This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File:                     1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier:          eBr7+3lVWk5zrcmKpCR0Dk5TqOIYc0FGiNKdxErzfyY=
Subject key identifier:   F0:B1:0D:1E:B7:91:64:13:22:F4:DF:B2:55:F8:9A:81:8D:6E:75:D3
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer:       /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial:       019B439309D48B0EF4C2E464D1C625BFA2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number:          06CB
Signing time:             Mon 22 Dec 2025 01:01:08 +0000
Manifest this update:     Mon 22 Dec 2025 01:01:08 +0000
Manifest next update:     Tue 23 Dec 2025 01:01:08 +0000
Files and hashes:         1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
                          2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: Ko8SdsTqyMQ65IEgVfWijIhnV/MmKT60CYDY0/Y/W2o=)
                          3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:93:09:d4:8b:0e:f4:c2:e4:64:d1:c6:25:bf:a2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
        Validity
            Not Before: Dec 22 01:01:08 2025 GMT
            Not After : Dec 23 01:01:08 2025 GMT
        Subject: CN=f0b10d1eb791641322f4dfb255f89a818d6e75d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:68:aa:c9:c3:42:eb:d7:fd:07:14:d4:4f:
                    83:cc:f7:47:b7:5c:2b:86:80:93:c7:8f:d1:c7:e6:
                    71:84:a7:84:17:02:86:82:6a:76:f0:4f:1b:c1:c1:
                    4b:0c:28:0d:b2:a2:35:2a:78:0d:c6:67:18:97:70:
                    2e:f0:d5:8f:bd:c4:86:60:1c:1c:cf:f1:0f:af:92:
                    6e:75:0d:9c:e4:0b:ac:12:f1:ba:94:e4:46:90:66:
                    d3:d5:e0:04:c0:42:61:2b:4f:96:1c:d8:ed:73:05:
                    c4:a4:16:75:2c:0d:1f:63:2c:fa:c7:79:21:eb:9d:
                    ee:fe:10:d6:4b:fc:4f:5b:9c:8b:26:d3:df:d7:03:
                    48:38:c6:e9:b7:37:10:8e:1c:bd:45:ff:15:cd:52:
                    4f:4a:3a:16:9d:d4:97:a6:28:5d:6b:1d:30:dc:93:
                    c8:7e:a6:71:62:65:da:91:c8:ba:cf:5e:79:99:9d:
                    8a:48:15:95:58:79:bb:cc:26:22:71:80:14:9c:7e:
                    ce:4e:a4:a6:c6:36:b0:78:24:66:12:09:89:cc:b5:
                    f6:48:12:c3:d7:1d:35:b5:f3:5f:b1:9b:1b:dd:85:
                    4b:b1:cf:93:29:b0:c2:1d:92:7a:0d:dc:cc:b1:76:
                    25:c1:b4:dd:d8:bc:af:cc:d6:0a:f4:fe:04:14:a5:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:0D:1E:B7:91:64:13:22:F4:DF:B2:55:F8:9A:81:8D:6E:75:D3
            X509v3 Authority Key Identifier:
                keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:56:5a:1d:80:d1:f2:c6:0f:40:d7:6b:5f:45:d7:a0:59:
         c2:cd:1b:73:60:d8:2a:ed:2e:b5:41:60:08:b6:78:3d:35:e2:
         4d:6a:22:df:90:b0:8a:ff:33:72:e7:d2:f7:74:c5:34:27:ed:
         8a:ea:fd:69:8f:b4:82:af:d7:7d:44:5e:33:84:41:3e:ec:8a:
         a8:74:dc:0b:ba:8b:2a:c8:2c:da:cb:5d:59:38:ac:1c:68:94:
         25:64:2d:75:5c:35:45:ea:fe:cd:6c:51:f3:e3:b5:0d:37:f2:
         b1:ef:cf:df:04:2c:59:ab:d1:cb:64:dd:d5:c5:bc:92:a6:ba:
         30:4e:fd:1c:25:9b:da:f4:37:eb:29:d9:75:ce:a1:68:62:fd:
         3e:b5:48:5b:fa:bd:08:bc:ba:68:f5:49:53:31:f6:45:b0:08:
         d8:c2:67:e1:d9:97:0c:33:0f:9d:75:db:65:4b:d0:62:d9:89:
         ff:03:d1:1d:72:0b:46:15:10:3a:6a:7a:af:e0:8a:c7:66:9d:
         31:d5:b7:f5:e8:f1:96:17:a9:02:dc:d7:82:0b:48:88:a0:76:
         33:88:36:f4:54:3a:85:e2:62:2b:eb:29:5c:f1:54:47:0b:55:
         d5:80:b3:47:2f:f1:50:58:40:3a:10:cc:ca:90:9e:85:08:d9:
         10:d8:12:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDkwnUiw70wuRk0cYlv6LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjUxMjIyMDEwMTA4WhcNMjUxMjIzMDEwMTA4WjAzMTEwLwYDVQQD
EyhmMGIxMGQxZWI3OTE2NDEzMjJmNGRmYjI1NWY4OWE4MThkNmU3NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5oqsnDQuvX/QcU1E+DzPdHt1wr
hoCTx4/Rx+ZxhKeEFwKGgmp28E8bwcFLDCgNsqI1KngNxmcYl3Au8NWPvcSGYBwc
z/EPr5JudQ2c5AusEvG6lORGkGbT1eAEwEJhK0+WHNjtcwXEpBZ1LA0fYyz6x3kh
653u/hDWS/xPW5yLJtPf1wNIOMbptzcQjhy9Rf8VzVJPSjoWndSXpihdax0w3JPI
fqZxYmXakci6z155mZ2KSBWVWHm7zCYicYAUnH7OTqSmxjaweCRmEgmJzLX2SBLD
1x01tfNfsZsb3YVLsc+TKbDCHZJ6DdzMsXYlwbTd2LyvzNYK9P4EFKW1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCxDR63kWQTIvTfslX4moGNbnXTMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqtWWh2A
0fLGD0DXa19F16BZws0bc2DYKu0utUFgCLZ4PTXiTWoi35Cwiv8zcufS93TFNCft
iur9aY+0gq/XfUReM4RBPuyKqHTcC7qLKsgs2stdWTisHGiUJWQtdVw1Rer+zWxR
8+O1DTfyse/P3wQsWavRy2Td1cW8kqa6ME79HCWb2vQ36ynZdc6haGL9PrVIW/q9
CLy6aPVJUzH2RbAI2MJn4dmXDDMPnXXbZUvQYtmJ/wPRHXILRhUQOmp6r+CKx2ad
MdW39ejxlhepAtzXggtIiKB2M4g29FQ6heJiK+spXPFURwtV1YCzRy/xUFhAOhDM
ypCehQjZENgSEA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:48:43 2025 by rpki-client