This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File:                     V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier:          HvdCJi9KAqmgFXQT2CBbuT8vZm05N2csFfsQlbpJiKo=
Subject key identifier:   22:A7:22:2B:0A:74:E1:5D:94:38:9D:81:5D:1B:3D:FD:CC:D9:B2:70
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer:       /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial:       019B0E931AC866C983EC959FBECCF97266A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number:          06B3
Signing time:             Thu 11 Dec 2025 18:01:20 +0000
Manifest this update:     Thu 11 Dec 2025 18:01:20 +0000
Manifest next update:     Fri 12 Dec 2025 18:01:20 +0000
Files and hashes:         1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: RrozKWhP3CnyVQXLt1VJ2gKPuMjHEZGH3W1SRJstX/s=)
                          2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
                          3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:93:1a:c8:66:c9:83:ec:95:9f:be:cc:f9:72:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
        Validity
            Not Before: Dec 11 18:01:20 2025 GMT
            Not After : Dec 12 18:01:20 2025 GMT
        Subject: CN=22a7222b0a74e15d94389d815d1b3dfdccd9b270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:85:96:5f:4b:c3:e5:e2:74:c4:ac:7f:9b:
                    bf:2d:10:21:42:ef:8d:5f:25:4d:94:71:40:77:07:
                    f9:59:03:9c:a4:fa:22:b9:76:2b:df:8f:5e:b1:26:
                    84:86:fc:f8:09:e1:62:51:30:dd:f1:a2:65:05:93:
                    84:7c:76:cb:b0:23:47:97:36:3e:8f:8c:7b:85:38:
                    25:78:a3:e7:c4:c5:12:79:2d:ed:6e:f2:7a:93:8b:
                    e4:f4:aa:6c:a9:a0:8c:fa:7a:b3:04:e7:45:21:82:
                    a0:c0:83:90:b3:e6:07:91:94:56:9d:c0:c7:a6:2f:
                    b1:2e:a3:d4:41:64:aa:41:ed:6e:f0:b7:7b:bb:ac:
                    c9:37:a0:ef:b9:8b:ed:75:a7:9f:20:28:48:7f:ae:
                    0a:88:0f:62:1e:17:33:f4:f8:35:65:2b:d4:a2:05:
                    f6:5f:07:3e:60:2a:16:01:03:e5:e8:98:3c:a0:f4:
                    09:49:64:85:99:cc:6e:fe:35:88:e2:49:d5:f9:a0:
                    f1:26:50:5d:d9:05:1c:42:39:19:cb:97:bd:6a:17:
                    cd:bd:30:da:41:15:ac:f6:06:f8:a0:b0:04:1e:73:
                    7e:71:0c:30:16:10:9a:33:e8:b0:ee:5b:65:f7:c7:
                    c3:e7:6a:d6:a8:cb:a5:cb:e6:b9:a3:03:04:b7:88:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A7:22:2B:0A:74:E1:5D:94:38:9D:81:5D:1B:3D:FD:CC:D9:B2:70
            X509v3 Authority Key Identifier:
                keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:03:07:4f:0b:21:bf:8a:5e:7a:6e:82:32:51:33:ef:b3:
         39:58:5f:8c:da:1e:5a:9e:f5:50:b1:14:8d:90:82:09:ed:96:
         5c:2f:f8:98:c7:cf:e7:1d:50:a5:01:24:cd:6a:23:5a:b7:a7:
         f1:ce:70:0c:ad:1f:2d:66:e7:f6:9e:25:7a:b9:a5:ea:20:33:
         ea:0a:7d:ac:12:1c:86:f8:70:79:5a:ac:99:12:1d:c8:d8:4d:
         e4:69:b9:fc:b0:3e:81:84:79:72:e9:af:55:a5:0c:65:a6:6e:
         0a:26:70:39:06:d1:e8:4b:3c:e1:e6:5d:b1:74:45:c0:f9:a7:
         e8:74:9f:e3:fd:7d:ba:cc:f8:b7:d5:50:62:56:1f:2c:21:7c:
         83:57:e9:5a:4f:98:5d:9d:b2:a9:dc:3e:8f:be:20:a6:a1:88:
         82:bc:7c:cb:06:5f:02:19:cd:e5:d6:68:4c:fa:ff:e1:15:86:
         6f:38:06:93:5b:9e:eb:9c:a8:0e:ce:e9:98:ba:78:2a:32:6a:
         1f:a0:fd:49:94:56:7a:f1:61:0c:0c:46:ca:34:b1:b0:8d:0e:
         8c:70:81:4d:9d:0c:23:c5:f2:9d:67:24:86:f8:cc:54:97:3b:
         c5:76:ad:d4:9a:f0:f8:2f:da:69:2f:3e:49:14:c7:6c:3f:4e:
         ae:2a:84:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOkxrIZsmD7JWfvsz5cmalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmIyMmYyNzkwNTk3NDg0YmY5NjkxNWE4MzU0M2MxOTRi
M2ZkMWUwHhcNMjUxMjExMTgwMTIwWhcNMjUxMjEyMTgwMTIwWjAzMTEwLwYDVQQD
EygyMmE3MjIyYjBhNzRlMTVkOTQzODlkODE1ZDFiM2RmZGNjZDliMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmyFll9Lw+XidMSsf5u/LRAhQu+N
XyVNlHFAdwf5WQOcpPoiuXYr349esSaEhvz4CeFiUTDd8aJlBZOEfHbLsCNHlzY+
j4x7hTgleKPnxMUSeS3tbvJ6k4vk9KpsqaCM+nqzBOdFIYKgwIOQs+YHkZRWncDH
pi+xLqPUQWSqQe1u8Ld7u6zJN6DvuYvtdaefIChIf64KiA9iHhcz9Pg1ZSvUogX2
Xwc+YCoWAQPl6Jg8oPQJSWSFmcxu/jWI4knV+aDxJlBd2QUcQjkZy5e9ahfNvTDa
QRWs9gb4oLAEHnN+cQwwFhCaM+iw7ltl98fD52rWqMuly+a5owMEt4i7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKnIisKdOFdlDidgV0bPf3M2bJwMB8GA1UdIwQY
MBaAFFdrIvJ5BZdIS/lpFag1Q8GUs/0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTct
YWVlNmViMjg1MTRkLzEvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82ZWZhYzQtZDc1YS00MjVkLTkxNTctYWVlNmViMjg1MTRk
LzEvVjJzaThua0ZsMGhMLVdrVnFEVkR3WlN6X1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3gDB08L
Ib+KXnpugjJRM++zOVhfjNoeWp71ULEUjZCCCe2WXC/4mMfP5x1QpQEkzWojWren
8c5wDK0fLWbn9p4lerml6iAz6gp9rBIchvhweVqsmRIdyNhN5Gm5/LA+gYR5cumv
VaUMZaZuCiZwOQbR6Es84eZdsXRFwPmn6HSf4/19usz4t9VQYlYfLCF8g1fpWk+Y
XZ2yqdw+j74gpqGIgrx8ywZfAhnN5dZoTPr/4RWGbzgGk1ue65yoDs7pmLp4KjJq
H6D9SZRWevFhDAxGyjSxsI0OjHCBTZ0MI8XynWckhvjMVJc7xXat1Jrw+C/aaS8+
SRTHbD9OriqEuQ==
-----END CERTIFICATE-----
Generated at Thu Dec 11 21:45:17 2025 by rpki-client