This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          O1nlyj9OwFO1YczAeeMb7k6Xhg94go1OQLBwkr4EGnw=
Subject key identifier:   6B:34:B2:88:50:E6:FB:B7:A6:BE:2B:7B:35:2E:B4:C3:AF:0A:4B:C0
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       019B35A0CCB3A3AD516E274D57DEB619DC53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          1785
Signing time:             Fri 19 Dec 2025 08:01:29 +0000
Manifest this update:     Fri 19 Dec 2025 08:01:29 +0000
Manifest next update:     Sat 20 Dec 2025 08:01:29 +0000
Files and hashes:         1: JoXkjArh1eQOEzJmDg5eyKhlAZU.roa (hash: IpnTumi25Jm35YnmbE0mTeFwDsMDbPll4BvRMHinz6I=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: w7XMACZT6UN4FH02CpSPVs29nLZec12KKGhk5qkMxek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:cc:b3:a3:ad:51:6e:27:4d:57:de:b6:19:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Dec 19 08:01:29 2025 GMT
            Not After : Dec 20 08:01:29 2025 GMT
        Subject: CN=6b34b28850e6fbb7a6be2b7b352eb4c3af0a4bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:28:52:f5:cf:6b:62:a1:4c:29:6e:83:cb:
                    1f:c5:62:b2:49:8a:84:70:ac:56:e2:56:26:60:cc:
                    3d:34:a4:1f:11:dd:5d:e5:53:95:4e:91:2f:98:bb:
                    45:58:4f:e9:57:6a:fc:64:8e:f3:51:96:7a:cc:38:
                    a2:86:f0:ff:27:b5:af:81:cf:13:9b:59:f1:ee:4d:
                    ee:7b:e4:79:56:a7:92:8c:f2:c1:83:c3:69:bb:ef:
                    6e:ba:67:25:33:d8:4c:4f:ac:dd:a6:28:fd:4d:fb:
                    4a:0e:d8:e5:74:db:a6:f5:32:3f:f9:ee:cc:70:e9:
                    d5:bf:ab:37:05:88:4e:eb:50:a7:41:a1:44:e2:fc:
                    26:38:8a:44:03:3f:91:88:33:fa:d5:76:24:54:70:
                    5e:15:a5:dd:b7:5e:88:56:d5:d3:94:8b:1a:2f:aa:
                    66:cd:96:b0:1a:73:6d:4d:75:0d:6b:e9:a1:5c:dd:
                    fc:0c:09:a9:2c:82:29:16:aa:78:f7:68:dc:de:e3:
                    32:2f:88:92:95:e1:4c:da:33:2e:8c:64:5b:5e:67:
                    37:74:19:36:d3:0f:47:aa:05:b2:5f:57:a4:35:ed:
                    9e:4e:64:a2:be:f9:8a:5f:02:f6:7f:62:a3:90:48:
                    09:9d:06:06:6f:7d:dd:87:9b:02:f5:84:82:f1:b3:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:B2:88:50:E6:FB:B7:A6:BE:2B:7B:35:2E:B4:C3:AF:0A:4B:C0
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:11:11:3e:d5:71:1c:1c:ae:d5:fd:a6:31:5b:8c:cf:2e:
         fc:0c:fa:39:60:bf:e3:9c:2d:53:b8:2e:80:dd:cb:21:d2:e2:
         6d:56:87:6b:13:e1:72:68:d1:d0:fb:13:f0:d8:5f:44:b8:a5:
         00:d7:95:c2:2c:52:95:d9:f6:c2:7f:ff:83:d2:71:f1:ab:67:
         bd:d8:02:6d:21:73:44:e0:9a:03:e8:26:1a:71:0a:d6:56:0e:
         ba:70:f0:e3:dc:1d:40:04:d1:9f:f7:23:c8:67:6c:ce:93:38:
         9b:ad:af:56:df:af:70:55:e9:d3:ec:87:70:22:82:2a:14:c3:
         8c:10:12:4a:32:aa:85:0d:92:c2:d7:95:c3:68:92:62:55:22:
         6a:cc:56:5e:ba:d1:6d:47:2f:fc:e3:4a:c2:ce:db:2b:95:b8:
         36:21:cf:5d:0a:a8:87:1f:0d:76:65:c7:ad:a1:d1:19:fe:76:
         3b:55:98:01:c2:b6:74:39:0a:51:ee:69:e1:16:ca:fb:30:bf:
         8d:91:0a:dd:c6:5f:b5:68:38:ec:ca:5d:ae:14:cb:d1:57:0e:
         1b:1a:18:28:cd:21:82:ae:3f:0c:df:aa:ec:47:10:72:a1:15:
         35:67:43:10:8c:6a:69:2e:ed:0f:1b:d4:9e:5f:87:fc:1d:57:
         c9:ab:ac:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs1oMyzo61RbidNV962GdxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOTgyZGVmNzdhMjZkN2NjMTk0NzNiM2E0MDY0ZGNjNTIx
N2U0NzEwHhcNMjUxMjE5MDgwMTI5WhcNMjUxMjIwMDgwMTI5WjAzMTEwLwYDVQQD
Eyg2YjM0YjI4ODUwZTZmYmI3YTZiZTJiN2IzNTJlYjRjM2FmMGE0YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkAoUvXPa2KhTClug8sfxWKySYqE
cKxW4lYmYMw9NKQfEd1d5VOVTpEvmLtFWE/pV2r8ZI7zUZZ6zDiihvD/J7Wvgc8T
m1nx7k3ue+R5VqeSjPLBg8Npu+9uumclM9hMT6zdpij9TftKDtjldNum9TI/+e7M
cOnVv6s3BYhO61CnQaFE4vwmOIpEAz+RiDP61XYkVHBeFaXdt16IVtXTlIsaL6pm
zZawGnNtTXUNa+mhXN38DAmpLIIpFqp492jc3uMyL4iSleFM2jMujGRbXmc3dBk2
0w9HqgWyX1ekNe2eTmSivvmKXwL2f2KjkEgJnQYGb33dh5sC9YSC8bPQCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs0sohQ5vu3pr4rezUutMOvCkvAMB8GA1UdIwQY
MBaAFL+YLe93om18wZRzs6QGTcxSF+RxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAt
MWRkYWMyYjA4NDA0LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAtMWRkYWMyYjA4NDA0
LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCYRET7V
cRwcrtX9pjFbjM8u/Az6OWC/45wtU7gugN3LIdLibVaHaxPhcmjR0PsT8NhfRLil
ANeVwixSldn2wn//g9Jx8atnvdgCbSFzROCaA+gmGnEK1lYOunDw49wdQATRn/cj
yGdszpM4m62vVt+vcFXp0+yHcCKCKhTDjBASSjKqhQ2SwteVw2iSYlUiasxWXrrR
bUcv/ONKws7bK5W4NiHPXQqohx8NdmXHraHRGf52O1WYAcK2dDkKUe5p4RbK+zC/
jZEK3cZftWg47MpdrhTL0VcOGxoYKM0hgq4/DN+q7EcQcqEVNWdDEIxqaS7tDxvU
nl+H/B1Xyaus5g==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:25:37 2025 by rpki-client