This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File:                     V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier:          llm7QElfn4DQ83lWqjO7/2VhELlgOdtDgTgzWFL/wSA=
Subject key identifier:   AB:E9:0F:57:92:B5:90:2B:AE:4C:36:C0:A0:9F:CD:57:07:A6:76:DF
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer:       /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial:       019B3A90781DCDCC109DAE55078B03682929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number:          029F
Signing time:             Sat 20 Dec 2025 07:01:44 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:44 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:44 +0000
Files and hashes:         1: 1-of8pnTOP0J8yCsHZmocQfT7mIM.roa (hash: 0Lq0vU+tQx9q/SkpzGWQvm0P7tr0nnJgKO8aL6LRtlo=)
                          2: 1MA9viEbnkqns-jv1uGgSDf_hss.roa (hash: B67bul7AJskFHt7w3WE7vDo8ygcPvZu9TvB+6EzuGlE=)
                          3: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: vTBWPdVmDv0wTZorjxgIxl4QPmFrVbMM5pRoTQ4re6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:78:1d:cd:cc:10:9d:ae:55:07:8b:03:68:29:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
        Validity
            Not Before: Dec 20 07:01:44 2025 GMT
            Not After : Dec 21 07:01:44 2025 GMT
        Subject: CN=abe90f5792b5902bae4c36c0a09fcd5707a676df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:dd:2d:8b:a1:63:f5:b1:14:f0:1e:95:fc:
                    ee:df:19:3b:0c:e2:08:15:77:5f:e8:71:f5:51:ef:
                    fa:0d:83:e8:8c:47:d8:89:9d:23:1d:54:1c:99:cc:
                    35:1e:22:2b:82:9a:3e:7e:ee:10:47:f0:f7:e6:a2:
                    f1:ab:6d:b8:df:9c:65:fd:1c:38:db:52:bf:8d:5b:
                    f2:b8:71:91:6a:1e:4a:7d:d0:eb:3f:1f:c3:8e:ff:
                    2d:9e:f8:d2:13:ee:62:c7:6e:85:ca:fe:74:f1:85:
                    3b:8e:ce:8c:8e:a7:d9:d5:d2:b0:3f:c8:f2:1e:ba:
                    25:06:6c:4a:f5:cf:fb:3a:ca:20:24:8f:23:b2:d1:
                    74:db:34:51:66:fb:d7:21:8d:ad:d7:0a:bf:f5:6b:
                    14:db:82:ef:50:f8:a4:58:ce:87:e8:ec:fb:b4:7a:
                    9c:c6:7e:98:3e:a6:c3:33:b2:46:3c:a2:37:a9:ea:
                    14:ba:ec:ca:a0:21:80:91:40:e8:27:e9:ba:50:e3:
                    0a:73:96:f7:b4:33:9a:c2:f3:88:ff:58:05:51:fd:
                    91:60:d3:76:8d:c0:e3:26:0a:82:68:01:bd:a5:ad:
                    af:38:44:60:a9:cf:42:de:23:47:69:76:04:48:e6:
                    4d:66:e0:14:c0:a0:73:58:6f:64:fc:82:7d:2a:8f:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E9:0F:57:92:B5:90:2B:AE:4C:36:C0:A0:9F:CD:57:07:A6:76:DF
            X509v3 Authority Key Identifier:
                keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:66:07:3e:94:a8:91:7f:d8:5b:c0:ff:dc:6c:05:b0:11:49:
         53:5a:dc:f8:27:4e:00:2c:9c:fd:9c:19:b2:6d:ba:d0:b8:f9:
         a7:c9:fc:78:76:ff:b5:77:1b:cf:a8:96:5a:01:1d:49:f7:77:
         96:da:3c:f6:0c:af:07:16:47:b3:83:e9:80:c4:d2:dd:e8:4e:
         e2:cb:51:8e:60:16:72:83:af:a6:fb:43:ba:ba:c7:dd:3f:49:
         96:10:8e:67:cf:21:e5:e4:33:20:ab:c2:2e:c1:72:d9:a0:3c:
         b8:0e:1c:7c:a1:82:74:1e:a7:35:43:66:40:a7:35:51:ac:be:
         41:96:fd:30:14:34:e2:98:33:4e:ea:d1:0f:00:a5:96:1d:12:
         7f:87:e9:46:c0:90:54:59:53:74:6b:f8:3c:66:2e:d5:03:e0:
         07:c5:b8:7c:03:d8:e0:41:85:79:13:76:c3:a7:ee:d7:6b:aa:
         06:4f:fc:3c:94:bb:ed:c6:98:a8:92:f8:dd:ff:be:20:a9:2b:
         08:15:4d:43:d7:21:d2:13:74:c3:52:73:ba:f0:ff:05:6d:f4:
         1a:f1:e7:d2:f1:15:2e:6f:e6:0d:ff:a3:bb:1d:7f:8c:d9:74:
         18:bc:a6:5b:e9:11:5a:83:03:7f:da:62:80:dc:51:7b:de:64:
         23:0e:70:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6kHgdzcwQna5VB4sDaCkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDBiODYxYWZiMTI1YjhiYzEzOTY5ZDBiNDk3MzRjZTg0
NGJkNmEwHhcNMjUxMjIwMDcwMTQ0WhcNMjUxMjIxMDcwMTQ0WjAzMTEwLwYDVQQD
EyhhYmU5MGY1NzkyYjU5MDJiYWU0YzM2YzBhMDlmY2Q1NzA3YTY3NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYfdLYuhY/WxFPAelfzu3xk7DOII
FXdf6HH1Ue/6DYPojEfYiZ0jHVQcmcw1HiIrgpo+fu4QR/D35qLxq22435xl/Rw4
21K/jVvyuHGRah5KfdDrPx/Djv8tnvjSE+5ix26Fyv508YU7js6MjqfZ1dKwP8jy
HrolBmxK9c/7OsogJI8jstF02zRRZvvXIY2t1wq/9WsU24LvUPikWM6H6Oz7tHqc
xn6YPqbDM7JGPKI3qeoUuuzKoCGAkUDoJ+m6UOMKc5b3tDOawvOI/1gFUf2RYNN2
jcDjJgqCaAG9pa2vOERgqc9C3iNHaXYESOZNZuAUwKBzWG9k/IJ9Ko/MmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvpD1eStZArrkw2wKCfzVcHpnbfMB8GA1UdIwQY
MBaAFFfQuGGvsSW4vBOWnQtJc0zoRL1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEt
Zjg2MmZkZmEzYjkzLzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEtZjg2MmZkZmEzYjkz
LzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGYHPpSo
kX/YW8D/3GwFsBFJU1rc+CdOACyc/ZwZsm260Lj5p8n8eHb/tXcbz6iWWgEdSfd3
lto89gyvBxZHs4PpgMTS3ehO4stRjmAWcoOvpvtDurrH3T9JlhCOZ88h5eQzIKvC
LsFy2aA8uA4cfKGCdB6nNUNmQKc1Uay+QZb9MBQ04pgzTurRDwCllh0Sf4fpRsCQ
VFlTdGv4PGYu1QPgB8W4fAPY4EGFeRN2w6fu12uqBk/8PJS77caYqJL43f++IKkr
CBVNQ9ch0hN0w1JzuvD/BW30GvHn0vEVLm/mDf+jux1/jNl0GLymW+kRWoMDf9pi
gNxRe95kIw5w6A==
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:54:51 2025 by rpki-client