This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          AJiZ5c5XgCsysXh+NbYkqP2sTQ+CJxT+S2xeeVcZpdE=
Subject key identifier:   EC:AD:BB:F0:26:04:9F:4C:75:EA:33:8A:EB:F8:E7:4A:D5:D2:E5:97
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       019B0DB75482C1D0FBFC5B97536802A0BE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0F51
Signing time:             Thu 11 Dec 2025 14:01:17 +0000
Manifest this update:     Thu 11 Dec 2025 14:01:17 +0000
Manifest next update:     Fri 12 Dec 2025 14:01:17 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: OVp2xZoknot9EG5FDKtJAHqcZjjGGE+ndTUV8h/G4CI=)
                          2: EhMRfoZTp-U32lV428WRXV05Tv4.roa (hash: q/xEeC43hnYPZ8R0egzzBxElLR9uRxq4htThdOEU6VU=)
                          3: v6hAmhwF5zdYx8dEgkzg5dcM3po.roa (hash: WVX44j02BF26OexloZBarRA/wYQhTTWNJB3y+NBHmOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b7:54:82:c1:d0:fb:fc:5b:97:53:68:02:a0:be:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Dec 11 14:01:17 2025 GMT
            Not After : Dec 12 14:01:17 2025 GMT
        Subject: CN=ecadbbf026049f4c75ea338aebf8e74ad5d2e597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:a5:df:7e:eb:46:8b:41:f7:8b:a8:7e:2e:
                    27:e2:8b:bd:fc:d6:78:83:4b:31:af:11:c7:89:1b:
                    0e:fe:83:64:ac:11:63:bc:8b:d3:e4:5e:f1:34:1f:
                    e1:75:96:b7:28:3f:27:26:a9:92:4e:68:c1:06:d0:
                    c0:1e:d9:05:c7:7f:35:26:e1:81:59:dd:93:1f:3d:
                    f3:d7:3e:0e:21:1a:92:e6:05:84:37:ac:c9:5e:c0:
                    29:10:8b:35:2a:ef:e4:7e:e7:0f:9e:ab:e7:a2:2a:
                    36:9a:5a:34:9f:42:c4:56:ee:99:fc:91:9b:75:27:
                    f4:ba:84:94:d2:3f:da:18:98:f8:27:2a:c5:da:1c:
                    49:7a:4d:f4:a2:fe:7b:a8:a8:c7:95:56:a4:fb:3b:
                    25:15:9a:06:ff:5d:2d:96:b6:23:f1:e7:34:6b:a9:
                    40:30:8f:84:fa:9e:20:b0:db:c8:45:50:58:11:3d:
                    7a:b3:d5:e9:90:2b:23:43:0a:27:7f:ac:99:99:1c:
                    85:9b:6c:f5:3d:91:5b:16:98:b2:cb:11:9e:45:b9:
                    7b:68:21:f0:1c:2c:60:67:25:a6:5d:1c:cc:80:ec:
                    be:cc:b4:26:18:af:09:a4:b1:84:ca:8f:8b:14:37:
                    e2:e8:3e:33:98:a4:c0:a9:1e:18:61:a4:5b:5c:ea:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:BB:F0:26:04:9F:4C:75:EA:33:8A:EB:F8:E7:4A:D5:D2:E5:97
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:de:57:41:ce:fd:e5:16:ab:37:7a:31:e6:f9:e5:52:50:d4:
         53:fb:54:97:17:69:84:a5:67:7d:2a:4b:df:49:a7:6c:48:75:
         fa:41:c7:fa:bc:b7:fa:ab:29:55:ec:7d:b7:bf:c7:a0:43:79:
         67:f0:51:ca:f3:d3:89:11:e2:65:28:89:d4:16:6e:dc:be:be:
         f4:d0:cf:77:55:7e:83:96:6b:8e:56:e7:c7:04:e6:e1:5d:44:
         75:f4:ed:03:a1:8a:27:ac:08:01:ee:79:a0:2f:ad:7d:ca:4f:
         61:e3:28:77:28:e5:f9:db:50:68:ee:f2:90:86:31:f9:5a:6c:
         df:7b:21:10:eb:3e:16:d4:40:92:1b:a5:43:ea:d6:82:dc:1d:
         60:37:01:ef:a6:53:85:2c:9e:fb:d0:85:38:15:7c:fd:fe:d3:
         cd:c8:e5:2e:06:c4:60:cd:98:4a:a4:a0:0b:a3:4e:30:14:a1:
         5c:a2:04:69:62:18:f7:da:74:f0:c4:70:fb:0d:f5:d6:e2:92:
         51:db:06:b8:00:3c:61:18:69:ff:46:e9:00:f3:7b:2a:f2:7a:
         56:fd:23:a8:84:e4:c6:a1:15:c9:3f:b6:81:7e:fe:bf:95:98:
         f9:3a:b9:94:95:04:94:cf:53:14:af:76:ca:b6:f7:2e:13:b8:
         ed:68:d7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsNt1SCwdD7/FuXU2gCoL6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw
MzM3ZDEwHhcNMjUxMjExMTQwMTE3WhcNMjUxMjEyMTQwMTE3WjAzMTEwLwYDVQQD
EyhlY2FkYmJmMDI2MDQ5ZjRjNzVlYTMzOGFlYmY4ZTc0YWQ1ZDJlNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHKl337rRotB94uofi4n4ou9/NZ4
g0sxrxHHiRsO/oNkrBFjvIvT5F7xNB/hdZa3KD8nJqmSTmjBBtDAHtkFx381JuGB
Wd2THz3z1z4OIRqS5gWEN6zJXsApEIs1Ku/kfucPnqvnoio2mlo0n0LEVu6Z/JGb
dSf0uoSU0j/aGJj4JyrF2hxJek30ov57qKjHlVak+zslFZoG/10tlrYj8ec0a6lA
MI+E+p4gsNvIRVBYET16s9XpkCsjQwonf6yZmRyFm2z1PZFbFpiyyxGeRbl7aCHw
HCxgZyWmXRzMgOy+zLQmGK8JpLGEyo+LFDfi6D4zmKTAqR4YYaRbXOqIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOytu/AmBJ9Mdeoziuv450rV0uWXMB8GA1UdIwQY
MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt
Y2ZlZmRmZGZiZTZiLzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi
LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt5XQc79
5RarN3ox5vnlUlDUU/tUlxdphKVnfSpL30mnbEh1+kHH+ry3+qspVex9t7/HoEN5
Z/BRyvPTiRHiZSiJ1BZu3L6+9NDPd1V+g5ZrjlbnxwTm4V1EdfTtA6GKJ6wIAe55
oC+tfcpPYeModyjl+dtQaO7ykIYx+Vps33shEOs+FtRAkhulQ+rWgtwdYDcB76ZT
hSye+9CFOBV8/f7TzcjlLgbEYM2YSqSgC6NOMBShXKIEaWIY99p08MRw+w311uKS
UdsGuAA8YRhp/0bpAPN7KvJ6Vv0jqITkxqEVyT+2gX7+v5WY+Tq5lJUElM9TFK92
yrb3LhO47WjXrg==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:20:37 2025 by rpki-client