This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          HL+CwrrUbEnhRT98k1HsCFNrKGbKz3fX2jbuqD+CofQ=
Subject key identifier:   14:3E:2D:21:88:EF:2D:44:42:46:0B:9E:00:04:EB:6D:11:4E:2E:C9
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019B30B0A6DC3AC353337BE8A625A86DE461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1789
Signing time:             Thu 18 Dec 2025 09:00:41 +0000
Manifest this update:     Thu 18 Dec 2025 09:00:41 +0000
Manifest next update:     Fri 19 Dec 2025 09:00:41 +0000
Files and hashes:         1: L6F3hMFG6OHpYjqYf1l-WbKWZXk.roa (hash: 8j/OG5YeGp1EWqfzfGru7P5HJ0XCSggNNNfREFm5M8U=)
                          2: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: lOQzdylRVJqU9vsBEticN1Q8P4VrsRQKHpy1nxy6stk=)
                          3: qhfBVHE8JoqSxpjE-nnbM-CBMaU.roa (hash: 2Csm7aiBglLVKACf6H7N/Wd799PiNtu7lEasbieKTVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:b0:a6:dc:3a:c3:53:33:7b:e8:a6:25:a8:6d:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Dec 18 09:00:41 2025 GMT
            Not After : Dec 19 09:00:41 2025 GMT
        Subject: CN=143e2d2188ef2d4442460b9e0004eb6d114e2ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:fc:9d:82:d8:68:3a:27:b4:d1:64:2a:95:
                    4f:fb:8c:10:82:d2:72:84:73:68:38:4b:84:e9:ce:
                    9d:90:2b:8b:72:bb:72:d9:3d:1e:56:b7:32:09:ed:
                    62:9f:ae:65:15:da:21:1e:b7:65:91:dd:ac:f1:68:
                    d6:da:0a:57:3f:47:4e:ce:86:bc:b2:0e:6c:cc:a8:
                    bf:c0:8e:43:1a:41:40:d6:c2:d7:d7:66:e7:c3:4c:
                    8b:7d:b9:39:67:1d:19:f5:39:4c:65:a3:63:8a:f7:
                    a6:60:ab:a7:5b:9c:45:4e:88:db:fe:cd:f5:f1:d1:
                    2b:06:ad:a7:3f:2b:b1:42:97:e9:35:b1:27:1e:b9:
                    c5:da:5d:cc:22:2a:c2:83:9f:f3:30:81:18:9e:8c:
                    58:84:a8:9a:0a:e2:3e:4e:63:9a:62:5e:20:f1:6f:
                    8e:5f:c7:d0:f7:9e:aa:b4:17:0e:af:ec:65:a2:2f:
                    40:56:08:16:a3:e4:ab:09:48:9c:fd:89:2f:3b:bd:
                    c2:4f:bc:98:07:25:b3:6f:a5:a7:93:65:28:eb:7d:
                    b9:84:a4:ea:f6:87:80:61:e9:5b:02:53:e2:b8:97:
                    84:60:36:b1:75:b0:2e:56:67:22:5b:4e:26:8a:94:
                    ae:72:a3:82:1c:b7:80:88:4d:a6:ca:2d:f7:e6:0b:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:2D:21:88:EF:2D:44:42:46:0B:9E:00:04:EB:6D:11:4E:2E:C9
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:60:32:92:74:2f:a5:76:48:c5:47:e6:a1:d5:27:f0:84:e7:
         8d:a3:e8:d5:e1:54:00:91:b7:27:a7:ee:fd:9f:15:f0:0c:71:
         7d:3a:30:fe:03:ab:8e:ee:d9:54:d6:af:3e:4a:c6:7b:87:bf:
         81:2a:a1:d5:1e:2c:c4:5f:3f:b2:7b:37:c9:53:38:3e:ad:c2:
         57:22:c8:3a:e8:1c:97:3a:e9:a7:cd:a3:01:b9:28:d6:fc:bd:
         68:99:fb:f3:fb:d8:df:5b:6c:34:cd:b9:97:2d:8b:38:d5:49:
         a9:56:c1:8e:04:b7:f7:7a:e6:f7:45:d1:e2:5d:62:3b:be:3d:
         54:56:28:83:66:ff:a3:a4:c1:fa:a1:a5:ba:6f:99:22:d6:15:
         27:cf:25:f3:e1:ae:2d:4b:99:8b:aa:70:44:e4:3d:62:76:0c:
         2d:58:41:3f:69:49:05:6b:fe:42:c9:59:d0:87:b1:21:36:9e:
         6b:23:55:61:18:1d:28:1c:a5:e8:83:76:f4:5b:65:c6:29:6a:
         63:cb:11:ac:70:40:62:7e:37:15:f8:28:ab:71:bf:9e:89:3b:
         a4:92:ec:77:d9:d9:20:2f:64:f8:f9:06:0c:11:b0:ab:2e:7c:
         73:5b:49:79:64:f0:d4:e5:a0:c6:e4:27:12:9b:78:24:d0:69:
         b8:fc:79:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZswsKbcOsNTM3vopiWobeRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx
YzQ4NDcwHhcNMjUxMjE4MDkwMDQxWhcNMjUxMjE5MDkwMDQxWjAzMTEwLwYDVQQD
EygxNDNlMmQyMTg4ZWYyZDQ0NDI0NjBiOWUwMDA0ZWI2ZDExNGUyZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUr8nYLYaDontNFkKpVP+4wQgtJy
hHNoOEuE6c6dkCuLcrty2T0eVrcyCe1in65lFdohHrdlkd2s8WjW2gpXP0dOzoa8
sg5szKi/wI5DGkFA1sLX12bnw0yLfbk5Zx0Z9TlMZaNjivemYKunW5xFTojb/s31
8dErBq2nPyuxQpfpNbEnHrnF2l3MIirCg5/zMIEYnoxYhKiaCuI+TmOaYl4g8W+O
X8fQ956qtBcOr+xloi9AVggWo+SrCUic/YkvO73CT7yYByWzb6Wnk2Uo6325hKTq
9oeAYelbAlPiuJeEYDaxdbAuVmciW04mipSucqOCHLeAiE2myi335gs09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ+LSGI7y1EQkYLngAE620RTi7JMB8GA1UdIwQY
MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt
MjJjMDhkY2JmNTcyLzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy
LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGAyknQv
pXZIxUfmodUn8ITnjaPo1eFUAJG3J6fu/Z8V8AxxfTow/gOrju7ZVNavPkrGe4e/
gSqh1R4sxF8/sns3yVM4Pq3CVyLIOugclzrpp82jAbko1vy9aJn78/vY31tsNM25
ly2LONVJqVbBjgS393rm90XR4l1iO749VFYog2b/o6TB+qGlum+ZItYVJ88l8+Gu
LUuZi6pwROQ9YnYMLVhBP2lJBWv+QslZ0IexITaeayNVYRgdKByl6IN29Ftlxilq
Y8sRrHBAYn43Ffgoq3G/nok7pJLsd9nZIC9k+PkGDBGwqy58c1tJeWTw1OWgxuQn
Ept4JNBpuPx5CQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 17:38:24 2025 by rpki-client