This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File:                     fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier:          GE5w43hON82khdLahvYcaRoSxfDsyHD3euXB8X9iv+A=
Subject key identifier:   6E:FA:99:B3:7D:F3:B8:2F:DA:C4:B4:16:21:C8:8D:82:87:CE:0A:32
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer:       /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial:       019B08FE67718A4E23E0DDE445C971223923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number:          1772
Signing time:             Wed 10 Dec 2025 16:00:48 +0000
Manifest this update:     Wed 10 Dec 2025 16:00:48 +0000
Manifest next update:     Thu 11 Dec 2025 16:00:48 +0000
Files and hashes:         1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
                          2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
                          3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: E8A/zM3sSFDiatj/6YJIH5it6pmEiymcT+niCwJhY5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:fe:67:71:8a:4e:23:e0:dd:e4:45:c9:71:22:39:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
        Validity
            Not Before: Dec 10 16:00:48 2025 GMT
            Not After : Dec 11 16:00:48 2025 GMT
        Subject: CN=6efa99b37df3b82fdac4b41621c88d8287ce0a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:82:2a:6d:ea:db:69:66:c8:8b:45:b2:7a:
                    38:fe:4f:a2:34:85:42:33:05:94:87:ac:4c:7d:79:
                    4e:13:17:07:11:6a:6a:dd:01:eb:d5:04:01:d4:b0:
                    e2:97:9b:d6:fc:46:db:f4:7a:6e:1e:63:f9:f7:6a:
                    bc:18:b3:af:81:aa:cf:38:bc:16:84:d9:e6:eb:5b:
                    fd:77:6e:36:25:e4:fe:58:78:81:af:05:70:2e:6e:
                    3d:2c:41:ac:42:d6:e8:ac:1e:55:96:ff:ad:9a:6c:
                    20:27:c3:14:ce:48:eb:35:04:aa:17:46:7a:e1:23:
                    dd:ca:49:c4:89:b1:8c:25:eb:39:d1:82:ce:0b:f3:
                    5b:e0:f5:dc:df:31:c3:6c:e3:0f:97:d2:9f:3e:c5:
                    58:30:bc:8f:ba:c3:a5:b8:ac:8c:0c:3a:f9:4f:81:
                    77:49:04:9e:e4:ae:6d:ff:ef:cd:f1:8e:fa:78:e4:
                    fd:5b:15:31:c4:5e:54:a0:fb:21:ab:bc:5a:f9:e0:
                    d4:2a:b1:15:1f:30:5c:92:18:47:7a:45:f4:c3:49:
                    eb:ec:1d:49:44:16:25:47:ab:0c:e8:c1:82:2c:51:
                    61:a4:02:1a:fc:91:36:95:82:ad:d5:b6:c3:2e:91:
                    25:40:1a:8e:be:bc:e5:6d:12:df:83:82:10:59:cb:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:99:B3:7D:F3:B8:2F:DA:C4:B4:16:21:C8:8D:82:87:CE:0A:32
            X509v3 Authority Key Identifier:
                keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:4d:c8:6b:e2:23:78:00:99:98:54:54:99:5d:78:ca:01:
         9a:bc:d6:f6:25:05:88:b7:34:a7:42:c7:c4:5e:b5:e5:65:41:
         4c:ad:e2:f7:17:18:75:f7:01:b2:30:ee:02:1b:10:98:36:c7:
         e0:11:18:5c:6e:d5:06:8e:1a:ea:27:0e:26:4f:20:4a:b9:cd:
         c1:a3:1a:f5:dc:0b:9e:b4:7d:32:77:3a:73:6c:19:5c:77:32:
         42:f1:ac:d1:4b:c2:b5:af:73:80:f7:c9:01:b7:3c:29:dc:4b:
         a0:47:f7:48:ca:84:ee:69:a1:86:46:10:3a:cb:b8:d2:dd:c3:
         c3:95:1f:55:91:19:e0:11:95:9a:a0:1c:d2:4a:b3:c3:43:15:
         73:0a:b1:ef:1f:ac:da:13:86:78:c3:3d:73:79:2f:63:da:03:
         1f:37:b3:49:5b:25:5a:44:c5:1a:40:01:3e:0d:1e:83:86:e2:
         e8:37:4d:75:e2:d7:89:5c:fb:64:63:5a:23:f1:7d:de:dc:0f:
         41:37:6b:40:57:8e:88:51:01:00:0d:03:4c:02:31:f5:af:74:
         33:66:a4:23:a6:50:35:3f:1e:bc:b3:d3:69:12:2d:55:32:df:
         58:b7:80:44:ee:bc:14:7b:73:83:e1:8d:8f:2b:fe:6f:34:28:
         f4:98:a3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsI/mdxik4j4N3kRclxIjkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjUxMjEwMTYwMDQ4WhcNMjUxMjExMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZWZhOTliMzdkZjNiODJmZGFjNGI0MTYyMWM4OGQ4Mjg3Y2UwYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs02CKm3q22lmyItFsno4/k+iNIVC
MwWUh6xMfXlOExcHEWpq3QHr1QQB1LDil5vW/Ebb9HpuHmP592q8GLOvgarPOLwW
hNnm61v9d242JeT+WHiBrwVwLm49LEGsQtborB5Vlv+tmmwgJ8MUzkjrNQSqF0Z6
4SPdyknEibGMJes50YLOC/Nb4PXc3zHDbOMPl9KfPsVYMLyPusOluKyMDDr5T4F3
SQSe5K5t/+/N8Y76eOT9WxUxxF5UoPshq7xa+eDUKrEVHzBckhhHekX0w0nr7B1J
RBYlR6sM6MGCLFFhpAIa/JE2lYKt1bbDLpElQBqOvrzlbRLfg4IQWcu7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG76mbN987gv2sS0FiHIjYKHzgoyMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNtNyGvi
I3gAmZhUVJldeMoBmrzW9iUFiLc0p0LHxF615WVBTK3i9xcYdfcBsjDuAhsQmDbH
4BEYXG7VBo4a6icOJk8gSrnNwaMa9dwLnrR9Mnc6c2wZXHcyQvGs0UvCta9zgPfJ
Abc8KdxLoEf3SMqE7mmhhkYQOsu40t3Dw5UfVZEZ4BGVmqAc0kqzw0MVcwqx7x+s
2hOGeMM9c3kvY9oDHzezSVslWkTFGkABPg0eg4bi6DdNdeLXiVz7ZGNaI/F93twP
QTdrQFeOiFEBAA0DTAIx9a90M2akI6ZQNT8evLPTaRItVTLfWLeARO68FHtzg+GN
jyv+bzQo9Jijsw==
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:14:40 2025 by rpki-client