:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtGym6qJPXNzBMGM6RAuYFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2
NjQzNDQwHhcNMjUxMjIyMTYwMDMwWhcNMjUxMjIzMTYwMDMwWjAzMTEwLwYDVQQD
Eyg0NmIwMmY5ODIyYzNmMzJiN2Q0ZGJlODJjYTAwNWNmMzNhZWM2ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlk0jgHNIqrigOoWyw8/e1GfzKGr
GqpO/P3Glr1F2VCk1zJWGhJEqka7iv/nGa0ELs6pCU4ID9zNCXFqD7qoLFu2q5g0
BKZzC5Baz/fZM4KAECziunbnVJ97u0B683LV5Ip+WYEAurEJ8N+tya0nC6GWdpe1
bo6XFX9KSudvJF9xGDubINiQ1S/bMmKFhjEAw+RO5zerXkbUX+dAYoi6e28ABpuX
JKEOHKwTxbsrEHlGOT0tojGkzO4zOsqMHAUoq7PUgfUF13XiwjLLIsRp+j6VrxSU
IzUGnJ5y6RA1m5NVj4uwml4nu3RGALiduLGFx8ug7tTl9p4CopONKaX0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEawL5giw/MrfU2+gsoAXPM67G39MB8GA1UdIwQY
MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt
NzZiMDMyNWMzYjA3LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3
LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5dxghBrI
J0tRdzSjgltCWf6PBdeQVbTyU9RwkZZFlJQL29j8mhoJYRVsTR67tOxI+EdBB51N
yENe0yThRkZdaQUoQp34tECp/yrjZI/kJK0oSE1F0nGZbX1Or1y3NXXfl2hlVT+5
XyagNSzS01SWGoLqD88obv4NoVKN3X0RIYsWS7ZGxWNXiVUrKaQD7dZNbnIoYLGF
7XU0zDnXvzCFpuYYVPD6Z/hWaXnR+gJNeHgzOTaOFjleVbTpTSMoILhiogQ6iyxk
4QO+ub7ztz6MYYvUKWbIYzXW1MTSbUApanDTXyZhEUVA9dkRY4t6fFwo3FztbqVP
LD2l6uGBhtoi+Q==
-----END CERTIFICATE-----
Generated at Tue Dec 23 01:58:22 2025 by rpki-client