This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File:                     bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier:          caceGDZF6sleMoWjMBkcSM4ST+d2GFBd7LCH6DhvQ2s=
Subject key identifier:   FE:06:24:84:38:EE:8D:17:4E:14:2D:AB:F1:66:53:14:67:64:F8:2A
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer:       /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial:       019B24E35F916CC5E2D3E243B150F926E010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number:          087C
Signing time:             Tue 16 Dec 2025 02:00:39 +0000
Manifest this update:     Tue 16 Dec 2025 02:00:39 +0000
Manifest next update:     Wed 17 Dec 2025 02:00:39 +0000
Files and hashes:         1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
                          2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
                          3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 01zM1gSq5zywJKBiDlaQwAmjiIPemPqk03FOqI2TQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:e3:5f:91:6c:c5:e2:d3:e2:43:b1:50:f9:26:e0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
        Validity
            Not Before: Dec 16 02:00:39 2025 GMT
            Not After : Dec 17 02:00:39 2025 GMT
        Subject: CN=fe06248438ee8d174e142dabf16653146764f82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:0c:17:6c:49:08:23:8e:92:99:55:62:8c:
                    71:29:12:73:f3:ac:ca:4e:e6:77:e8:5b:c0:7f:fe:
                    a8:49:bd:d6:c7:a0:9f:53:37:33:e4:de:ed:05:56:
                    2c:af:cc:cc:3b:84:b6:70:e9:f4:59:34:b4:7f:ad:
                    31:ff:fc:e5:ba:c5:9f:de:8d:80:1c:e7:8a:6b:5c:
                    2d:06:36:24:9d:f9:7a:ca:5e:67:b0:c8:dc:1c:7c:
                    da:c0:0d:bc:b4:2a:f2:ca:f5:89:06:a8:da:19:ad:
                    53:67:be:5e:a3:ce:8c:c1:00:98:49:d7:e9:05:df:
                    58:28:f4:e4:35:ec:e2:60:34:95:7c:ed:dd:63:e5:
                    88:87:e1:e4:9c:21:d2:1e:df:50:ee:f2:4c:56:dc:
                    27:11:17:b4:f4:94:f9:de:43:0f:54:3f:88:82:ae:
                    f5:65:b0:89:31:50:91:a1:0f:b0:ec:68:c1:03:d4:
                    09:bc:51:56:d8:e5:fd:a8:10:5a:fc:de:91:28:cd:
                    ab:0f:8b:e0:be:45:a9:e5:84:f5:62:94:c0:9d:2c:
                    26:96:cc:e8:7e:6d:9e:05:5b:04:30:5b:a4:27:41:
                    4a:b9:24:db:24:65:f2:d7:7e:1a:27:47:07:7a:58:
                    fa:72:38:fb:9e:93:12:36:9c:5b:4e:2a:f0:7a:79:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:06:24:84:38:EE:8D:17:4E:14:2D:AB:F1:66:53:14:67:64:F8:2A
            X509v3 Authority Key Identifier:
                keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f5:e2:93:8a:46:dc:b9:39:87:53:23:9d:10:c3:8b:3e:81:
         e5:a1:3c:6b:46:8c:76:fa:0c:41:ab:4d:e6:28:c9:3b:25:35:
         65:15:06:32:a5:db:22:ff:ec:79:65:f0:df:b2:2f:b6:95:d6:
         68:47:f3:a1:36:12:08:fa:f9:43:3a:b0:47:de:dd:73:a6:8e:
         72:ba:93:3c:3d:1d:da:cb:23:71:7e:63:dc:f4:57:f2:3b:da:
         fc:d1:c2:b4:b8:b6:a7:97:a0:98:34:d3:fb:e7:7d:8d:69:3b:
         47:07:67:7f:3b:00:65:57:5f:d9:f4:68:83:dd:79:10:9b:7c:
         a5:ee:e2:29:81:51:0e:70:3d:2d:5e:52:b2:58:28:e5:63:30:
         23:0d:15:4e:b5:10:9f:68:82:e0:04:e1:1c:bc:12:0b:ea:25:
         63:fc:aa:e5:e7:06:32:9d:42:1b:51:1a:1a:0d:df:aa:e8:b9:
         aa:32:03:76:8a:0c:37:f9:72:b7:72:3d:b5:61:27:1f:21:81:
         6a:28:f1:e0:0b:81:8a:c5:f3:1b:be:23:3c:c4:91:21:c7:70:
         5c:e6:16:c5:09:42:27:a0:5d:1e:eb:ee:52:3c:a3:f4:d0:d9:
         e3:9b:84:88:65:fc:b6:d4:09:ee:1e:da:47:e3:90:83:99:5e:
         4d:a5:fe:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsk41+RbMXi0+JDsVD5JuAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjUwYWYxNzI0NDRiNTIxMTZhN2E2N2Q3NGFhYzdkZjhh
NTVlMWMwHhcNMjUxMjE2MDIwMDM5WhcNMjUxMjE3MDIwMDM5WjAzMTEwLwYDVQQD
EyhmZTA2MjQ4NDM4ZWU4ZDE3NGUxNDJkYWJmMTY2NTMxNDY3NjRmODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1EMF2xJCCOOkplVYoxxKRJz86zK
TuZ36FvAf/6oSb3Wx6CfUzcz5N7tBVYsr8zMO4S2cOn0WTS0f60x//zlusWf3o2A
HOeKa1wtBjYknfl6yl5nsMjcHHzawA28tCryyvWJBqjaGa1TZ75eo86MwQCYSdfp
Bd9YKPTkNeziYDSVfO3dY+WIh+HknCHSHt9Q7vJMVtwnERe09JT53kMPVD+Igq71
ZbCJMVCRoQ+w7GjBA9QJvFFW2OX9qBBa/N6RKM2rD4vgvkWp5YT1YpTAnSwmlszo
fm2eBVsEMFukJ0FKuSTbJGXy134aJ0cHelj6cjj7npMSNpxbTirwenlnmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4GJIQ47o0XThQtq/FmUxRnZPgqMB8GA1UdIwQY
MBaAFG1lCvFyREtSEWp6Z9dKrH34pV4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQt
YjRhMGNiOGVkODIxLzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQtYjRhMGNiOGVkODIx
LzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/Xik4pG
3Lk5h1MjnRDDiz6B5aE8a0aMdvoMQatN5ijJOyU1ZRUGMqXbIv/seWXw37IvtpXW
aEfzoTYSCPr5QzqwR97dc6aOcrqTPD0d2ssjcX5j3PRX8jva/NHCtLi2p5egmDTT
++d9jWk7RwdnfzsAZVdf2fRog915EJt8pe7iKYFRDnA9LV5Sslgo5WMwIw0VTrUQ
n2iC4AThHLwSC+olY/yq5ecGMp1CG1EaGg3fqui5qjIDdooMN/lyt3I9tWEnHyGB
aijx4AuBisXzG74jPMSRIcdwXOYWxQlCJ6BdHuvuUjyj9NDZ45uEiGX8ttQJ7h7a
R+OQg5leTaX+GA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 11:45:31 2025 by rpki-client