This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File:                     n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier:          F6CSqclHwXyoYdq8ZG43WtXxlIOnwuv/F+JK3aZVQt0=
Subject key identifier:   28:53:0F:93:0C:D2:74:E0:43:CF:DF:9A:25:14:DA:22:DD:9A:F0:BE
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer:       /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial:       019B3E6D3072670164FD79DC9EA83121DFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 01:01:41 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:41 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:41 +0000
Files and hashes:         1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
                          2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
                          3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
                          4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: br2c3f7S0kpHeZcvixqCIPZzqDseYFiXS3vIkS2Y86M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:30:72:67:01:64:fd:79:dc:9e:a8:31:21:df:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
        Validity
            Not Before: Dec 21 01:01:41 2025 GMT
            Not After : Dec 22 01:01:41 2025 GMT
        Subject: CN=28530f930cd274e043cfdf9a2514da22dd9af0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:04:a3:27:de:18:f0:a4:4c:24:f8:f4:90:
                    97:52:62:6a:b8:87:71:53:e7:c6:2b:62:93:ae:06:
                    8c:88:15:68:21:c3:3c:58:90:5a:99:e7:de:00:3f:
                    5e:cf:03:ea:0a:ed:18:15:9c:fc:6e:5e:90:0a:9e:
                    a2:c0:b0:11:b4:31:ae:47:8c:be:53:cc:79:6d:40:
                    ba:48:e3:a4:d4:b0:df:6f:1e:51:ec:62:2d:ae:b4:
                    1a:bb:d2:d8:f7:97:6f:6b:58:41:6a:d4:9f:d3:6f:
                    6b:f3:cb:24:00:e6:35:a3:9a:8d:2f:91:c9:64:29:
                    83:32:7c:29:64:63:89:aa:e4:de:75:17:ab:d7:5b:
                    88:af:46:b6:5d:ab:af:9c:60:f9:6c:82:18:01:48:
                    56:fb:74:e7:dc:d7:59:b1:84:71:e3:e3:4e:e5:fb:
                    57:0b:9c:06:a4:c3:4f:98:3a:20:54:21:3e:9c:be:
                    62:d7:ca:4e:04:56:20:9a:53:3f:df:82:28:11:a1:
                    f2:ae:51:5a:a3:43:c0:12:31:62:ab:e1:d1:75:71:
                    7f:32:ce:ef:5f:55:eb:a2:56:dd:a7:5f:cf:05:f9:
                    41:66:0f:9c:c2:cc:95:f6:24:d1:e5:e2:4c:bd:cc:
                    da:ef:db:21:4e:68:81:c3:e3:73:c2:21:20:dc:bd:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:0F:93:0C:D2:74:E0:43:CF:DF:9A:25:14:DA:22:DD:9A:F0:BE
            X509v3 Authority Key Identifier:
                keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:51:36:78:bb:46:08:64:1b:75:ba:88:f6:03:72:69:75:96:
         bf:c4:51:33:a2:44:5d:72:bb:bb:aa:49:62:d1:ed:8d:fb:49:
         15:42:3a:ca:b8:a4:3b:73:54:7b:a6:ef:c4:27:4c:96:93:e7:
         1f:a7:85:ed:5d:3f:fa:32:71:34:1d:e7:32:c3:5c:d5:6b:9f:
         bc:db:10:e7:9e:70:97:0b:38:ae:cf:02:9e:7d:40:6b:9f:c3:
         9b:f3:2d:f2:52:2c:46:1a:6f:5e:79:22:20:43:29:de:60:c7:
         ec:b7:e3:c6:e9:2b:02:c3:46:d4:86:71:61:be:88:86:62:b5:
         2e:b4:32:6d:7a:02:21:80:05:f2:52:19:bf:8a:e8:1a:ab:68:
         8e:41:b4:3e:79:83:3d:91:82:85:c2:93:5f:95:82:a9:90:6f:
         c3:f1:8e:aa:90:c1:76:87:c6:b9:05:cd:46:3a:7f:86:39:3a:
         2a:55:2f:60:d2:d2:35:19:fb:ab:fb:69:23:25:c2:68:81:8e:
         71:fc:75:08:d1:9d:44:43:d2:78:d5:d3:a7:a4:5f:86:62:7b:
         3f:5f:a3:c0:2f:ed:22:7c:dd:99:f5:3e:dd:f2:67:a7:79:1f:
         cc:0c:fc:e4:f3:94:8d:2e:1a:3b:48:c0:64:46:b9:db:ce:c8:
         a9:4a:36:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bTByZwFk/XncnqgxId/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh
MDRkMDAwHhcNMjUxMjIxMDEwMTQxWhcNMjUxMjIyMDEwMTQxWjAzMTEwLwYDVQQD
EygyODUzMGY5MzBjZDI3NGUwNDNjZmRmOWEyNTE0ZGEyMmRkOWFmMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcAEoyfeGPCkTCT49JCXUmJquIdx
U+fGK2KTrgaMiBVoIcM8WJBamefeAD9ezwPqCu0YFZz8bl6QCp6iwLARtDGuR4y+
U8x5bUC6SOOk1LDfbx5R7GItrrQau9LY95dva1hBatSf029r88skAOY1o5qNL5HJ
ZCmDMnwpZGOJquTedRer11uIr0a2XauvnGD5bIIYAUhW+3Tn3NdZsYRx4+NO5ftX
C5wGpMNPmDogVCE+nL5i18pOBFYgmlM/34IoEaHyrlFao0PAEjFiq+HRdXF/Ms7v
X1Xrolbdp1/PBflBZg+cwsyV9iTR5eJMvcza79shTmiBw+NzwiEg3L313QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChTD5MM0nTgQ8/fmiUU2iLdmvC+MB8GA1UdIwQY
MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt
N2QzMmNhMDY1YjY2LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2
LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlE2eLtG
CGQbdbqI9gNyaXWWv8RRM6JEXXK7u6pJYtHtjftJFUI6yrikO3NUe6bvxCdMlpPn
H6eF7V0/+jJxNB3nMsNc1WufvNsQ555wlws4rs8Cnn1Aa5/Dm/Mt8lIsRhpvXnki
IEMp3mDH7LfjxukrAsNG1IZxYb6IhmK1LrQybXoCIYAF8lIZv4roGqtojkG0PnmD
PZGChcKTX5WCqZBvw/GOqpDBdofGuQXNRjp/hjk6KlUvYNLSNRn7q/tpIyXCaIGO
cfx1CNGdREPSeNXTp6RfhmJ7P1+jwC/tInzdmfU+3fJnp3kfzAz85POUjS4aO0jA
ZEa5287IqUo2ww==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:44:42 2025 by rpki-client