This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          EimQZRdIng1ey1e8IjAhXdFU3+/nECgyT2ZdqXT6YRc=
Subject key identifier:   F8:11:CD:06:8F:25:09:94:20:45:F0:0E:9C:E6:A8:19:2F:CD:FD:58
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019B1BAAA78750617260A9B3EA93F5911212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          1781
Signing time:             Sun 14 Dec 2025 07:02:07 +0000
Manifest this update:     Sun 14 Dec 2025 07:02:07 +0000
Manifest next update:     Mon 15 Dec 2025 07:02:07 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: 7+sovT3eYtE0mJLm2L2u6e/twtqQZR3Bv/onU0Z09Zc=)
                          2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=)
                          3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=)
                          4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=)
                          5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=)
                          6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=)
                          7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=)
                          8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=)
                          9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=)
                          10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=)
                          11: vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa (hash: Fo0TpQJlU+oLHQtTrtQM8XKofzaFbmPNMXg/+v+0LZE=)
                          12: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:aa:a7:87:50:61:72:60:a9:b3:ea:93:f5:91:12:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Dec 14 07:02:07 2025 GMT
            Not After : Dec 15 07:02:07 2025 GMT
        Subject: CN=f811cd068f2509942045f00e9ce6a8192fcdfd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:75:fd:d8:78:53:b6:cf:48:1d:6e:5b:28:
                    ba:c4:b8:b9:4c:79:33:92:3f:ea:c0:e9:4b:dc:9a:
                    cd:df:7c:2a:f0:68:f9:1b:15:6c:fb:2c:d4:79:db:
                    24:0a:d7:72:42:e3:c7:16:1e:7b:7e:94:c5:4c:29:
                    a4:24:c6:59:4b:23:35:c6:2f:2c:a0:67:ec:22:aa:
                    42:13:aa:74:34:2b:fa:9c:3a:e9:93:59:b0:ea:bb:
                    a9:71:44:15:63:8b:f1:7b:da:2e:93:33:b1:b7:47:
                    2e:c5:fb:a7:d1:9e:0c:f8:5f:e9:8e:f3:bb:df:ee:
                    9d:0f:ff:c2:09:ae:f7:53:42:c8:83:bb:36:8e:46:
                    63:51:81:8d:ca:63:b8:b0:c3:3e:0c:76:a4:4a:60:
                    f1:27:72:75:62:9d:26:9b:02:05:b2:ab:03:97:b9:
                    82:80:81:f9:a7:6d:a5:27:c6:59:0f:b9:2a:cb:b7:
                    3d:0c:11:ea:33:ea:78:e2:a3:da:01:a4:e6:7b:44:
                    a5:79:84:39:aa:98:c5:f6:d8:59:d0:1e:24:46:e6:
                    56:3b:9f:17:71:94:4e:2d:04:d2:37:c5:a9:23:51:
                    7c:66:ae:2e:60:0f:f9:e9:06:37:c2:1e:b5:f1:a2:
                    dc:47:42:54:52:8c:c6:77:44:c1:66:70:57:2e:13:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:CD:06:8F:25:09:94:20:45:F0:0E:9C:E6:A8:19:2F:CD:FD:58
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:80:de:fe:08:2f:73:9b:a5:9b:44:f3:c0:71:be:da:d9:
         d2:33:55:92:e2:21:d5:e2:9b:d1:8c:37:a3:74:b3:7a:1b:e3:
         e2:71:36:bc:40:49:02:89:bb:f2:1f:02:db:03:04:cd:cd:f5:
         0d:dd:ba:86:f7:2f:4c:a8:1f:0e:80:85:67:e0:07:39:35:18:
         6d:f1:f9:b2:a9:86:8a:c2:d8:c7:d5:16:16:eb:fc:7e:6b:90:
         14:a4:ab:51:e8:c9:1e:ae:a0:90:19:7c:72:6f:27:c8:e2:ca:
         2a:d1:7c:f2:63:06:a2:e2:a5:f3:de:cd:db:5b:fa:dc:c8:5c:
         ed:9d:1c:50:09:14:ee:40:42:ca:0d:f1:56:47:f0:cf:79:5d:
         28:80:8d:6b:6e:33:3c:9c:5a:6d:25:46:fd:67:53:06:ba:e6:
         f2:95:37:60:c2:99:aa:62:d9:a9:cc:e3:76:9f:28:60:e2:d5:
         81:ae:ab:42:a7:bb:c8:9b:9d:4b:bf:1b:9e:89:94:c7:d2:28:
         23:c2:34:30:48:75:be:22:15:c9:57:12:3e:11:13:13:16:1d:
         36:3d:b8:8e:fb:83:b5:c3:05:21:71:e3:dc:5d:a5:85:a5:85:
         3a:18:cc:15:a7:39:bb:3a:19:8c:6c:ec:92:ab:67:7f:81:c3:
         96:b4:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 11:36:19 2025 by rpki-client