This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File:                     01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier:          I33rES7oQ6DV+/FxrsQfwRQ6iGUzCd2BhKDnIqmx4oE=
Subject key identifier:   D2:04:40:8A:17:E3:3B:6F:53:32:B3:F0:25:92:00:E8:5B:91:05:24
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer:       /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial:       019B2B8AD313621DAEEAEA527607FABE2ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 09:01:16 +0000
Manifest this update:     Wed 17 Dec 2025 09:01:16 +0000
Manifest next update:     Thu 18 Dec 2025 09:01:16 +0000
Files and hashes:         1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: uEJt4tQJoEWIoeSREdW57pHGdPbfN5NG3Z0hMuxrTL4=)
                          2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
                          3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:8a:d3:13:62:1d:ae:ea:ea:52:76:07:fa:be:2e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
        Validity
            Not Before: Dec 17 09:01:16 2025 GMT
            Not After : Dec 18 09:01:16 2025 GMT
        Subject: CN=d204408a17e33b6f5332b3f0259200e85b910524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:4d:f2:c3:b4:e4:8d:12:c5:49:96:a6:a4:
                    d1:ea:2a:b1:3d:f4:b7:e2:33:09:63:4a:4c:66:ed:
                    be:0e:67:0d:17:8a:f6:36:b3:38:72:f0:48:46:00:
                    f4:c3:f9:3c:1d:54:ad:20:a3:ff:85:b7:ea:26:6a:
                    34:95:82:73:40:87:26:f4:ce:a6:1d:f1:7b:93:65:
                    20:ae:43:47:65:39:58:41:da:09:1f:9b:64:44:92:
                    8a:4c:d0:44:ef:6c:39:d7:2b:58:31:2b:dc:8d:c2:
                    56:69:e0:e9:18:ac:9b:4b:c6:b6:5a:31:10:5f:e2:
                    d7:49:ea:4c:ec:8b:7d:87:6f:7c:6c:48:f7:28:e3:
                    e3:63:12:60:c3:9a:7d:11:ee:a4:dd:d8:b3:8a:09:
                    ce:f5:fd:33:9c:b0:7a:22:e5:9f:49:16:59:86:87:
                    a7:ef:3b:24:66:db:6d:ad:ee:fa:48:c6:5d:4d:88:
                    1d:50:c0:22:b5:db:bd:9b:a9:2d:75:6d:a5:6f:0e:
                    57:26:31:6a:05:66:c7:6f:5e:c7:fd:59:c9:a3:90:
                    2e:54:d3:58:ea:61:eb:6c:65:43:6a:d8:1f:55:64:
                    9a:09:48:91:a4:43:8b:e0:da:be:3c:13:da:88:14:
                    54:f7:79:05:74:11:c4:7b:ac:71:28:f8:34:01:8f:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:40:8A:17:E3:3B:6F:53:32:B3:F0:25:92:00:E8:5B:91:05:24
            X509v3 Authority Key Identifier:
                keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:e6:66:6c:83:93:d4:a9:80:24:af:72:d3:41:24:b7:c1:
         e1:f3:df:ac:f5:be:1f:04:d0:85:49:38:43:b7:1f:80:1d:f5:
         72:43:c4:96:37:2b:72:d6:23:85:92:14:da:df:23:40:d9:09:
         cb:c3:e2:ca:38:3c:49:d3:b5:2c:48:53:14:8c:c7:aa:ed:79:
         ed:b5:79:7d:e2:e7:75:3c:2b:2a:32:77:e3:9e:cc:0b:59:61:
         1a:63:d8:15:f3:be:4b:60:2d:7e:93:02:e6:21:2d:b8:dd:bf:
         05:f6:99:41:09:54:66:67:8c:c7:0d:9e:41:6f:f6:2c:99:15:
         0a:d9:04:9c:0f:ef:20:c6:a2:38:ce:79:ff:5a:48:c7:03:a1:
         0a:3f:7b:15:63:fc:2c:d4:11:2a:91:e0:d2:de:8a:2a:3a:3b:
         88:2e:cf:e9:11:58:93:21:a2:3e:53:34:f6:63:88:5a:30:98:
         2f:6e:4d:33:8b:55:86:fb:5d:30:e4:3f:8e:5b:fc:f4:d0:7e:
         e2:01:7a:03:2e:f6:e7:e3:ed:14:ff:16:63:49:08:40:93:7d:
         17:55:1b:e2:f0:57:57:f4:75:f1:8e:96:ef:7c:e1:82:1f:79:
         ce:f8:85:14:0f:21:dc:00:bb:d0:02:af:13:13:65:95:c3:0c:
         6f:f8:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:25:20 2025 by rpki-client