This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          oaAm1imGty29L+VyGzL7DXqIbDTejPqvlAWiKsuKPf8=
Subject key identifier:   BD:35:49:CD:48:9D:74:A9:9A:7C:55:10:9F:3D:75:D0:F4:0F:DD:AF
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019B0E9340DC88CDF8C55A2818733313CDE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0E3B
Signing time:             Thu 11 Dec 2025 18:01:29 +0000
Manifest this update:     Thu 11 Dec 2025 18:01:29 +0000
Manifest next update:     Fri 12 Dec 2025 18:01:29 +0000
Files and hashes:         1: C7ULwDGGDLspopWJvL9iddJcsoA.roa (hash: eXiH2Que0/hsKh26rBrekQ8hlPTu7doazMNc5MCmB1Y=)
                          2: W6VeJiHlvuRMQjeGZHv3mokER-c.roa (hash: qcyR5RW8f0zdUSnAWl6lW42oNtIicHOzXOEszMGa+ME=)
                          3: sLlY1jyLux_8WlPpVquZS_tXAMM.roa (hash: Ac6aebIzojMJX90LbFh/1SpU6qfnR41Si25oQuBA8+c=)
                          4: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
                          5: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: T8FXBVaSPtbDbslkwPgomu3S89TLsAxWw4eEO0IYGNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:93:40:dc:88:cd:f8:c5:5a:28:18:73:33:13:cd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Dec 11 18:01:29 2025 GMT
            Not After : Dec 12 18:01:29 2025 GMT
        Subject: CN=bd3549cd489d74a99a7c55109f3d75d0f40fddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:51:2a:07:5d:66:44:f2:07:a5:b4:1b:55:
                    10:eb:f6:fc:63:b6:58:66:ad:ca:ad:69:eb:6a:9c:
                    e1:1a:5f:8a:c5:1f:74:10:d8:31:85:05:f8:66:28:
                    3e:bf:21:24:4c:6a:78:d4:e4:60:5b:33:2e:0f:4e:
                    eb:26:e3:7e:c8:e9:51:4b:1c:dd:c5:c8:3b:3e:87:
                    62:bb:38:81:4c:19:5e:2d:ed:26:e2:0a:bd:66:7a:
                    af:56:ef:00:0f:0a:db:a7:fb:02:b6:28:81:88:3d:
                    95:05:7a:34:1e:f6:2d:eb:13:e4:55:da:32:1e:fa:
                    60:29:c8:51:51:63:2e:ad:7c:ea:3a:22:5a:4e:ce:
                    47:86:7a:bb:60:75:c1:77:99:f1:6c:5f:1c:e4:5f:
                    fd:0b:1c:ef:c9:6d:c7:7c:39:af:87:ed:18:27:97:
                    30:26:64:f8:4f:4b:ef:db:e6:9c:13:e4:30:e8:07:
                    ad:bc:e7:fa:a2:1e:dc:69:72:89:38:98:37:89:d2:
                    63:eb:aa:84:f0:a2:f0:ec:11:c3:20:fd:6a:23:3e:
                    43:ff:a4:e5:e5:7e:48:11:a8:a7:e7:94:da:35:b8:
                    0a:e1:36:10:37:93:03:86:bf:32:bf:7f:f4:93:c0:
                    fe:03:72:f2:bc:41:c2:50:27:f7:73:fb:cc:72:49:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:35:49:CD:48:9D:74:A9:9A:7C:55:10:9F:3D:75:D0:F4:0F:DD:AF
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:3a:44:da:91:66:bb:9d:b8:25:4f:c4:44:a6:82:30:0b:
         df:12:22:ea:56:8b:a3:2e:71:df:d4:78:eb:82:03:0b:54:30:
         68:82:ef:58:87:47:d8:d2:4f:99:0b:c1:04:c6:98:2b:3a:70:
         d7:74:be:99:be:26:24:5a:70:fe:7e:fa:19:8e:37:94:87:c2:
         68:43:a3:e2:94:0b:70:67:1c:35:73:8a:9b:51:39:48:ce:f0:
         38:3c:9b:52:5d:fb:b3:0d:84:cf:8e:8e:c0:e6:5f:0b:91:8f:
         18:94:89:b9:af:a2:66:38:b1:52:a0:3b:65:ce:0c:a6:9c:5a:
         3c:c0:8a:61:ad:44:dd:e3:a6:33:d0:c8:2b:76:41:23:1a:5c:
         9d:29:48:b8:59:9e:0f:53:bd:89:ca:a8:8c:8c:57:13:1b:32:
         a0:41:a0:58:21:2d:a6:32:50:2e:41:50:53:76:cc:36:db:a9:
         7c:22:4d:65:fb:f0:d1:7f:69:c7:0f:9a:a0:59:53:aa:cb:cd:
         94:75:e0:70:6d:e6:9c:6c:18:13:6b:91:73:55:23:5f:26:9e:
         8f:5c:73:c0:df:e1:0b:f5:b5:4a:ab:16:6c:0e:65:5e:d7:ee:
         39:02:94:37:b0:41:9d:22:81:f9:7e:14:24:87:f7:b9:47:bb:
         fd:17:2a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOk0DciM34xVooGHMzE83oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj
M2Y5YWYwHhcNMjUxMjExMTgwMTI5WhcNMjUxMjEyMTgwMTI5WjAzMTEwLwYDVQQD
EyhiZDM1NDljZDQ4OWQ3NGE5OWE3YzU1MTA5ZjNkNzVkMGY0MGZkZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzFRKgddZkTyB6W0G1UQ6/b8Y7ZY
Zq3KrWnrapzhGl+KxR90ENgxhQX4Zig+vyEkTGp41ORgWzMuD07rJuN+yOlRSxzd
xcg7PodiuziBTBleLe0m4gq9ZnqvVu8ADwrbp/sCtiiBiD2VBXo0HvYt6xPkVdoy
HvpgKchRUWMurXzqOiJaTs5Hhnq7YHXBd5nxbF8c5F/9CxzvyW3HfDmvh+0YJ5cw
JmT4T0vv2+acE+Qw6AetvOf6oh7caXKJOJg3idJj66qE8KLw7BHDIP1qIz5D/6Tl
5X5IEain55TaNbgK4TYQN5MDhr8yv3/0k8D+A3LyvEHCUCf3c/vMckmBowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL01Sc1InXSpmnxVEJ89ddD0D92vMB8GA1UdIwQY
MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt
ZmE3MThhYzlkNzU4LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4
LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ06RNqR
ZruduCVPxESmgjAL3xIi6laLoy5x39R464IDC1QwaILvWIdH2NJPmQvBBMaYKzpw
13S+mb4mJFpw/n76GY43lIfCaEOj4pQLcGccNXOKm1E5SM7wODybUl37sw2Ez46O
wOZfC5GPGJSJua+iZjixUqA7Zc4MppxaPMCKYa1E3eOmM9DIK3ZBIxpcnSlIuFme
D1O9icqojIxXExsyoEGgWCEtpjJQLkFQU3bMNtupfCJNZfvw0X9pxw+aoFlTqsvN
lHXgcG3mnGwYE2uRc1UjXyaej1xzwN/hC/W1SqsWbA5lXtfuOQKUN7BBnSKB+X4U
JIf3uUe7/Rcqbw==
-----END CERTIFICATE-----
Generated at Fri Dec 12 02:23:15 2025 by rpki-client