This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          kGtjSHrapNrNZNaS6Umr2BjwE84YuHC42nnDKIMLIG0=
Subject key identifier:   61:F7:5F:A7:4B:6F:FA:6F:45:3D:91:25:42:57:2C:D5:05:BD:39:9C
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019B03A15444B999255C6E7768C3ED90B3CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          0453
Signing time:             Tue 09 Dec 2025 15:01:03 +0000
Manifest this update:     Tue 09 Dec 2025 15:01:03 +0000
Manifest next update:     Wed 10 Dec 2025 15:01:03 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: 5jyI13f+e38F7iry+YRDe1bu8Aq4qbP6HCg5bE81h/o=)
                          2: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=)
                          3: hT7unl9ZuxZPAjHhi1yxgaF0b84.roa (hash: v8cgVoUrK7g8xYPzYyvvJU+HdpGiFjC2QbRLHwLNvNg=)
                          4: uWpNCPTv1fX6SmxhkKVSdngegu4.roa (hash: kLvGX1zZO1OaTg+o6DjuOwMKQv+Bs3Dx3ldycWfaKag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:03:a1:54:44:b9:99:25:5c:6e:77:68:c3:ed:90:b3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Dec  9 15:01:03 2025 GMT
            Not After : Dec 10 15:01:03 2025 GMT
        Subject: CN=61f75fa74b6ffa6f453d912542572cd505bd399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:e9:f7:9e:71:a2:af:c0:33:ce:2a:08:d5:
                    85:00:14:72:a7:32:3f:14:29:54:a1:39:1c:9d:0c:
                    1f:ce:4f:04:60:85:3b:f9:3a:fc:83:ea:84:bb:17:
                    88:70:86:51:7f:ed:ed:c1:e1:25:36:6c:82:2b:0b:
                    ff:a7:5f:e5:e0:92:2c:4c:c2:59:46:3e:80:19:7c:
                    15:91:01:88:ed:cf:dd:9a:19:ae:3c:ff:ef:c0:83:
                    c2:dc:c2:73:be:80:52:3a:b5:4f:b7:25:3a:11:7e:
                    de:0d:85:0f:23:a7:58:5b:c4:42:ce:fb:6c:c8:a8:
                    34:fb:40:3a:d7:51:a1:56:ff:88:5f:d7:8d:e4:da:
                    cb:78:8a:e9:19:b3:9f:6c:1c:5c:7c:36:da:16:b9:
                    95:7e:31:d7:45:fd:ed:d9:cc:91:45:4c:e8:44:3b:
                    54:93:52:72:6b:1d:76:37:c1:91:81:4b:90:e5:11:
                    1a:3b:62:30:01:f0:08:ee:8d:07:33:59:1c:26:7c:
                    33:f8:1e:c8:66:77:0d:59:c6:ba:07:84:35:74:72:
                    ef:38:0c:c3:9c:a4:36:9d:e8:fb:2d:1d:d4:28:20:
                    a4:fa:d4:c3:1b:e8:de:82:48:7d:a1:83:33:24:22:
                    9e:ad:56:9a:53:28:0e:26:10:a1:39:f8:f4:fc:0e:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:5F:A7:4B:6F:FA:6F:45:3D:91:25:42:57:2C:D5:05:BD:39:9C
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4b:b8:6f:44:95:c3:15:af:ec:64:f6:93:71:9f:c9:a3:de:
         1e:ac:49:09:af:74:43:6d:ee:92:28:93:f0:18:b3:ef:20:2d:
         b9:48:3e:33:83:95:15:00:9f:21:f7:b0:70:76:f5:30:4e:37:
         8d:f8:b2:4b:a5:8f:8b:01:ae:36:25:58:f3:31:e2:29:57:b8:
         f3:68:6e:ae:aa:e0:ca:3b:47:6f:ee:f4:91:86:3d:80:2a:b1:
         f3:5e:5b:cd:2b:e1:17:39:00:ec:e3:39:a9:05:c4:be:97:2f:
         e3:b0:bf:cc:91:c7:e2:00:3c:a1:28:74:ed:7f:db:23:5a:92:
         f1:40:6a:7a:5e:8e:55:32:3c:61:09:cd:f4:b6:21:17:f9:cd:
         33:ac:36:63:b0:da:cf:d1:0c:a0:6d:db:5e:be:99:53:dc:78:
         4d:17:b3:df:87:7e:89:46:d2:85:6c:2f:93:93:32:f5:c2:83:
         10:b1:05:f6:51:12:57:d9:15:43:a4:c3:9e:06:ec:32:db:eb:
         56:c0:9e:9c:04:84:15:de:30:92:56:ec:69:1a:c3:37:42:5f:
         9f:e6:a6:c4:5e:11:75:0a:d1:47:45:bf:6a:e8:24:15:34:6a:
         59:e7:2d:c9:08:cb:54:de:02:da:cd:ba:fa:cb:1c:32:0d:91:
         fb:0f:68:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsDoVREuZklXG53aMPtkLPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw
ZTk5ZjkwHhcNMjUxMjA5MTUwMTAzWhcNMjUxMjEwMTUwMTAzWjAzMTEwLwYDVQQD
Eyg2MWY3NWZhNzRiNmZmYTZmNDUzZDkxMjU0MjU3MmNkNTA1YmQzOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzvp955xoq/AM84qCNWFABRypzI/
FClUoTkcnQwfzk8EYIU7+Tr8g+qEuxeIcIZRf+3tweElNmyCKwv/p1/l4JIsTMJZ
Rj6AGXwVkQGI7c/dmhmuPP/vwIPC3MJzvoBSOrVPtyU6EX7eDYUPI6dYW8RCzvts
yKg0+0A611GhVv+IX9eN5NrLeIrpGbOfbBxcfDbaFrmVfjHXRf3t2cyRRUzoRDtU
k1Jyax12N8GRgUuQ5REaO2IwAfAI7o0HM1kcJnwz+B7IZncNWca6B4Q1dHLvOAzD
nKQ2nej7LR3UKCCk+tTDG+jegkh9oYMzJCKerVaaUygOJhChOfj0/A6ZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH3X6dLb/pvRT2RJUJXLNUFvTmcMB8GA1UdIwQY
MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt
ODI1MzFlOWM3ODA0LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0
LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEu4b0SV
wxWv7GT2k3GfyaPeHqxJCa90Q23ukiiT8Biz7yAtuUg+M4OVFQCfIfewcHb1ME43
jfiyS6WPiwGuNiVY8zHiKVe482hurqrgyjtHb+70kYY9gCqx815bzSvhFzkA7OM5
qQXEvpcv47C/zJHH4gA8oSh07X/bI1qS8UBqel6OVTI8YQnN9LYhF/nNM6w2Y7Da
z9EMoG3bXr6ZU9x4TRez34d+iUbShWwvk5My9cKDELEF9lESV9kVQ6TDngbsMtvr
VsCenASEFd4wklbsaRrDN0Jfn+amxF4RdQrRR0W/augkFTRqWectyQjLVN4C2s26
+sscMg2R+w9okQ==
-----END CERTIFICATE-----
Generated at Tue Dec 9 18:22:53 2025 by rpki-client