This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          /flfB7lZaV64B/hsDHWQQrrBrf8NxkoVj2vd8exIH30=
Subject key identifier:   39:13:57:0C:2B:84:04:54:0A:7C:C6:DE:7B:DA:06:86:36:79:8D:76
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B1B04C14C3581A9823E02219CA7259E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          1779
Signing time:             Sun 14 Dec 2025 04:00:54 +0000
Manifest this update:     Sun 14 Dec 2025 04:00:54 +0000
Manifest next update:     Mon 15 Dec 2025 04:00:54 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: lKUk4h44I9cyoy6CW0elKjAT17xH7Vc4xFbZ97rT09M=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:04:c1:4c:35:81:a9:82:3e:02:21:9c:a7:25:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Dec 14 04:00:54 2025 GMT
            Not After : Dec 15 04:00:54 2025 GMT
        Subject: CN=3913570c2b8404540a7cc6de7bda068636798d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:aa:81:7f:88:95:83:b8:99:18:30:b3:28:
                    15:25:e5:31:65:ae:c2:6f:9f:4a:d7:bb:70:86:4c:
                    eb:63:38:b0:fa:84:b8:9d:5c:a6:1d:d5:c0:60:77:
                    d5:4e:5d:ab:3c:b7:0c:cc:db:99:a2:67:4b:28:74:
                    e5:5e:a6:33:ad:37:1b:43:dd:55:5d:5c:3a:a4:78:
                    58:c9:d5:48:97:1b:1d:ec:52:21:21:5b:35:08:b7:
                    fd:b4:e7:78:f2:2e:57:ff:d8:92:f9:a5:64:0b:a7:
                    01:d6:75:00:8e:b8:fc:2b:58:a4:67:1d:fd:1a:94:
                    5b:29:38:fe:2b:4e:7f:b2:f8:47:47:b5:da:66:c5:
                    eb:12:07:b0:cb:b2:4e:9b:6a:50:88:37:e7:e2:d7:
                    cc:c6:07:01:a6:bb:b8:9c:b1:73:9c:27:b4:5c:b1:
                    26:79:92:62:64:42:49:13:a1:63:e7:b4:42:cf:bb:
                    e5:60:ef:e8:6c:1e:bd:2b:53:4a:2b:e6:65:b5:07:
                    80:11:eb:69:2d:da:0a:f6:29:90:6e:5b:a1:b3:52:
                    d3:c3:15:47:3c:c6:82:2d:68:8f:95:ab:5a:aa:29:
                    a1:c5:14:ad:6c:01:2d:ed:89:f5:e8:07:99:92:e5:
                    df:af:cd:1b:58:32:5c:cc:60:de:18:94:3d:a6:32:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:57:0C:2B:84:04:54:0A:7C:C6:DE:7B:DA:06:86:36:79:8D:76
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:42:60:e1:17:a8:ba:00:ea:4f:8b:20:c4:f7:61:81:3e:55:
         e4:5b:65:f3:37:6d:b5:93:b1:f6:73:84:ed:ef:1b:9b:d1:26:
         74:ab:1e:ab:79:11:ac:19:b9:b9:1a:73:cd:34:71:84:a6:b9:
         23:3b:03:7e:55:31:2a:85:22:8b:14:1a:42:80:ab:49:7e:75:
         a7:bb:bf:ce:40:38:36:2d:e9:df:fb:9f:52:8f:a2:8d:8e:e9:
         e8:89:c9:f3:c2:c9:81:9d:59:c5:93:a2:20:52:26:92:60:b7:
         8b:cb:6e:8d:20:fe:19:c1:74:64:1a:c3:44:cb:02:67:d3:f7:
         07:9e:f7:07:d8:fb:09:bb:ad:bd:ff:67:9b:4a:ad:57:df:d4:
         02:e0:17:91:c1:91:5c:e3:2e:3b:04:f7:27:6f:a5:e6:77:a9:
         94:7a:78:0c:1c:b3:03:2d:77:4a:24:4e:a1:e2:25:f3:de:03:
         66:3f:a2:ed:3d:83:af:ce:1e:6a:32:e6:7c:85:9c:d9:7c:5e:
         6b:b0:39:fa:e6:f3:f0:c5:c8:93:17:5e:c7:f7:b4:a4:3b:51:
         c8:82:b6:d9:45:a8:68:3e:7a:2d:23:d1:32:1b:f3:b4:dc:89:
         55:2f:d5:6d:9a:ad:f8:bf:84:29:ea:13:39:fe:a3:7d:41:ae:
         95:2b:e0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbBMFMNYGpgj4CIZynJZ4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2
NDY3OTYwHhcNMjUxMjE0MDQwMDU0WhcNMjUxMjE1MDQwMDU0WjAzMTEwLwYDVQQD
EygzOTEzNTcwYzJiODQwNDU0MGE3Y2M2ZGU3YmRhMDY4NjM2Nzk4ZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGqgX+IlYO4mRgwsygVJeUxZa7C
b59K17twhkzrYziw+oS4nVymHdXAYHfVTl2rPLcMzNuZomdLKHTlXqYzrTcbQ91V
XVw6pHhYydVIlxsd7FIhIVs1CLf9tOd48i5X/9iS+aVkC6cB1nUAjrj8K1ikZx39
GpRbKTj+K05/svhHR7XaZsXrEgewy7JOm2pQiDfn4tfMxgcBpru4nLFznCe0XLEm
eZJiZEJJE6Fj57RCz7vlYO/obB69K1NKK+ZltQeAEetpLdoK9imQbluhs1LTwxVH
PMaCLWiPlataqimhxRStbAEt7Yn16AeZkuXfr80bWDJczGDeGJQ9pjKabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkTVwwrhARUCnzG3nvaBoY2eY12MB8GA1UdIwQY
MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt
N2ViMmViODViODRhLzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh
LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUJg4Reo
ugDqT4sgxPdhgT5V5Ftl8zdttZOx9nOE7e8bm9EmdKseq3kRrBm5uRpzzTRxhKa5
IzsDflUxKoUiixQaQoCrSX51p7u/zkA4Ni3p3/ufUo+ijY7p6InJ88LJgZ1ZxZOi
IFImkmC3i8tujSD+GcF0ZBrDRMsCZ9P3B573B9j7Cbutvf9nm0qtV9/UAuAXkcGR
XOMuOwT3J2+l5neplHp4DByzAy13SiROoeIl894DZj+i7T2Dr84eajLmfIWc2Xxe
a7A5+ubz8MXIkxdex/e0pDtRyIK22UWoaD56LSPRMhvztNyJVS/VbZqt+L+EKeoT
Of6jfUGulSvgaQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 14:41:19 2025 by rpki-client