This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File:                     x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier:          hLeuQdgRwAzbFv8/Tu8qFZiMi+ZeIWjYu95E4lGA0Lo=
Subject key identifier:   70:6D:21:B8:E1:FA:28:11:0D:A8:15:33:E2:1D:A1:C5:B6:6B:36:6F
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer:       /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial:       019B243F2BF99C5157B229D30B78F03C212D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number:          124B
Signing time:             Mon 15 Dec 2025 23:01:18 +0000
Manifest this update:     Mon 15 Dec 2025 23:01:18 +0000
Manifest next update:     Tue 16 Dec 2025 23:01:18 +0000
Files and hashes:         1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
                          2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
                          3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: gg28Ctscv/qohKOIRHyXCCQyDI5dSOMrGmra2aMMjc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:3f:2b:f9:9c:51:57:b2:29:d3:0b:78:f0:3c:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
        Validity
            Not Before: Dec 15 23:01:18 2025 GMT
            Not After : Dec 16 23:01:18 2025 GMT
        Subject: CN=706d21b8e1fa28110da81533e21da1c5b66b366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:57:e4:56:05:fa:e7:e1:0a:13:0a:fa:f1:
                    ca:05:2a:5c:51:96:09:a9:a6:e9:33:14:da:f9:c0:
                    ee:96:f4:05:5b:fa:a5:8d:52:67:a2:6b:df:ef:ad:
                    f7:3f:3b:97:d4:b6:23:58:75:e1:79:72:89:6a:50:
                    6f:fb:ef:16:e5:56:f3:f2:82:18:c7:99:f5:c0:4b:
                    69:15:4a:0d:27:26:43:52:6e:f0:59:92:25:d7:a7:
                    c7:5e:99:72:b5:21:fe:8d:84:4d:92:32:b8:38:a2:
                    18:e9:88:c0:40:32:8d:7a:7a:47:41:cb:42:51:8d:
                    ad:42:4d:b0:21:fe:a3:a2:86:22:de:db:47:10:e1:
                    db:5e:65:34:ad:ea:43:cc:96:0b:f7:41:50:ca:18:
                    40:39:ac:80:19:e2:c1:5d:22:52:1f:48:b7:d9:53:
                    c8:ad:1d:3a:a1:f8:ce:86:32:98:0e:95:49:38:b9:
                    80:76:b4:c5:d9:9f:d5:87:60:dd:2d:e2:c8:1b:4c:
                    8a:b1:1c:e9:89:ea:02:f1:71:55:0b:59:ed:cc:5d:
                    e9:3d:ac:c8:20:c8:e4:0a:17:07:21:96:fb:f3:18:
                    e2:4d:f7:c4:ed:f1:2d:93:42:d4:e9:9c:67:e6:c1:
                    f8:77:e9:49:e1:42:80:0d:1e:dc:e2:55:6f:0b:f6:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:21:B8:E1:FA:28:11:0D:A8:15:33:E2:1D:A1:C5:B6:6B:36:6F
            X509v3 Authority Key Identifier:
                keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:cb:37:a8:bf:8a:ad:b8:d6:12:ed:a4:34:8a:b9:0d:3e:
         20:94:ac:1e:9c:a4:5f:f0:bd:7a:11:61:e5:58:87:a6:56:46:
         56:41:47:7a:3f:07:cd:e0:f6:31:97:30:eb:47:c0:fd:87:82:
         d9:90:ac:80:a4:10:3a:1d:fe:08:e3:8b:80:a8:f1:3f:36:cc:
         65:13:f7:e6:05:fb:a6:43:6f:a3:f8:ac:12:6f:6e:2c:c8:bf:
         a2:ac:ff:24:d7:59:ff:4b:a3:6f:ed:ab:b7:b7:a7:17:5c:9d:
         92:d9:6e:3a:4b:3d:2c:a3:d5:d0:ea:0f:77:a0:4f:cc:33:1f:
         86:3e:27:24:a3:2b:e9:aa:5c:33:7f:e3:fa:89:14:55:b8:83:
         04:44:43:ad:67:19:38:de:01:b1:a0:56:bf:d2:38:4c:07:79:
         fb:bf:23:9a:5f:1a:d9:14:b2:9d:92:99:fc:9f:1f:af:5e:37:
         a9:89:8f:01:15:b1:d1:02:e6:44:4f:38:cb:de:93:ac:8f:a4:
         39:f7:47:57:d7:cf:9b:27:4b:4e:7a:b4:00:fc:c0:03:db:2c:
         75:2c:93:fb:92:f4:dc:0d:07:96:de:fa:0a:12:aa:20:9c:a8:
         48:2d:fd:61:e1:ef:4c:05:89:97:c3:b0:3a:27:03:9d:61:39:
         01:79:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 09:47:01 2025 by rpki-client