This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          8GoVEibbqk4Fka9d7mMnJttK/yMwXOos0bpqrAK7/0k=
Subject key identifier:   1D:59:31:AD:74:41:6E:9A:58:DE:C6:DE:18:D6:D5:C2:45:87:7F:8C
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       019B37214FA2968A7A63A85838743572D65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          0848
Signing time:             Fri 19 Dec 2025 15:01:28 +0000
Manifest this update:     Fri 19 Dec 2025 15:01:28 +0000
Manifest next update:     Sat 20 Dec 2025 15:01:28 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: 92zSB0i16cKNZ0J90ZQSYrX+MReDWZ2R2E898OGgXc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 15:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:21:4f:a2:96:8a:7a:63:a8:58:38:74:35:72:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Dec 19 15:01:28 2025 GMT
            Not After : Dec 20 15:01:28 2025 GMT
        Subject: CN=1d5931ad74416e9a58dec6de18d6d5c245877f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:28:86:8a:70:12:74:58:ee:0a:88:18:ea:
                    7b:c5:f0:26:49:67:5e:b3:cd:d3:83:fd:79:57:17:
                    58:a9:23:b6:77:29:f6:55:01:53:9c:3c:57:aa:62:
                    2c:c1:80:5c:c0:ba:40:2f:f6:20:08:77:af:ab:fc:
                    7a:f5:9a:66:19:85:86:e6:9c:50:b2:84:75:79:eb:
                    fe:11:90:85:90:b8:0e:68:90:63:28:94:d0:e4:8c:
                    80:99:58:1b:6d:e9:59:ef:e4:cf:35:61:48:ff:15:
                    89:05:e4:0c:4c:8c:79:22:25:be:f9:25:e9:bf:db:
                    cd:e4:c2:e9:32:74:4b:c3:a6:d1:f6:d3:10:31:b4:
                    52:85:19:61:4b:1d:52:a6:e3:29:51:00:2d:5a:af:
                    62:77:ec:5e:07:24:a8:b4:f5:63:8c:2a:d1:3e:c2:
                    2f:40:cc:a5:15:24:92:90:7a:6b:1f:4e:71:e0:bf:
                    0e:08:74:1b:c9:d1:bf:cc:b5:57:52:92:1e:e6:84:
                    9c:7c:aa:97:e5:11:56:73:8a:f7:45:aa:c3:f8:2a:
                    d4:f5:93:cc:8e:29:29:3e:1e:04:cd:43:b2:8a:6a:
                    87:5b:7e:5e:ab:f6:d4:ec:f9:42:7b:da:db:39:dc:
                    ee:e0:0f:cc:d9:eb:51:ad:0d:7c:77:c9:be:e9:df:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:31:AD:74:41:6E:9A:58:DE:C6:DE:18:D6:D5:C2:45:87:7F:8C
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:c9:bd:07:bb:72:f7:c6:6c:70:c2:28:c0:d2:4a:d1:80:
         04:85:47:bc:5a:14:3f:79:b3:2c:48:21:5f:98:03:c7:b4:f7:
         e1:3b:96:4b:da:c6:17:be:9d:7d:fc:0d:69:e7:3e:4f:cc:6e:
         bb:1e:ac:76:68:ae:4f:38:c1:70:16:37:d2:85:ae:fa:8c:9b:
         34:ce:2d:5c:6f:64:c1:fc:94:aa:ef:0e:f2:89:ed:8b:c6:9d:
         c7:a9:b9:96:f2:58:2d:ea:9c:5d:57:2e:12:f4:ed:4d:c4:58:
         1e:a7:84:a8:96:ea:17:b5:e8:ad:e0:21:52:3c:bf:0d:09:b0:
         61:cb:2d:a6:1c:3f:ac:48:2b:5d:93:e1:50:15:c9:42:44:4b:
         b9:3e:f0:05:bb:0a:57:cf:90:b8:19:d2:22:f3:67:a4:df:49:
         b9:38:bf:37:58:c0:44:13:08:95:de:0e:e8:fe:72:48:a7:1c:
         d8:4a:6b:d5:15:0d:49:f9:12:f4:77:c4:e4:7e:be:ca:f0:45:
         d9:b5:c2:bd:1f:36:5a:48:54:4f:93:e1:dd:e7:48:0d:da:9c:
         17:4a:cd:9f:42:9a:cf:fc:9f:d7:cb:8d:28:90:76:8b:17:73:
         03:d9:45:45:09:b6:d5:1b:7a:55:5e:7c:3a:67:1e:46:e3:c9:
         1f:6c:71:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3IU+ilop6Y6hYOHQ1ctZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjUxMjE5MTUwMTI4WhcNMjUxMjIwMTUwMTI4WjAzMTEwLwYDVQQD
EygxZDU5MzFhZDc0NDE2ZTlhNThkZWM2ZGUxOGQ2ZDVjMjQ1ODc3ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TIohopwEnRY7gqIGOp7xfAmSWde
s83Tg/15VxdYqSO2dyn2VQFTnDxXqmIswYBcwLpAL/YgCHevq/x69ZpmGYWG5pxQ
soR1eev+EZCFkLgOaJBjKJTQ5IyAmVgbbelZ7+TPNWFI/xWJBeQMTIx5IiW++SXp
v9vN5MLpMnRLw6bR9tMQMbRShRlhSx1SpuMpUQAtWq9id+xeBySotPVjjCrRPsIv
QMylFSSSkHprH05x4L8OCHQbydG/zLVXUpIe5oScfKqX5RFWc4r3RarD+CrU9ZPM
jikpPh4EzUOyimqHW35eq/bU7PlCe9rbOdzu4A/M2etRrQ18d8m+6d8KFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1ZMa10QW6aWN7G3hjW1cJFh3+MMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaLJvQe7
cvfGbHDCKMDSStGABIVHvFoUP3mzLEghX5gDx7T34TuWS9rGF76dffwNaec+T8xu
ux6sdmiuTzjBcBY30oWu+oybNM4tXG9kwfyUqu8O8onti8adx6m5lvJYLeqcXVcu
EvTtTcRYHqeEqJbqF7XoreAhUjy/DQmwYcstphw/rEgrXZPhUBXJQkRLuT7wBbsK
V8+QuBnSIvNnpN9JuTi/N1jARBMIld4O6P5ySKcc2Epr1RUNSfkS9HfE5H6+yvBF
2bXCvR82WkhUT5Ph3edIDdqcF0rNn0Kaz/yf18uNKJB2ixdzA9lFRQm21Rt6VV58
OmceRuPJH2xxGA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:08 2025 by rpki-client