This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File:                     PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier:          53jtIVYj10C9u+Njt71QX/eNRjoa5IrLIxfb1JC1M1E=
Subject key identifier:   89:D2:D0:20:99:75:4A:C5:27:55:4A:56:2D:B5:FD:08:3F:8F:5B:22
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer:       /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial:       019B5A1AD88E1747DD75F3F202E222C0B9E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number:          1682
Signing time:             Fri 26 Dec 2025 10:01:07 +0000
Manifest this update:     Fri 26 Dec 2025 10:01:07 +0000
Manifest next update:     Sat 27 Dec 2025 10:01:07 +0000
Files and hashes:         1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
                          2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: vpSR38rQstoFIct+c5FuRMkZdwKAm3/O8sLgdxDNR9A=)
                          3: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1a:d8:8e:17:47:dd:75:f3:f2:02:e2:22:c0:b9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
        Validity
            Not Before: Dec 26 10:01:07 2025 GMT
            Not After : Dec 27 10:01:07 2025 GMT
        Subject: CN=89d2d02099754ac527554a562db5fd083f8f5b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:a5:83:15:76:d3:e9:bb:c7:ce:c2:3f:8a:
                    49:7f:43:b8:b5:6d:8e:c2:07:c6:d0:9f:43:ae:9c:
                    44:e5:39:63:f1:80:ed:58:c1:bb:db:aa:b3:c2:d6:
                    ce:d7:7e:f1:db:1a:d3:4b:e8:2b:23:6e:04:c0:0f:
                    74:8e:2a:e0:cf:a9:d7:e5:12:3a:03:33:97:7b:14:
                    9c:dd:82:df:21:3c:2d:85:5a:4e:c4:5a:db:5a:73:
                    ab:40:f5:4d:bd:a3:b1:11:15:24:26:2a:07:21:82:
                    57:23:b4:47:29:28:2f:3f:44:40:17:1c:f6:89:4c:
                    50:0c:3d:6f:51:9e:c6:51:ed:96:9b:ff:25:08:fb:
                    f2:c7:f6:d2:39:08:98:26:d1:6d:18:72:58:5a:ee:
                    59:56:9d:fd:fd:57:82:a5:34:ec:2a:da:4a:67:60:
                    1a:42:85:1f:ea:cf:a1:24:0d:17:96:86:96:ca:3e:
                    da:5f:e9:55:7b:50:1a:cf:6b:99:0d:24:33:fd:dd:
                    b4:3d:ff:4b:98:b3:a9:8f:45:f8:75:e3:20:00:0c:
                    bc:7f:07:ac:c4:b4:5e:39:05:be:0d:be:30:bb:28:
                    b0:ef:22:b5:8c:c9:83:5f:59:78:5c:81:f9:c8:1c:
                    6d:71:27:8d:09:76:1a:94:40:ab:17:b4:81:d7:e7:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:D0:20:99:75:4A:C5:27:55:4A:56:2D:B5:FD:08:3F:8F:5B:22
            X509v3 Authority Key Identifier:
                keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:0a:38:7a:65:26:2b:69:e7:92:58:57:65:b4:f4:b7:1b:
         0a:48:01:33:b0:c5:6c:d4:92:2d:30:16:13:5d:bb:e0:9d:ab:
         e8:e2:03:87:4e:d0:24:1d:18:b4:7c:45:61:60:f2:d5:68:25:
         f4:90:39:49:ec:a5:5a:b5:d7:49:e4:65:c9:9b:0f:25:3a:b1:
         ba:e2:5d:87:a9:b1:0e:0a:0b:52:48:de:c2:4d:40:35:5c:51:
         ad:4e:ef:48:5c:15:fb:ae:9d:f2:83:bd:9f:bc:c9:c4:3f:b1:
         08:d5:22:34:92:90:df:d9:50:90:e0:fe:60:48:c2:cb:2e:50:
         42:c7:a0:2c:b6:d1:c7:57:76:69:2c:46:6b:d6:bd:34:a1:c5:
         cf:00:29:b6:e5:9f:54:2d:89:2b:13:3a:1d:e7:3d:cc:13:57:
         60:04:e9:e7:70:99:0e:97:64:b5:89:92:7c:f9:6d:ed:a5:1e:
         b8:ad:b1:c4:2e:8d:a9:d0:2a:5e:07:da:d9:bc:13:49:a0:1a:
         8e:f4:ed:99:58:a4:20:ee:57:0d:65:26:7b:6a:f2:8a:b1:85:
         21:26:b1:1d:56:96:af:32:ab:60:13:53:7a:81:fe:cc:18:26:
         16:2e:3a:4c:38:0c:35:97:98:fb:a6:1a:07:b9:f5:88:82:15:
         69:6a:8f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtaGtiOF0fddfPyAuIiwLnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz
MzlhN2UwHhcNMjUxMjI2MTAwMTA3WhcNMjUxMjI3MTAwMTA3WjAzMTEwLwYDVQQD
Eyg4OWQyZDAyMDk5NzU0YWM1Mjc1NTRhNTYyZGI1ZmQwODNmOGY1YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpmlgxV20+m7x87CP4pJf0O4tW2O
wgfG0J9DrpxE5Tlj8YDtWMG726qzwtbO137x2xrTS+grI24EwA90jirgz6nX5RI6
AzOXexSc3YLfITwthVpOxFrbWnOrQPVNvaOxERUkJioHIYJXI7RHKSgvP0RAFxz2
iUxQDD1vUZ7GUe2Wm/8lCPvyx/bSOQiYJtFtGHJYWu5ZVp39/VeCpTTsKtpKZ2Aa
QoUf6s+hJA0XloaWyj7aX+lVe1Aaz2uZDSQz/d20Pf9LmLOpj0X4deMgAAy8fwes
xLReOQW+Db4wuyiw7yK1jMmDX1l4XIH5yBxtcSeNCXYalECrF7SB1+fNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInS0CCZdUrFJ1VKVi21/Qg/j1siMB8GA1UdIwQY
MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct
NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk
LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/IKOHpl
Jitp55JYV2W09LcbCkgBM7DFbNSSLTAWE1274J2r6OIDh07QJB0YtHxFYWDy1Wgl
9JA5SeylWrXXSeRlyZsPJTqxuuJdh6mxDgoLUkjewk1ANVxRrU7vSFwV+66d8oO9
n7zJxD+xCNUiNJKQ39lQkOD+YEjCyy5QQsegLLbRx1d2aSxGa9a9NKHFzwAptuWf
VC2JKxM6Hec9zBNXYATp53CZDpdktYmSfPlt7aUeuK2xxC6NqdAqXgfa2bwTSaAa
jvTtmVikIO5XDWUme2ryirGFISaxHVaWrzKrYBNTeoH+zBgmFi46TDgMNZeY+6Ya
B7n1iIIVaWqPDQ==
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:44:19 2025 by rpki-client