This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          kQBgPoAbJ+jXrE29zDG78B3082Hbfi6el+d1kLVfxs8=
Subject key identifier:   92:96:25:B8:DA:91:1A:3B:D3:3C:A1:E9:30:82:FF:EC:9C:33:0E:2E
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       019B38A25EC0A4EF0CEE64613391D18868A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          13B9
Signing time:             Fri 19 Dec 2025 22:02:03 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:03 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:03 +0000
Files and hashes:         1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
                          2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: vfS5qo1t3v5qrGy01DhFxX/xQJsS8Q/csokPI8dUJzE=)
                          3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
                          4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:5e:c0:a4:ef:0c:ee:64:61:33:91:d1:88:68:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: Dec 19 22:02:03 2025 GMT
            Not After : Dec 20 22:02:03 2025 GMT
        Subject: CN=929625b8da911a3bd33ca1e93082ffec9c330e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:dd:66:72:be:c6:42:60:5f:41:5c:37:fc:
                    e0:da:d7:82:84:48:d9:31:df:46:e0:53:28:6d:d2:
                    4b:49:06:34:af:c8:a8:b8:91:7e:b1:4e:05:4e:4c:
                    2d:07:54:02:4d:42:b0:6b:2a:0c:4b:50:08:c4:ab:
                    d7:8a:27:16:91:54:87:a5:62:9b:f4:9c:ab:b4:47:
                    64:e4:e1:3f:a8:01:7f:db:20:33:d1:ea:2b:39:9e:
                    2a:f1:9f:fd:42:18:b4:b2:1b:67:30:5b:c7:ee:f7:
                    d6:9c:e1:d5:09:dd:51:58:b0:69:00:41:59:b5:4d:
                    5d:9a:34:71:ad:bd:78:77:18:38:ea:71:50:6d:b7:
                    29:93:8b:9c:a3:c6:1e:59:1a:29:e7:4b:67:c2:03:
                    3f:64:a5:92:45:76:5e:1f:1c:6d:e9:52:05:8b:06:
                    0d:1c:0d:52:54:83:5b:2d:16:6e:26:d3:04:98:e4:
                    3c:56:46:87:b3:c4:d6:93:96:29:0e:8c:f6:ef:0e:
                    e8:2f:6e:4f:f8:0e:3a:26:5d:03:41:d5:a6:0f:b4:
                    27:f6:8a:85:70:df:df:b1:96:2e:ce:c7:a6:f0:ce:
                    42:d4:3a:9d:cf:ff:c1:78:8d:23:dc:93:bb:1e:ab:
                    58:4d:47:b8:da:53:2c:33:87:94:e3:62:31:2f:26:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:96:25:B8:DA:91:1A:3B:D3:3C:A1:E9:30:82:FF:EC:9C:33:0E:2E
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:be:63:81:ae:6f:1f:17:ef:f3:08:4a:01:b5:35:3b:d2:dd:
         7e:cb:e6:3f:f4:24:a7:ec:97:e2:83:4b:2d:fe:a0:da:5c:e8:
         ef:a9:79:03:03:b2:d2:da:93:e9:83:1d:fa:65:26:2a:a0:f7:
         d0:44:f8:ba:69:db:18:24:80:71:eb:c0:10:d4:07:d3:2c:de:
         67:28:be:54:a0:bd:cb:3f:78:ee:8e:43:25:b7:c3:9e:c5:f5:
         ea:e2:13:b7:75:c3:69:cb:4d:21:31:0c:64:ed:9e:51:f0:ab:
         f6:9c:a4:cc:3d:5a:23:a0:6f:83:80:53:7c:21:c0:7e:39:94:
         85:84:79:c0:26:55:4b:53:ea:ba:a9:15:59:a0:87:9e:24:80:
         96:28:c2:99:6d:41:d0:81:7a:89:0c:84:b2:a3:c0:2a:8f:6c:
         54:c7:d8:23:2b:39:97:d9:99:86:8a:3d:61:9a:b5:95:90:d7:
         21:b9:b6:5c:1b:58:a6:de:6a:bd:96:65:35:51:77:bb:69:07:
         cf:7c:3a:56:68:fc:b2:9b:ee:7b:54:24:b7:99:03:5c:42:c7:
         0b:e8:03:d8:83:c7:16:ac:63:a9:63:62:78:f0:94:e5:ec:ea:
         f0:9f:8c:d3:09:2d:0e:07:2d:48:ee:c0:9d:74:f7:e6:3d:ea:
         7e:bb:ff:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4ol7ApO8M7mRhM5HRiGinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmQzMzc0YzdhYzNjMDM3Nzg3MDdmMzY3ZjkxNDhmMWZl
MDM5MGQwHhcNMjUxMjE5MjIwMjAzWhcNMjUxMjIwMjIwMjAzWjAzMTEwLwYDVQQD
Eyg5Mjk2MjViOGRhOTExYTNiZDMzY2ExZTkzMDgyZmZlYzljMzMwZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV7dZnK+xkJgX0FcN/zg2teChEjZ
Md9G4FMobdJLSQY0r8iouJF+sU4FTkwtB1QCTUKwayoMS1AIxKvXiicWkVSHpWKb
9JyrtEdk5OE/qAF/2yAz0eorOZ4q8Z/9Qhi0shtnMFvH7vfWnOHVCd1RWLBpAEFZ
tU1dmjRxrb14dxg46nFQbbcpk4uco8YeWRop50tnwgM/ZKWSRXZeHxxt6VIFiwYN
HA1SVINbLRZuJtMEmOQ8VkaHs8TWk5YpDoz27w7oL25P+A46Jl0DQdWmD7Qn9oqF
cN/fsZYuzsem8M5C1Dqdz//BeI0j3JO7HqtYTUe42lMsM4eU42IxLyb2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKWJbjakRo70zyh6TCC/+ycMw4uMB8GA1UdIwQY
MBaAFEX9M3THrDwDd4cH82f5FI8f4DkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDIt
ZGUyNWNkYzhmMjExLzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDItZGUyNWNkYzhmMjEx
LzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIL5jga5v
Hxfv8whKAbU1O9LdfsvmP/Qkp+yX4oNLLf6g2lzo76l5AwOy0tqT6YMd+mUmKqD3
0ET4umnbGCSAcevAENQH0yzeZyi+VKC9yz947o5DJbfDnsX16uITt3XDactNITEM
ZO2eUfCr9pykzD1aI6Bvg4BTfCHAfjmUhYR5wCZVS1PquqkVWaCHniSAlijCmW1B
0IF6iQyEsqPAKo9sVMfYIys5l9mZhoo9YZq1lZDXIbm2XBtYpt5qvZZlNVF3u2kH
z3w6Vmj8spvue1Qkt5kDXELHC+gD2IPHFqxjqWNiePCU5ezq8J+M0wktDgctSO7A
nXT35j3qfrv/Aw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:18:22 2025 by rpki-client