This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File:                     A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier:          VI8Bo5Ew4PedzxYUYRYwQS7m41AmZWSoJdPjBCv72k8=
Subject key identifier:   6F:E8:73:7F:87:11:95:01:7C:C1:65:A4:21:98:B7:E5:86:A4:34:40
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer:       /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial:       019B6CC54F8B059A85CF05AD34606120FB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number:          13EE
Signing time:             Tue 30 Dec 2025 01:00:28 +0000
Manifest this update:     Tue 30 Dec 2025 01:00:28 +0000
Manifest next update:     Wed 31 Dec 2025 01:00:28 +0000
Files and hashes:         1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: tXOdnap/R7HaPqqWOsM2tFntGXqcj+/2KZ7nMSMuZjE=)
                          2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
                          3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 23:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:c5:4f:8b:05:9a:85:cf:05:ad:34:60:61:20:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
        Validity
            Not Before: Dec 30 01:00:28 2025 GMT
            Not After : Dec 31 01:00:28 2025 GMT
        Subject: CN=6fe8737f871195017cc165a42198b7e586a43440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:c3:9a:7f:a7:c5:7e:ff:aa:95:27:d9:f2:
                    ac:19:a2:38:14:e3:14:5b:c7:5a:8e:3e:11:bb:ef:
                    c6:79:59:b2:03:7b:38:f9:4b:e0:b4:84:23:a3:09:
                    be:17:77:bc:95:a8:c2:62:06:51:6c:fe:c9:6c:55:
                    bb:de:8b:fd:5b:75:b5:c6:e6:aa:0a:e6:f1:d9:69:
                    cf:bb:39:36:c9:3f:a0:04:69:13:da:ad:e7:82:3b:
                    89:c3:01:bc:58:6e:8c:e7:ef:66:d3:be:97:c4:54:
                    eb:82:ee:5b:f1:f7:3b:19:14:e3:7f:0d:33:ff:f3:
                    fe:49:b1:cb:7b:b8:de:ab:bd:40:ae:69:c7:d4:e9:
                    ae:d0:0e:fa:33:97:31:7d:f2:3c:68:b8:36:b7:2f:
                    20:55:0f:4a:1f:dd:c7:c5:b4:c0:d0:d8:dc:84:1c:
                    fa:a5:eb:51:e5:6c:f6:d0:1c:8a:f9:91:90:96:fb:
                    f2:b0:76:f2:d5:bb:90:8f:f5:d4:77:04:ec:ee:af:
                    c2:d8:ee:4e:ad:43:33:de:b1:6a:da:89:af:46:d3:
                    09:c7:04:44:fa:7a:ea:aa:f4:56:d4:55:56:d6:e3:
                    46:95:0d:75:2d:a2:21:c6:6f:1d:d2:92:f2:0d:0b:
                    9a:11:f7:e2:84:7b:c4:2e:c6:87:15:d3:e7:5f:35:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:73:7F:87:11:95:01:7C:C1:65:A4:21:98:B7:E5:86:A4:34:40
            X509v3 Authority Key Identifier:
                keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:68:f8:da:79:d3:83:dd:7d:d0:4d:47:6e:58:56:5e:45:4c:
         67:49:a6:59:12:45:d6:af:f7:da:c5:ee:7d:37:30:fb:bd:97:
         91:16:a1:90:06:2e:a0:86:c2:b3:6f:e3:f9:ef:95:b4:01:ef:
         56:cd:8a:47:8c:da:19:91:4a:8c:c3:a4:ac:63:20:45:3e:59:
         c0:87:4e:ea:0b:75:6f:8b:c4:41:f5:3b:5c:d4:f5:e9:dc:bf:
         14:bb:0d:2d:a0:ff:21:2f:01:09:ae:e4:b0:bb:17:7f:ec:95:
         8d:71:9c:f7:ac:02:a1:70:4f:f7:9b:b3:45:48:79:b8:42:9d:
         18:4b:bd:0b:54:9b:6b:84:7d:90:5f:66:7d:f6:13:57:84:e6:
         85:dc:75:78:8e:d7:ca:1d:a4:29:2e:b7:d1:28:c5:2e:78:39:
         6a:6d:91:8b:b8:d4:56:a7:4a:08:ac:a9:51:77:5a:45:f3:52:
         8c:ab:c7:be:48:4f:ef:f8:00:33:53:61:31:18:40:e7:e6:59:
         d1:40:b2:34:62:df:63:69:37:97:2f:39:96:7e:93:80:1f:89:
         2f:a0:7c:fd:7f:b5:95:a1:ae:17:05:7d:d2:68:7e:f9:39:eb:
         f1:65:19:0d:f7:d6:4f:98:61:f2:e7:f1:0a:3f:df:2c:48:00:
         03:16:b2:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtsxU+LBZqFzwWtNGBhIPuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjUxMjMwMDEwMDI4WhcNMjUxMjMxMDEwMDI4WjAzMTEwLwYDVQQD
Eyg2ZmU4NzM3Zjg3MTE5NTAxN2NjMTY1YTQyMTk4YjdlNTg2YTQzNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocHDmn+nxX7/qpUn2fKsGaI4FOMU
W8dajj4Ru+/GeVmyA3s4+UvgtIQjowm+F3e8lajCYgZRbP7JbFW73ov9W3W1xuaq
Cubx2WnPuzk2yT+gBGkT2q3ngjuJwwG8WG6M5+9m076XxFTrgu5b8fc7GRTjfw0z
//P+SbHLe7jeq71ArmnH1Omu0A76M5cxffI8aLg2ty8gVQ9KH93HxbTA0NjchBz6
petR5Wz20ByK+ZGQlvvysHby1buQj/XUdwTs7q/C2O5OrUMz3rFq2omvRtMJxwRE
+nrqqvRW1FVW1uNGlQ11LaIhxm8d0pLyDQuaEffihHvELsaHFdPnXzVdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/oc3+HEZUBfMFlpCGYt+WGpDRAMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWj42nnT
g9190E1HblhWXkVMZ0mmWRJF1q/32sXufTcw+72XkRahkAYuoIbCs2/j+e+VtAHv
Vs2KR4zaGZFKjMOkrGMgRT5ZwIdO6gt1b4vEQfU7XNT16dy/FLsNLaD/IS8BCa7k
sLsXf+yVjXGc96wCoXBP95uzRUh5uEKdGEu9C1Sba4R9kF9mffYTV4Tmhdx1eI7X
yh2kKS630SjFLng5am2Ri7jUVqdKCKypUXdaRfNSjKvHvkhP7/gAM1NhMRhA5+ZZ
0UCyNGLfY2k3ly85ln6TgB+JL6B8/X+1laGuFwV90mh++Tnr8WUZDffWT5hh8ufx
Cj/fLEgAAxaybw==
-----END CERTIFICATE-----
Generated at Tue Dec 30 03:19:38 2025 by rpki-client