This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          cGdJmLLj/8JMlOlFq1JRFgJv0O+D0uZslHthCWN5J2M=
Subject key identifier:   13:63:CF:C3:ED:34:2D:93:58:4B:24:9E:70:97:33:99:F9:8C:03:08
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019B6C57CE0A584788511DC7AB8B2FD1ECCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          17A3
Signing time:             Mon 29 Dec 2025 23:00:52 +0000
Manifest this update:     Mon 29 Dec 2025 23:00:52 +0000
Manifest next update:     Tue 30 Dec 2025 23:00:52 +0000
Files and hashes:         1: 1-eDQG0lW6qJaqnPl-W2D7USsJOU.roa (hash: o6geDpXzRfzq+KqGmBjgU8yJ/MMEJhEhk7nT0703UAQ=)
                          2: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: TOtaHbYZmEblJ8+vUMXv3F732KGD+5Gpmt5Lu6BKlwA=)
                          3: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          4: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          5: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:57:ce:0a:58:47:88:51:1d:c7:ab:8b:2f:d1:ec:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Dec 29 23:00:52 2025 GMT
            Not After : Dec 30 23:00:52 2025 GMT
        Subject: CN=1363cfc3ed342d93584b249e70973399f98c0308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:eb:9a:78:46:c0:f8:6d:17:68:18:14:bb:
                    03:74:ef:c8:ff:09:83:db:df:10:c0:8f:53:64:9e:
                    c3:cb:9d:27:a0:8c:ef:82:c1:cd:3f:ce:7f:9a:9d:
                    fb:89:6a:ca:88:ea:e1:53:0c:e5:3c:2e:23:47:d1:
                    88:5e:ab:e9:11:bf:ef:1d:31:62:ce:b3:22:80:ae:
                    75:cb:44:cb:98:bb:62:20:15:55:78:43:29:40:0c:
                    1b:31:52:78:00:16:09:05:f9:3f:db:33:71:be:8e:
                    1d:f3:44:2e:61:e6:f4:1f:b9:18:d9:ac:44:54:10:
                    1f:98:00:cd:52:79:5a:72:a9:e4:d8:66:ec:09:be:
                    b9:3e:f9:6d:55:49:dc:22:5e:d8:98:e7:d1:6f:99:
                    1a:ce:8b:f7:d0:17:f6:0c:d6:89:3f:4b:c7:9d:7c:
                    48:9a:37:7c:77:97:f5:17:99:d0:ad:c9:35:44:b9:
                    66:09:a3:dd:e0:15:93:d8:f3:77:d4:ee:68:19:cf:
                    a9:df:db:60:9e:7a:19:2b:2c:ec:d6:8a:1c:c3:9b:
                    4a:1f:2d:e1:19:17:d1:ec:88:0a:05:75:23:b7:c3:
                    74:fe:c3:e1:aa:6b:c2:3c:1f:59:db:fe:2d:ab:f0:
                    a7:9f:8d:27:b8:27:65:eb:89:16:2c:ec:09:ea:ee:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:63:CF:C3:ED:34:2D:93:58:4B:24:9E:70:97:33:99:F9:8C:03:08
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:b6:f8:ab:8e:53:3d:e4:25:0c:08:8f:0c:02:7e:77:7f:
         97:18:2d:85:ad:13:3f:5f:08:81:8b:f3:64:3f:03:e7:dc:af:
         ca:75:2e:78:33:f8:5c:29:f2:be:d7:aa:e1:2b:4a:e9:31:1f:
         00:bc:be:a1:11:47:a1:1a:59:94:c9:f3:a5:d3:53:93:f9:5b:
         98:c9:f1:56:4f:32:03:e8:01:b0:7d:ac:6c:70:f6:71:ff:c5:
         81:b2:e7:2e:51:41:f0:99:80:51:45:b3:82:c7:be:7c:3c:17:
         38:13:7d:2a:83:c7:d4:8d:22:45:96:9a:8f:9f:fa:3c:c9:ab:
         50:21:90:9e:78:b7:20:66:95:48:8c:4b:29:db:c3:cf:00:7c:
         3d:79:d4:b3:3b:5e:ab:e3:2a:3b:57:54:a7:9b:1b:34:ec:db:
         f7:51:4c:1c:0b:8e:e6:9a:bb:3f:9a:c9:6c:20:14:cc:8b:c9:
         9b:ff:6a:72:f1:86:01:23:97:cf:80:d5:8f:b2:eb:d2:31:c1:
         33:39:90:c7:ee:f5:db:5b:27:78:34:3e:68:be:76:9d:c2:f7:
         f8:b3:c0:d1:ac:b7:16:5d:ac:df:01:73:f0:61:25:06:1f:50:
         30:56:3e:1f:85:75:84:a8:81:99:41:c2:09:3c:bd:9e:0a:73:
         a4:42:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:17:01 2025 by rpki-client