This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File:                     AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier:          QT2S5R+C3OiS/EJ96gkE+NW8nnbzZH4EM49VP4fHfFI=
Subject key identifier:   1A:0A:8F:DD:8D:A5:E7:19:3C:86:46:40:E3:01:3B:4A:14:5D:E9:46
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer:       /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial:       019B35A0F9CC737946E6BB230F5F75C4EF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number:          0AA2
Signing time:             Fri 19 Dec 2025 08:01:40 +0000
Manifest this update:     Fri 19 Dec 2025 08:01:40 +0000
Manifest next update:     Sat 20 Dec 2025 08:01:40 +0000
Files and hashes:         1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: zzhYmY9Lk/9IOaArgBieEpDK2dEW7Ati4av4Ek3qYEM=)
                          2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:f9:cc:73:79:46:e6:bb:23:0f:5f:75:c4:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
        Validity
            Not Before: Dec 19 08:01:40 2025 GMT
            Not After : Dec 20 08:01:40 2025 GMT
        Subject: CN=1a0a8fdd8da5e7193c864640e3013b4a145de946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:d6:2e:a7:27:96:5d:47:6e:22:3a:ce:6e:
                    a8:a6:35:27:aa:54:ad:e4:a5:e7:ce:0d:de:c4:ee:
                    71:96:7a:0d:59:1a:6d:fe:d0:b0:f2:f1:62:88:c5:
                    68:7a:f4:1f:bf:7e:75:eb:86:34:1a:17:21:d4:67:
                    50:8e:b3:d1:e8:e0:29:1f:e8:57:64:a7:37:28:b6:
                    6b:0d:a7:a9:26:41:77:d5:74:a6:7b:2a:98:38:a3:
                    ee:47:33:91:26:0b:f5:42:8e:5a:f6:e5:c9:bb:7a:
                    13:41:6d:ed:72:32:d8:d6:4f:9f:40:1a:67:4a:4e:
                    8c:be:34:d1:90:eb:8f:5a:da:f9:fd:78:56:33:ea:
                    f9:d9:46:ce:11:ae:b2:6d:ed:38:c3:f3:aa:9c:57:
                    62:b9:b0:3d:b5:9d:78:e2:2b:40:5d:b3:a3:a8:af:
                    b0:29:01:e3:75:b5:44:b4:81:d4:cf:9d:89:77:fe:
                    4f:7f:f6:fd:db:6d:1a:bc:23:5b:54:09:6d:93:e7:
                    eb:85:30:3b:ef:b3:6d:bf:89:ea:d8:9c:99:72:78:
                    e2:59:82:72:8b:6e:d9:fd:3a:a8:d9:8f:7e:0c:ff:
                    31:66:f0:1c:f0:13:85:79:0c:ae:c1:b6:28:fc:79:
                    34:37:02:5e:9f:38:39:20:30:47:a4:a6:d9:d3:ab:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:8F:DD:8D:A5:E7:19:3C:86:46:40:E3:01:3B:4A:14:5D:E9:46
            X509v3 Authority Key Identifier:
                keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:8d:f5:db:3f:8f:df:77:ea:c2:8c:4f:94:2d:4b:35:12:
         23:93:33:ad:a4:da:ae:4f:88:af:4c:78:a4:db:fb:05:78:77:
         95:1a:c3:1b:76:c7:da:1b:80:92:6c:c5:2a:d8:77:4b:e6:83:
         b5:c4:5a:99:d8:58:2f:65:54:44:21:69:fb:77:1a:b0:b0:10:
         62:a9:46:1a:08:3c:6e:93:cb:05:cc:38:f9:f8:71:d1:0d:11:
         da:18:fa:36:b0:06:89:ad:86:80:37:8d:a8:1f:63:54:b3:2b:
         ad:8c:97:1d:6c:df:89:78:fa:ac:92:d0:c7:ab:65:0b:71:eb:
         75:48:19:42:53:72:4d:49:2b:cd:9a:4c:6f:80:10:cc:c0:9d:
         9e:2c:11:1e:35:c7:d3:30:95:4e:0e:23:d4:c5:60:9c:f8:e1:
         db:89:15:10:c2:38:31:13:7c:ed:20:a7:2e:65:d5:2c:03:9c:
         bd:80:4b:11:b1:96:9f:76:4e:fd:ba:e4:30:ae:4f:42:ba:2a:
         61:6d:9f:6f:2a:cf:2a:44:ec:9a:7d:b4:7d:f5:a1:d3:5a:d8:
         f5:a0:ff:3d:c3:35:d9:8c:9e:52:53:fc:fc:aa:a4:e3:58:3b:
         2b:b9:29:60:04:69:0b:f8:86:00:31:4e:4e:83:07:aa:a4:1d:
         e5:d1:16:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs1oPnMc3lG5rsjD191xO+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjUxMjE5MDgwMTQwWhcNMjUxMjIwMDgwMTQwWjAzMTEwLwYDVQQD
EygxYTBhOGZkZDhkYTVlNzE5M2M4NjQ2NDBlMzAxM2I0YTE0NWRlOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/fWLqcnll1HbiI6zm6opjUnqlSt
5KXnzg3exO5xlnoNWRpt/tCw8vFiiMVoevQfv35164Y0Ghch1GdQjrPR6OApH+hX
ZKc3KLZrDaepJkF31XSmeyqYOKPuRzORJgv1Qo5a9uXJu3oTQW3tcjLY1k+fQBpn
Sk6MvjTRkOuPWtr5/XhWM+r52UbOEa6ybe04w/OqnFdiubA9tZ144itAXbOjqK+w
KQHjdbVEtIHUz52Jd/5Pf/b9220avCNbVAltk+frhTA777Ntv4nq2JyZcnjiWYJy
i27Z/Tqo2Y9+DP8xZvAc8BOFeQyuwbYo/Hk0NwJenzg5IDBHpKbZ06s6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoKj92NpecZPIZGQOMBO0oUXelGMB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpiN9ds/
j9936sKMT5QtSzUSI5MzraTark+Ir0x4pNv7BXh3lRrDG3bH2huAkmzFKth3S+aD
tcRamdhYL2VURCFp+3casLAQYqlGGgg8bpPLBcw4+fhx0Q0R2hj6NrAGia2GgDeN
qB9jVLMrrYyXHWzfiXj6rJLQx6tlC3HrdUgZQlNyTUkrzZpMb4AQzMCdniwRHjXH
0zCVTg4j1MVgnPjh24kVEMI4MRN87SCnLmXVLAOcvYBLEbGWn3ZO/brkMK5PQroq
YW2fbyrPKkTsmn20ffWh01rY9aD/PcM12YyeUlP8/Kqk41g7K7kpYARpC/iGADFO
ToMHqqQd5dEWJQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:36:30 2025 by rpki-client