This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          TLQdLe8rEu26xEhT8ATmjXNE0D8AfxlL2zXKnyonE7I=
Subject key identifier:   75:A3:6F:B4:C1:54:10:D5:19:21:00:88:D3:10:9C:00:2E:39:14:BF
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019B367BD08EB2A72DCC5CA9E3C1AB6F923A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          17AB
Signing time:             Fri 19 Dec 2025 12:00:42 +0000
Manifest this update:     Fri 19 Dec 2025 12:00:42 +0000
Manifest next update:     Sat 20 Dec 2025 12:00:42 +0000
Files and hashes:         1: 0tzBINqIR5UARhUC_SN4dqUsHbs.roa (hash: dkpQVlm2NilQ3sBxk5jABsHQoOKhZ/gA5zaornlR6rQ=)
                          2: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=)
                          3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=)
                          4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=)
                          5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=)
                          6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=)
                          7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=)
                          8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=)
                          9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: VewTNf+oBAIjDpiyHbmNZVRTmj6542I6OWGZY0nSSNI=)
                          10: NRsmmESxlwOZ9E_FA7G05km4PzY.roa (hash: gj7FhRBAZvoKHYNfOr+mSSSV4JbsWKf5GeUgXwnq8h4=)
                          11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=)
                          12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=)
                          13: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=)
                          14: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=)
                          15: hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa (hash: zejLevyjCi1eBLeaN7L1PcRyE8TcqoV2q3GNhHozY7Q=)
                          16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=)
                          17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=)
                          18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=)
                          19: mrA5cb-6XNKXA6shM0taqYUQYA0.roa (hash: cuTtxcWCbnIrKZ9sDiv8cAUpJWdrJ+DCwm6h65W47E0=)
                          20: p_T_usfdv8xlZZdYjAIfsVouVbk.roa (hash: 6jbjq1+jiWQ0ooeWaGdPlb/s9JUI9tUJMn1ZAmNsUm8=)
                          21: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:7b:d0:8e:b2:a7:2d:cc:5c:a9:e3:c1:ab:6f:92:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Dec 19 12:00:42 2025 GMT
            Not After : Dec 20 12:00:42 2025 GMT
        Subject: CN=75a36fb4c15410d519210088d3109c002e3914bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:71:23:b5:4e:58:03:83:2d:0f:6d:0c:be:
                    e5:bc:b7:3c:5b:14:9f:60:28:8b:e4:0d:d3:5e:bb:
                    71:f0:33:59:00:8c:84:ea:e5:f3:a7:ff:93:e6:0e:
                    48:7f:96:74:1c:8b:7b:dc:f0:ef:17:dd:26:dd:d2:
                    aa:ab:e0:2f:d8:28:42:5f:2d:ce:48:f5:66:70:89:
                    3a:34:cb:2d:9f:0a:f6:79:a0:d6:00:3c:bc:d1:88:
                    29:a5:a5:52:a0:db:fe:37:17:27:94:c5:76:59:77:
                    29:e5:0e:9e:32:d0:c1:4a:ad:02:f9:5a:0e:2f:e0:
                    8c:40:e3:15:7a:2c:fb:0d:c5:12:1e:c6:79:27:95:
                    73:4b:b1:db:98:92:79:09:41:d8:e6:69:8a:dc:57:
                    fb:b5:49:71:53:a2:f2:5b:29:7b:6d:90:0b:20:07:
                    09:e1:39:c8:f4:db:5a:76:8d:3e:cc:ee:60:fd:bd:
                    5e:d6:61:f7:44:76:b8:3e:a5:48:6d:c3:59:3a:06:
                    ba:34:46:e2:f2:a9:38:47:03:51:db:9d:fe:2b:cd:
                    55:0a:b7:0d:9a:2e:41:ac:72:64:7f:b9:56:79:0d:
                    12:31:5b:e1:05:39:5a:2e:70:f5:dc:b1:3f:27:6d:
                    16:9f:59:9e:a4:8a:a5:8b:be:42:28:25:21:df:d6:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:6F:B4:C1:54:10:D5:19:21:00:88:D3:10:9C:00:2E:39:14:BF
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:db:8d:6d:24:2a:ff:75:b7:4e:12:00:43:f8:45:b5:55:bc:
         07:22:79:56:7d:c6:e5:c5:13:91:32:e9:df:f7:5e:69:a6:13:
         9e:86:6f:b5:68:3d:91:17:aa:3f:04:35:fa:cc:05:f5:3f:ab:
         09:25:56:9b:37:76:7c:01:8b:c9:bf:7e:15:72:c3:10:59:af:
         bb:55:6f:c8:33:f8:86:85:63:06:80:27:f8:b3:0b:90:95:a6:
         f7:1a:9a:50:39:76:4f:38:d1:30:fd:0a:2f:95:a1:09:0f:f4:
         ee:29:cf:b7:cf:ff:35:c8:24:2d:4c:5c:a8:11:06:b7:b7:f5:
         ce:ac:fb:38:57:e4:ac:20:37:d9:87:5b:36:da:10:64:69:35:
         3e:7f:39:2c:b4:79:34:81:97:7c:48:2d:c9:4c:06:1d:21:97:
         16:5d:ca:85:60:b2:89:aa:cb:61:55:fe:09:19:bd:08:b5:d5:
         64:41:a8:ff:b9:99:6f:da:42:59:c9:16:2d:9d:ca:8d:95:a2:
         81:91:a1:a8:98:cd:3c:d8:32:5d:f4:ea:10:16:cd:eb:68:81:
         77:02:81:6d:16:a0:01:5d:ee:e6:f0:34:8c:20:6f:e2:8e:df:
         05:f5:42:50:12:a6:79:40:a1:dd:a5:48:b8:76:f9:bb:c1:0a:
         6e:ab:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:53:59 2025 by rpki-client