This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          VJPwALTwKlgchU1DJHCrNvxKDO4w0CrRwJhxw+x9itQ=
Subject key identifier:   3A:42:07:A2:FA:53:1C:26:92:42:BF:2F:88:14:DE:9E:A9:54:1F:88
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019B251A4773204D166684F751D1D5CA1219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1783
Signing time:             Tue 16 Dec 2025 03:00:37 +0000
Manifest this update:     Tue 16 Dec 2025 03:00:37 +0000
Manifest next update:     Wed 17 Dec 2025 03:00:37 +0000
Files and hashes:         1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=)
                          2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: CXHgzevPA1nLZpFaIS84WZ3uSf0V28N5Gy8igyeTgGY=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:1a:47:73:20:4d:16:66:84:f7:51:d1:d5:ca:12:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Dec 16 03:00:37 2025 GMT
            Not After : Dec 17 03:00:37 2025 GMT
        Subject: CN=3a4207a2fa531c269242bf2f8814de9ea9541f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:58:33:2a:6b:e3:13:a0:2c:3c:3d:13:fd:
                    8b:c0:11:cc:c9:d3:e8:be:2d:9c:ec:03:40:04:96:
                    ea:e3:f5:24:42:ed:e2:f6:63:bb:e6:6e:d4:20:84:
                    0a:c1:50:9a:c0:ee:cc:4f:67:5b:26:df:8b:7b:c1:
                    5f:0c:31:16:16:64:61:6b:61:c4:15:e7:a5:26:b2:
                    55:b2:50:49:47:05:c0:dc:b5:5f:f2:8f:11:e7:2a:
                    c5:cc:51:f5:87:9e:9d:52:76:29:b5:90:99:a7:e5:
                    f9:23:8a:35:85:12:f6:56:8d:d9:a4:7c:16:0e:6f:
                    c6:72:53:af:72:84:82:92:8f:ba:46:28:9f:e6:69:
                    64:43:6c:1c:52:44:66:70:da:10:48:84:57:6b:c1:
                    77:fa:77:14:2a:6a:bd:db:2f:6f:e0:dc:35:f0:ec:
                    c1:f2:de:3e:94:ce:02:ad:6f:7a:32:20:62:89:52:
                    f8:40:21:bf:59:40:6c:63:35:34:39:78:f5:7d:5d:
                    78:7d:39:28:e8:e4:36:15:40:40:3c:a3:00:46:77:
                    44:91:89:b9:38:d3:32:55:59:72:64:04:1c:cf:f8:
                    2e:94:df:23:98:62:2e:9d:e8:9b:0f:ac:c9:53:56:
                    d2:11:25:aa:62:3a:a8:b8:76:c2:93:67:52:55:1b:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:07:A2:FA:53:1C:26:92:42:BF:2F:88:14:DE:9E:A9:54:1F:88
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:2b:1e:97:d4:6f:63:a9:01:89:25:fa:0f:58:1a:d9:13:
         71:7d:6e:13:d9:54:4a:e8:94:4a:d8:ab:70:05:ce:dc:ea:86:
         d0:94:49:76:19:89:c9:44:08:14:ca:6a:81:3c:63:0e:fc:60:
         90:20:90:cf:ff:0d:c7:ea:5a:a0:50:18:91:0c:48:a8:a8:4e:
         2d:c7:75:ab:ea:2b:cf:1e:ea:fc:9b:53:16:84:bd:60:4b:85:
         98:49:7d:e4:85:18:93:fe:46:85:6b:6d:57:2c:45:8f:0f:90:
         84:b4:c3:9d:74:55:5d:49:0a:56:3a:eb:d2:c7:e2:1b:c1:87:
         46:00:6a:a1:c6:6c:38:fb:dd:f1:74:12:58:3a:cc:40:6a:53:
         0c:31:61:b2:00:e7:d0:63:c9:3d:72:66:69:82:d4:90:f9:8c:
         ac:52:b7:fa:a7:ff:cc:b4:f3:68:d9:d8:e7:20:73:83:08:4f:
         4b:da:ed:c4:10:ef:06:ca:dc:e7:78:8f:bb:2b:88:a8:6e:53:
         18:8a:e8:1c:81:a4:5e:9b:58:b3:0c:77:66:db:3c:87:4b:6b:
         57:45:b3:66:c2:bc:c3:c7:8a:ab:22:e6:c5:a1:69:3f:45:d0:
         a3:12:5b:49:ad:37:99:cc:50:5c:91:11:af:fd:cb:11:05:74:
         71:0a:23:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZslGkdzIE0WZoT3UdHVyhIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjUxMjE2MDMwMDM3WhcNMjUxMjE3MDMwMDM3WjAzMTEwLwYDVQQD
EygzYTQyMDdhMmZhNTMxYzI2OTI0MmJmMmY4ODE0ZGU5ZWE5NTQxZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEVYMypr4xOgLDw9E/2LwBHMydPo
vi2c7ANABJbq4/UkQu3i9mO75m7UIIQKwVCawO7MT2dbJt+Le8FfDDEWFmRha2HE
FeelJrJVslBJRwXA3LVf8o8R5yrFzFH1h56dUnYptZCZp+X5I4o1hRL2Vo3ZpHwW
Dm/GclOvcoSCko+6Riif5mlkQ2wcUkRmcNoQSIRXa8F3+ncUKmq92y9v4Nw18OzB
8t4+lM4CrW96MiBiiVL4QCG/WUBsYzU0OXj1fV14fTko6OQ2FUBAPKMARndEkYm5
ONMyVVlyZAQcz/gulN8jmGIuneibD6zJU1bSESWqYjqouHbCk2dSVRverwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpCB6L6UxwmkkK/L4gU3p6pVB+IMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6YrHpfU
b2OpAYkl+g9YGtkTcX1uE9lUSuiUStircAXO3OqG0JRJdhmJyUQIFMpqgTxjDvxg
kCCQz/8Nx+paoFAYkQxIqKhOLcd1q+orzx7q/JtTFoS9YEuFmEl95IUYk/5GhWtt
VyxFjw+QhLTDnXRVXUkKVjrr0sfiG8GHRgBqocZsOPvd8XQSWDrMQGpTDDFhsgDn
0GPJPXJmaYLUkPmMrFK3+qf/zLTzaNnY5yBzgwhPS9rtxBDvBsrc53iPuyuIqG5T
GIroHIGkXptYswx3Zts8h0trV0WzZsK8w8eKqyLmxaFpP0XQoxJbSa03mcxQXJER
r/3LEQV0cQoj/A==
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:47:22 2025 by rpki-client