This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File:                     m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier:          UQA5OQGNCArELUAS1W3dB/QEuvSNgKbHpQ5QzVWHeww=
Subject key identifier:   6F:5B:69:D2:24:25:16:41:84:25:60:FA:4B:7F:68:26:98:1D:EC:95
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer:       /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial:       019B59AD1B7D4DD7D821AFE155461B628A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number:          0E12
Signing time:             Fri 26 Dec 2025 08:01:15 +0000
Manifest this update:     Fri 26 Dec 2025 08:01:15 +0000
Manifest next update:     Sat 27 Dec 2025 08:01:15 +0000
Files and hashes:         1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
                          2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: DBdYVIErZG7nhidv+cbF0j63sLRlvgctRLYSlYWc7GM=)
                          3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ad:1b:7d:4d:d7:d8:21:af:e1:55:46:1b:62:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
        Validity
            Not Before: Dec 26 08:01:15 2025 GMT
            Not After : Dec 27 08:01:15 2025 GMT
        Subject: CN=6f5b69d224251641842560fa4b7f6826981dec95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:6a:c8:70:da:a7:ed:8f:28:69:2f:59:42:
                    8c:c1:48:43:74:8c:7c:12:72:4e:f7:97:a5:8b:d0:
                    15:12:c6:ba:32:77:0f:7c:f9:f7:08:94:d3:4f:8a:
                    8b:10:81:c3:a8:ba:45:12:60:d0:26:89:e2:c2:4f:
                    f8:56:27:b0:f1:33:8e:c0:01:a0:57:06:ce:bb:1f:
                    5f:2c:59:98:64:03:fc:af:b5:39:4a:b4:46:a4:26:
                    2c:87:fb:3b:e5:db:83:74:56:f8:58:4d:17:a3:1e:
                    46:53:fa:fc:4a:e9:44:a8:90:e7:a3:8d:d5:4f:f5:
                    3b:f0:c7:93:ea:26:04:35:8a:45:e8:f7:21:34:af:
                    9b:a0:30:dd:a7:ec:74:1b:47:eb:50:ad:6c:01:e7:
                    34:74:dd:da:b8:9f:a4:41:36:61:51:c7:77:f7:e9:
                    1f:1f:2f:6a:23:8c:6e:19:c8:f7:92:77:19:74:17:
                    f9:0f:fc:95:3d:96:88:57:3d:8b:80:31:ae:ec:18:
                    cf:f0:6f:a9:9b:74:00:52:e2:97:c4:51:2b:90:5e:
                    44:b6:17:eb:d4:a1:7c:41:d4:eb:23:48:8f:64:97:
                    b7:70:54:95:47:73:98:8e:fd:94:90:02:ea:da:20:
                    42:9d:b3:ab:fe:f2:5e:35:2f:86:54:1f:2e:a4:76:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:69:D2:24:25:16:41:84:25:60:FA:4B:7F:68:26:98:1D:EC:95
            X509v3 Authority Key Identifier:
                keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:4b:96:14:29:bb:a4:10:05:08:23:18:52:c3:d0:55:31:
         0f:1d:6f:ff:1b:c0:fd:be:4e:cb:00:f3:de:3b:54:12:1e:a3:
         d6:32:b4:b1:a3:88:04:f6:8a:ad:30:65:ee:bf:59:82:b6:ea:
         52:46:45:78:a2:ab:f1:17:c1:89:ba:a5:58:b3:42:bb:cc:29:
         04:73:d9:51:9d:7d:ed:fc:43:63:4b:fb:f9:ed:c3:1b:2f:f7:
         7e:05:35:89:9f:27:76:9a:85:41:a7:d5:d8:14:e9:ba:44:e4:
         93:ab:7b:1a:eb:f7:c8:28:2e:0f:10:93:27:a6:1b:37:c6:fc:
         dc:65:fa:9f:bb:82:19:49:a9:48:a3:0e:a7:24:2c:04:5e:6d:
         ba:0c:d5:8f:7b:78:cf:99:9f:c6:27:eb:e4:2d:c2:82:9b:2c:
         18:0f:70:1b:85:16:2b:96:97:ec:18:5b:48:dc:ba:30:81:f5:
         cc:16:0d:7d:60:74:12:4e:9c:ec:83:70:ca:79:d2:87:11:63:
         d0:37:05:56:8f:94:f6:04:5e:7d:8e:97:7b:30:8a:ef:ac:5c:
         ca:25:6c:49:aa:74:4b:05:f5:4d:e9:1e:05:6a:4f:fc:75:02:
         db:3d:19:49:95:76:3e:d8:4e:41:82:76:96:f5:8f:f0:33:4c:
         bc:4a:b9:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtZrRt9TdfYIa/hVUYbYopqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0
MDc4YjIwHhcNMjUxMjI2MDgwMTE1WhcNMjUxMjI3MDgwMTE1WjAzMTEwLwYDVQQD
Eyg2ZjViNjlkMjI0MjUxNjQxODQyNTYwZmE0YjdmNjgyNjk4MWRlYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHNqyHDap+2PKGkvWUKMwUhDdIx8
EnJO95eli9AVEsa6MncPfPn3CJTTT4qLEIHDqLpFEmDQJoniwk/4View8TOOwAGg
VwbOux9fLFmYZAP8r7U5SrRGpCYsh/s75duDdFb4WE0Xox5GU/r8SulEqJDno43V
T/U78MeT6iYENYpF6PchNK+boDDdp+x0G0frUK1sAec0dN3auJ+kQTZhUcd39+kf
Hy9qI4xuGcj3kncZdBf5D/yVPZaIVz2LgDGu7BjP8G+pm3QAUuKXxFErkF5Ethfr
1KF8QdTrI0iPZJe3cFSVR3OYjv2UkALq2iBCnbOr/vJeNS+GVB8upHaNKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9badIkJRZBhCVg+kt/aCaYHeyVMB8GA1UdIwQY
MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt
ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0
LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIBLlhQp
u6QQBQgjGFLD0FUxDx1v/xvA/b5OywDz3jtUEh6j1jK0saOIBPaKrTBl7r9Zgrbq
UkZFeKKr8RfBibqlWLNCu8wpBHPZUZ197fxDY0v7+e3DGy/3fgU1iZ8ndpqFQafV
2BTpukTkk6t7Guv3yCguDxCTJ6YbN8b83GX6n7uCGUmpSKMOpyQsBF5tugzVj3t4
z5mfxifr5C3CgpssGA9wG4UWK5aX7BhbSNy6MIH1zBYNfWB0Ek6c7INwynnShxFj
0DcFVo+U9gRefY6XezCK76xcyiVsSap0SwX1TekeBWpP/HUC2z0ZSZV2PthOQYJ2
lvWP8DNMvEq5zQ==
-----END CERTIFICATE-----
Generated at Fri Dec 26 14:16:49 2025 by rpki-client