This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File:                     1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier:          AV9irr/UBvNf8KW6TIBtbwy1I3MjGVAlgv0t0TlVfiI=
Subject key identifier:   FF:B9:05:69:C7:CB:F2:13:8F:2A:1F:70:F9:E0:84:F7:5D:8C:43:6C
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer:       /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial:       019B063415C7ADCB9C1C43F58EA8531056A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number:          1470
Signing time:             Wed 10 Dec 2025 03:00:35 +0000
Manifest this update:     Wed 10 Dec 2025 03:00:35 +0000
Manifest next update:     Thu 11 Dec 2025 03:00:35 +0000
Files and hashes:         1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: n4u+00BrU7FhfOWpO5nDdcPi009H0SebudSPmxTsE48=)
                          2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
                          3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:34:15:c7:ad:cb:9c:1c:43:f5:8e:a8:53:10:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
        Validity
            Not Before: Dec 10 03:00:35 2025 GMT
            Not After : Dec 11 03:00:35 2025 GMT
        Subject: CN=ffb90569c7cbf2138f2a1f70f9e084f75d8c436c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:fa:27:cb:fe:bb:bd:df:22:95:c4:12:60:
                    6b:09:15:f1:cb:c8:c5:ba:cc:63:c6:1c:4d:9e:21:
                    39:ec:1f:a7:c2:8a:e0:60:d7:f9:4d:5d:96:2e:90:
                    41:14:ed:d9:f9:9a:7f:67:42:f6:14:1f:83:8e:22:
                    81:ac:fe:d9:a5:c7:d4:d6:ce:00:76:0a:fa:0a:1f:
                    fe:d0:ed:9c:e4:cd:75:82:e2:05:fc:1b:e8:af:67:
                    82:d4:8e:6d:c0:92:95:8d:2e:9d:cb:16:6f:30:26:
                    bc:3a:b3:1d:f0:f7:d0:80:a2:ba:e2:f1:43:50:16:
                    58:22:de:75:b8:36:7c:ad:e0:8d:f4:4d:63:0b:47:
                    3e:67:cf:13:c6:66:ea:07:70:c5:fc:6f:ee:21:43:
                    08:b1:60:4e:7a:81:52:2f:9f:9e:9f:dc:ec:99:4b:
                    d8:0d:15:29:76:62:19:78:cb:fe:fa:87:07:79:a7:
                    86:c0:da:b9:6d:3b:b9:7e:21:a2:f5:ca:87:95:82:
                    eb:e2:59:5f:30:30:2e:69:56:e5:7c:04:67:b9:b9:
                    81:59:da:60:83:47:c7:8c:c9:5c:29:b6:b1:46:19:
                    eb:f2:eb:00:d4:84:d5:22:ae:92:87:cc:ac:b1:e1:
                    22:fe:e4:90:4f:c3:b0:70:f6:79:e1:8f:85:08:09:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:05:69:C7:CB:F2:13:8F:2A:1F:70:F9:E0:84:F7:5D:8C:43:6C
            X509v3 Authority Key Identifier:
                keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:45:35:a9:91:15:6a:4f:09:b7:6c:13:89:9c:62:0f:76:
         8a:59:6c:3d:bd:63:2b:01:36:ae:c7:72:a8:35:1d:1c:4d:c3:
         34:0b:0c:55:8e:87:2a:23:9e:0c:7d:a9:24:52:cc:e8:9f:b2:
         fe:d5:58:0c:ca:83:a6:60:b4:08:23:94:ee:fa:e5:b6:7a:fc:
         05:55:2f:b8:3f:11:71:be:50:6c:e6:d3:c2:02:43:06:ee:60:
         01:8e:b3:f0:f9:49:1a:16:93:7b:65:56:bd:74:6c:8b:a1:7b:
         3f:cd:a9:b9:06:51:ef:74:59:39:1e:d9:b7:5b:67:c7:86:61:
         b5:97:6a:f3:0f:61:fc:33:ea:86:0d:da:c4:c1:8e:b4:54:3e:
         df:2d:a3:a3:62:00:dd:21:c5:24:1e:a6:c0:bc:ba:a2:28:46:
         4a:9a:f0:a9:47:dc:dc:0a:fc:ea:bf:ba:fb:e5:f8:e5:e5:78:
         33:7f:e8:4b:d0:3b:54:97:f8:08:b8:dc:a3:e3:c9:6d:53:c6:
         31:c1:a5:8e:72:32:87:8b:9c:65:51:07:15:e9:d1:e7:80:cb:
         3b:d9:f4:cc:98:49:b4:79:21:5f:4e:46:5a:0b:ce:61:29:f1:
         22:03:0c:a3:6d:6c:01:dd:04:28:34:1a:9d:59:56:a2:51:ea:
         ee:94:b3:5a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZsGNBXHrcucHEP1jqhTEFaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjUxMjEwMDMwMDM1WhcNMjUxMjExMDMwMDM1WjAzMTEwLwYDVQQD
EyhmZmI5MDU2OWM3Y2JmMjEzOGYyYTFmNzBmOWUwODRmNzVkOGM0MzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FL6J8v+u73fIpXEEmBrCRXxy8jF
usxjxhxNniE57B+nworgYNf5TV2WLpBBFO3Z+Zp/Z0L2FB+DjiKBrP7ZpcfU1s4A
dgr6Ch/+0O2c5M11guIF/Bvor2eC1I5twJKVjS6dyxZvMCa8OrMd8PfQgKK64vFD
UBZYIt51uDZ8reCN9E1jC0c+Z88TxmbqB3DF/G/uIUMIsWBOeoFSL5+en9zsmUvY
DRUpdmIZeMv++ocHeaeGwNq5bTu5fiGi9cqHlYLr4llfMDAuaVblfARnubmBWdpg
g0fHjMlcKbaxRhnr8usA1ITVIq6Sh8ysseEi/uSQT8OwcPZ54Y+FCAljgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP+5BWnHy/ITjyofcPnghPddjENsMB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj
MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitJF
NamRFWpPCbdsE4mcYg92illsPb1jKwE2rsdyqDUdHE3DNAsMVY6HKiOeDH2pJFLM
6J+y/tVYDMqDpmC0CCOU7vrltnr8BVUvuD8Rcb5QbObTwgJDBu5gAY6z8PlJGhaT
e2VWvXRsi6F7P82puQZR73RZOR7Zt1tnx4ZhtZdq8w9h/DPqhg3axMGOtFQ+3y2j
o2IA3SHFJB6mwLy6oihGSprwqUfc3Ar86r+6++X45eV4M3/oS9A7VJf4CLjco+PJ
bVPGMcGljnIyh4ucZVEHFenR54DLO9n0zJhJtHkhX05GWgvOYSnxIgMMo21sAd0E
KDQanVlWolHq7pSzWg==
-----END CERTIFICATE-----
Generated at Wed Dec 10 12:55:03 2025 by rpki-client