This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          Li4kdIy0cqd5ko1Vtf8rw55hyvMgXc5AlvOd+2oVgdc=
Subject key identifier:   E8:06:F1:BF:77:39:4B:4B:5F:6D:91:B9:C7:05:7C:88:6F:4A:B3:AB
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019B364526484780C9038C82830667F80EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          06CF
Signing time:             Fri 19 Dec 2025 11:00:59 +0000
Manifest this update:     Fri 19 Dec 2025 11:00:59 +0000
Manifest next update:     Sat 20 Dec 2025 11:00:59 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: RveJt09BSRoXBtJ+yulNsL7EsUrCC1yY9c6SVF7Ke4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:26:48:47:80:c9:03:8c:82:83:06:67:f8:0e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Dec 19 11:00:59 2025 GMT
            Not After : Dec 20 11:00:59 2025 GMT
        Subject: CN=e806f1bf77394b4b5f6d91b9c7057c886f4ab3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:e3:ae:8c:63:11:9d:ea:c0:1b:96:14:ea:
                    17:7a:d6:9a:36:aa:6a:57:21:54:d0:54:2b:2f:1b:
                    bb:5e:28:50:54:b3:0a:42:21:32:ab:9a:32:13:22:
                    e2:ca:40:1c:16:b2:cb:e0:36:77:c9:26:15:91:85:
                    35:24:86:cc:a1:e4:37:4b:22:e0:e4:2b:e9:f3:df:
                    0e:f7:10:58:ac:1d:4c:b4:b8:d3:bb:fd:59:a1:26:
                    9d:73:42:ea:51:13:cb:59:ed:cb:a2:ad:14:61:48:
                    7a:d4:c4:b4:b0:ac:55:83:c3:11:93:46:10:e1:ac:
                    6a:07:d0:e9:6e:e0:03:95:18:f7:43:98:b9:50:cb:
                    e0:d9:f9:48:10:70:4b:24:1c:12:a9:3e:7e:9e:b8:
                    0d:32:96:8e:ca:6f:1b:43:57:9b:2d:be:07:c8:e1:
                    83:74:75:b5:d7:81:86:ec:49:aa:8e:a1:a6:5b:60:
                    23:03:7e:5c:bc:c9:b3:67:d7:48:e5:a8:1d:5a:0e:
                    8a:f0:5d:b9:a8:10:75:48:0a:4e:f8:ef:13:e1:cb:
                    b4:a1:c3:10:31:73:bf:a2:c1:28:c1:c7:64:0a:b6:
                    0c:2f:82:69:b1:c7:b9:b6:f0:1c:d5:3e:56:ec:04:
                    7b:fa:f5:22:37:16:fb:c1:41:6f:a5:9f:a7:4d:65:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:F1:BF:77:39:4B:4B:5F:6D:91:B9:C7:05:7C:88:6F:4A:B3:AB
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:58:c3:59:d9:39:64:98:1d:ab:7b:40:23:44:ca:33:4b:
         99:d0:ea:00:d5:8d:b4:91:9b:e4:5d:69:2e:aa:6b:85:c0:41:
         b1:98:ae:e6:76:1e:4d:8d:03:e1:08:c5:a4:2a:ae:4a:c9:ad:
         df:79:21:29:71:c2:aa:6d:27:53:04:ba:81:d3:5a:d2:88:24:
         0f:4c:09:16:0b:1a:92:ff:84:a8:47:c0:9e:bc:ba:c3:85:d9:
         63:fe:8d:4d:dd:9d:e7:42:b7:6b:d0:d1:ee:a3:66:25:fc:28:
         d7:bb:cf:c0:08:7f:65:2c:2e:82:4f:f9:c9:cc:c8:fc:54:14:
         5b:8b:6d:1e:5c:d6:df:df:7e:da:f6:53:35:22:5c:56:2a:32:
         1f:d0:85:23:c4:6f:a4:c7:23:1a:0f:9b:16:87:16:fe:03:13:
         0c:b2:b2:bd:dd:ce:3e:da:95:06:b4:b0:f8:53:d2:3a:df:bd:
         11:61:68:75:07:33:79:bd:d8:62:6c:6d:8e:90:9c:30:df:0c:
         81:c1:ea:37:fa:a9:fe:41:b1:94:3f:7c:83:ed:e2:ac:ee:48:
         4a:46:c2:12:36:f6:89:ce:74:86:1b:8e:2e:a0:3d:19:1e:5d:
         1d:c3:29:80:e9:14:e6:d7:58:78:4d:f2:69:da:f7:ed:4d:d7:
         df:bb:9a:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2RSZIR4DJA4yCgwZn+A71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5
NjgyNzkwHhcNMjUxMjE5MTEwMDU5WhcNMjUxMjIwMTEwMDU5WjAzMTEwLwYDVQQD
EyhlODA2ZjFiZjc3Mzk0YjRiNWY2ZDkxYjljNzA1N2M4ODZmNGFiM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzjroxjEZ3qwBuWFOoXetaaNqpq
VyFU0FQrLxu7XihQVLMKQiEyq5oyEyLiykAcFrLL4DZ3ySYVkYU1JIbMoeQ3SyLg
5Cvp898O9xBYrB1MtLjTu/1ZoSadc0LqURPLWe3Loq0UYUh61MS0sKxVg8MRk0YQ
4axqB9DpbuADlRj3Q5i5UMvg2flIEHBLJBwSqT5+nrgNMpaOym8bQ1ebLb4HyOGD
dHW114GG7EmqjqGmW2AjA35cvMmzZ9dI5agdWg6K8F25qBB1SApO+O8T4cu0ocMQ
MXO/osEowcdkCrYML4Jpsce5tvAc1T5W7AR7+vUiNxb7wUFvpZ+nTWXvyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgG8b93OUtLX22RuccFfIhvSrOrMB8GA1UdIwQY
MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt
OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz
LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsNYw1nZ
OWSYHat7QCNEyjNLmdDqANWNtJGb5F1pLqprhcBBsZiu5nYeTY0D4QjFpCquSsmt
33khKXHCqm0nUwS6gdNa0ogkD0wJFgsakv+EqEfAnry6w4XZY/6NTd2d50K3a9DR
7qNmJfwo17vPwAh/ZSwugk/5yczI/FQUW4ttHlzW399+2vZTNSJcVioyH9CFI8Rv
pMcjGg+bFocW/gMTDLKyvd3OPtqVBrSw+FPSOt+9EWFodQczeb3YYmxtjpCcMN8M
gcHqN/qp/kGxlD98g+3irO5ISkbCEjb2ic50hhuOLqA9GR5dHcMpgOkU5tdYeE3y
adr37U3X37uayg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:36:19 2025 by rpki-client