This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          Y9TAjUKACgBlTy0Pok1sBJ5Mgigv3iZ/IdKzCjDQGtQ=
Subject key identifier:   53:4A:B2:E1:51:2B:53:9D:14:8A:E0:42:52:1F:D5:3C:B7:48:9F:52
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       019B3DC7F5FB2D362A43BCCAAF2D140A006A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          1120
Signing time:             Sat 20 Dec 2025 22:01:13 +0000
Manifest this update:     Sat 20 Dec 2025 22:01:13 +0000
Manifest next update:     Sun 21 Dec 2025 22:01:13 +0000
Files and hashes:         1: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: wlyAXHLeT4FpVI/mo8SvrRu6JH8hPLmBonauNZSuB58=)
                          2: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
                          3: TzNI_wZsvsGkAYswmO2F53Oor4g.roa (hash: x8wC7qfBEvBIwJEAmjMHnUVf+UVUJewOmYDzHNwOSt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:f5:fb:2d:36:2a:43:bc:ca:af:2d:14:0a:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Dec 20 22:01:13 2025 GMT
            Not After : Dec 21 22:01:13 2025 GMT
        Subject: CN=534ab2e1512b539d148ae042521fd53cb7489f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:61:51:cc:fa:3a:73:e8:7e:4f:b5:a8:10:
                    41:7c:d6:6c:6c:e5:76:11:a8:00:82:48:5c:48:b7:
                    15:0f:ca:93:63:7c:ef:65:33:78:7d:05:aa:77:96:
                    26:6e:84:c5:ce:77:3d:64:61:0e:eb:99:f3:9b:55:
                    13:39:98:db:07:bb:2a:3d:d3:ea:32:36:e6:4e:a7:
                    b0:74:2b:86:44:20:75:01:b5:e2:ae:84:4f:ed:66:
                    58:16:c4:69:f6:24:5f:4c:bf:b2:fb:78:95:41:08:
                    b2:54:f3:42:ad:89:ec:dd:79:92:a4:cb:e7:0f:a5:
                    4f:e1:6d:34:ba:08:8b:86:6e:fc:9f:09:e4:8c:b4:
                    50:7a:e1:cf:3f:87:43:72:6e:df:59:ab:93:c4:50:
                    70:16:ce:c0:62:f9:52:c2:e5:75:4e:37:9f:72:50:
                    75:f5:99:11:83:68:64:64:21:e1:14:97:0b:47:4d:
                    0d:4c:ab:e1:cb:d8:72:13:13:56:a9:c2:c0:ff:e7:
                    8c:fd:9d:cf:55:b4:03:e9:5b:90:2c:ac:80:a0:37:
                    d4:dd:ec:26:9c:8b:3f:57:75:59:ab:79:73:83:3e:
                    c8:f1:57:c3:c2:c7:60:dc:c4:7d:75:d9:ab:ef:5a:
                    d3:29:9b:f6:1e:a9:1f:99:b6:40:5f:fb:dc:7d:6c:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:B2:E1:51:2B:53:9D:14:8A:E0:42:52:1F:D5:3C:B7:48:9F:52
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:42:a0:f8:d7:67:b3:d1:32:93:90:20:e7:0c:b9:4b:96:30:
         17:5f:f7:4e:6c:b3:58:7b:29:76:04:5f:a8:64:77:ca:cd:27:
         17:b1:54:7a:de:b0:b6:dd:63:43:ab:98:d5:ac:c4:32:92:8f:
         ab:7d:dd:09:d6:61:a8:f7:38:52:c9:c3:2a:2b:76:1e:96:93:
         92:e4:de:2d:78:dc:1d:18:b4:71:73:64:c4:c6:04:31:83:3e:
         45:0d:3c:d1:1c:23:d6:74:81:6b:30:98:e8:a4:20:2a:b3:83:
         b8:d0:b1:f3:73:b2:59:1a:08:9a:79:35:59:e5:16:68:a9:6d:
         95:a9:b6:cc:78:bd:9c:f2:43:03:37:33:09:d8:c0:00:d9:ca:
         a5:1f:2e:c3:51:8b:ee:61:22:e7:86:2a:c5:e2:72:1c:14:5b:
         39:3f:78:de:0c:46:d6:34:47:8b:e7:66:f6:c6:5a:fb:43:24:
         3a:e9:af:66:c5:34:0b:f4:5a:7c:b1:2e:2f:70:82:54:00:cd:
         e3:4b:ec:a2:13:f1:78:ce:00:13:a9:58:63:1d:a7:41:82:f6:
         e4:39:3c:3a:08:ee:51:8f:80:e6:6a:e4:c0:4f:f0:74:72:03:
         75:6e:70:1c:62:67:7f:9a:66:2e:0d:ca:4d:f8:5a:17:87:60:
         3c:0c:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:12:54 2025 by rpki-client