This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          K4zz3XzDUdALl/fDEF9TgV5kMlMtFOSth4iMNNVRomk=
Subject key identifier:   C5:63:33:BA:5B:DD:AB:B4:81:B0:7D:F9:2A:FF:CD:98:EA:73:56:42
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019AEB62E53DB325A1F57F909E6D287E4EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          1434
Signing time:             Thu 04 Dec 2025 22:01:58 +0000
Manifest this update:     Thu 04 Dec 2025 22:01:58 +0000
Manifest next update:     Fri 05 Dec 2025 22:01:58 +0000
Files and hashes:         1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
                          2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: fx6lUF+TvKISvN36M98wqAnFE3FCwYVGqJ9QE93zV+M=)
                          3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
                          4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
                          5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
                          6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
                          7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
                          8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:eb:62:e5:3d:b3:25:a1:f5:7f:90:9e:6d:28:7e:4e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Dec  4 22:01:58 2025 GMT
            Not After : Dec  5 22:01:58 2025 GMT
        Subject: CN=c56333ba5bddabb481b07df92affcd98ea735642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:f3:bd:3a:38:59:6a:9a:69:3c:de:43:93:
                    b3:f5:23:d0:1e:2c:a8:65:5a:af:44:32:3a:c4:04:
                    e8:0a:fc:df:e1:52:0e:62:d0:0d:5f:7a:3a:31:59:
                    09:1b:c9:67:37:f8:af:25:6c:27:2e:f6:ef:cb:13:
                    02:de:0b:19:6b:73:6b:76:53:af:d9:6e:ec:4c:40:
                    af:af:a8:ca:25:11:57:67:3a:58:78:b8:1e:5f:57:
                    70:dd:c1:96:1a:4f:3c:52:61:81:fd:33:b5:51:e4:
                    aa:87:75:33:78:d7:59:96:95:6e:cd:14:51:8c:3f:
                    95:c2:0f:63:c1:d9:21:3d:7f:9f:1c:a3:38:fa:99:
                    64:c7:60:5c:f9:45:cd:58:92:76:eb:93:c3:76:ef:
                    cf:13:37:3f:d1:3e:01:31:01:c7:0b:91:67:30:be:
                    23:97:1a:19:15:09:20:b4:a6:19:33:95:57:6c:b0:
                    e6:79:99:7d:ef:2e:72:8a:3b:9e:68:f3:d1:8b:12:
                    c2:5c:d4:57:60:19:fb:a9:31:44:f6:96:55:11:21:
                    42:01:9c:eb:6d:ce:0f:eb:65:ee:b6:06:2d:2b:9c:
                    db:51:a7:5d:92:c4:91:d5:d2:8c:8d:83:2c:02:d4:
                    60:6d:36:4c:ea:99:e7:c5:92:dc:49:39:d5:45:82:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:33:BA:5B:DD:AB:B4:81:B0:7D:F9:2A:FF:CD:98:EA:73:56:42
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:05:52:89:3c:e3:24:b2:12:ca:a8:f7:dd:05:15:e1:1e:6f:
         2b:35:85:2f:d1:5e:94:1e:a5:9a:f4:2e:f9:1a:48:e7:c7:b7:
         59:68:6e:27:70:1d:74:81:6f:d2:00:68:65:61:11:c9:de:5b:
         e0:04:cc:77:2e:ec:74:a1:f2:80:d2:55:4c:4b:a7:57:64:c2:
         82:59:86:7e:32:bf:e5:30:1a:58:4e:59:91:c1:54:de:92:9c:
         bb:06:f6:7a:9b:35:30:26:a9:10:6f:b0:76:14:71:75:3a:1b:
         0c:c4:08:ef:67:10:bd:d7:bc:84:e3:0c:c0:ad:22:18:79:57:
         17:e2:4e:56:84:94:63:a2:80:82:66:9a:98:f8:e4:7b:0f:7d:
         3a:c8:f6:9c:3f:ce:5a:fe:ce:43:b9:ed:45:eb:a7:cf:93:9d:
         ef:15:0f:29:28:69:e9:28:90:18:0e:de:9a:b5:5c:c4:2a:c0:
         c8:b7:a7:d3:c3:17:fd:97:89:25:6f:cd:77:55:e1:50:d1:27:
         41:ca:c4:cf:8d:68:a7:ff:b0:46:70:3e:b4:02:0e:54:c3:90:
         d2:04:41:48:ff:1f:3b:96:8a:a6:67:8f:eb:14:aa:29:1f:25:
         b8:fa:86:43:5d:98:88:ff:9f:06:51:2c:5b:51:c9:92:0d:ca:
         74:3f:43:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrrYuU9syWh9X+Qnm0ofk71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUxMjA0MjIwMTU4WhcNMjUxMjA1MjIwMTU4WjAzMTEwLwYDVQQD
EyhjNTYzMzNiYTViZGRhYmI0ODFiMDdkZjkyYWZmY2Q5OGVhNzM1NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5fzvTo4WWqaaTzeQ5Oz9SPQHiyo
ZVqvRDI6xAToCvzf4VIOYtANX3o6MVkJG8lnN/ivJWwnLvbvyxMC3gsZa3NrdlOv
2W7sTECvr6jKJRFXZzpYeLgeX1dw3cGWGk88UmGB/TO1UeSqh3UzeNdZlpVuzRRR
jD+Vwg9jwdkhPX+fHKM4+plkx2Bc+UXNWJJ265PDdu/PEzc/0T4BMQHHC5FnML4j
lxoZFQkgtKYZM5VXbLDmeZl97y5yijueaPPRixLCXNRXYBn7qTFE9pZVESFCAZzr
bc4P62XutgYtK5zbUaddksSR1dKMjYMsAtRgbTZM6pnnxZLcSTnVRYIZ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVjM7pb3au0gbB9+Sr/zZjqc1ZCMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQVSiTzj
JLISyqj33QUV4R5vKzWFL9FelB6lmvQu+RpI58e3WWhuJ3AddIFv0gBoZWERyd5b
4ATMdy7sdKHygNJVTEunV2TCglmGfjK/5TAaWE5ZkcFU3pKcuwb2eps1MCapEG+w
dhRxdTobDMQI72cQvde8hOMMwK0iGHlXF+JOVoSUY6KAgmaamPjkew99Osj2nD/O
Wv7OQ7ntReunz5Od7xUPKShp6SiQGA7emrVcxCrAyLen08MX/ZeJJW/Nd1XhUNEn
QcrEz41op/+wRnA+tAIOVMOQ0gRBSP8fO5aKpmeP6xSqKR8luPqGQ12YiP+fBlEs
W1HJkg3KdD9DKg==
-----END CERTIFICATE-----
Generated at Fri Dec 5 07:24:44 2025 by rpki-client