This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File:                     LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier:          76nYfIatjpZM9cInRkpryGqOJJsUZo0FMRoDmSxu0sc=
Subject key identifier:   41:78:B5:AE:4E:7E:7C:63:D6:B8:19:C1:A4:B9:32:AA:3A:3E:B3:F6
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer:       /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial:       019B38336C4FFEDBD53DA85416336FA4AAA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number:          14D1
Signing time:             Fri 19 Dec 2025 20:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 20:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 20:00:52 +0000
Files and hashes:         1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: +8pcWJPkDtI2n7si/9ce2jxaWzfPPd4VEL7RybBO8Mc=)
                          2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
                          3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:33:6c:4f:fe:db:d5:3d:a8:54:16:33:6f:a4:aa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
        Validity
            Not Before: Dec 19 20:00:52 2025 GMT
            Not After : Dec 20 20:00:52 2025 GMT
        Subject: CN=4178b5ae4e7e7c63d6b819c1a4b932aa3a3eb3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:6d:05:ec:c3:90:a1:7d:b6:14:f8:bc:2e:
                    86:6c:d7:f1:1b:da:31:63:3b:87:29:c8:ad:a8:70:
                    06:8e:23:99:12:15:52:26:d2:69:78:99:fd:bf:da:
                    cf:33:fb:a2:9c:e2:62:19:a4:88:8f:19:e5:8f:da:
                    14:75:99:cc:53:c4:bb:36:a9:c4:f0:a6:8d:de:aa:
                    d1:41:ba:4e:50:5a:49:91:d8:0c:2e:c9:7e:41:01:
                    aa:e5:d6:67:d8:3a:c2:47:f0:51:27:14:d7:9a:cd:
                    4d:61:bf:5c:ae:1d:30:86:64:da:aa:39:3f:cf:0c:
                    5e:5d:6d:68:f5:e1:46:d1:93:7b:4f:e5:a2:8f:1f:
                    b8:51:a3:a4:c2:f4:9b:6b:69:2a:98:d4:19:6e:23:
                    a0:b6:f8:16:4d:91:bb:c7:ce:ca:c7:ed:d0:22:cd:
                    b1:4e:99:1c:ad:9a:f5:05:b0:61:a3:94:8e:36:b6:
                    15:3e:91:36:ba:a7:a3:cb:60:65:c2:75:b2:15:fb:
                    29:21:0f:9b:f9:d8:05:a9:77:ae:7a:c3:f1:6b:8b:
                    f5:28:fc:06:3a:f6:33:bc:fa:f3:f8:27:29:0f:0d:
                    5e:b5:d4:94:57:cb:1a:b5:fd:f7:c1:a4:9a:ad:08:
                    48:26:4e:8d:30:e6:f3:a3:ce:a2:bf:fe:56:26:5c:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:B5:AE:4E:7E:7C:63:D6:B8:19:C1:A4:B9:32:AA:3A:3E:B3:F6
            X509v3 Authority Key Identifier:
                keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:fe:b1:7f:a5:2c:59:d2:52:44:97:14:92:de:c8:f8:55:
         51:06:a7:a5:8a:6a:ae:f7:75:f2:fa:3a:75:a7:3b:71:04:5e:
         cc:97:92:f6:b9:04:e8:ca:f3:9a:a8:cc:31:19:f2:81:09:8f:
         5f:e4:ac:2c:77:81:62:26:c9:40:08:c7:32:ad:30:f6:1e:e3:
         22:2a:69:08:d7:52:fe:67:bb:97:9d:bf:ba:35:b2:f4:07:1a:
         2e:d7:f2:7f:41:65:68:30:1e:f6:58:82:1a:bb:6c:74:aa:69:
         ad:3d:aa:68:71:3c:dc:1f:69:6b:c4:f5:8c:ba:e3:85:c8:09:
         05:ed:1a:4f:95:85:b6:1f:01:f4:a1:98:db:1e:c1:15:8b:18:
         16:54:be:91:1a:c2:cf:39:67:5e:bc:8c:02:82:dd:dc:09:50:
         d3:f7:25:6e:43:be:39:95:da:b0:98:70:b0:ec:f1:a1:22:36:
         41:d6:6b:17:11:c3:fc:a5:ca:82:82:ec:71:2d:c7:40:3f:0a:
         51:5a:06:fe:f3:b1:20:65:3d:ae:0c:75:6b:da:0b:ee:ba:a3:
         9c:8c:3d:70:67:97:d0:98:2e:4b:44:2f:d2:ef:df:8d:3c:53:
         bf:96:50:eb:c9:b5:b9:aa:3c:52:08:a8:28:41:19:9d:9e:58:
         f0:b8:3a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4M2xP/tvVPahUFjNvpKqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2
OTQyNTAwHhcNMjUxMjE5MjAwMDUyWhcNMjUxMjIwMjAwMDUyWjAzMTEwLwYDVQQD
Eyg0MTc4YjVhZTRlN2U3YzYzZDZiODE5YzFhNGI5MzJhYTNhM2ViM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsxtBezDkKF9thT4vC6GbNfxG9ox
YzuHKcitqHAGjiOZEhVSJtJpeJn9v9rPM/uinOJiGaSIjxnlj9oUdZnMU8S7NqnE
8KaN3qrRQbpOUFpJkdgMLsl+QQGq5dZn2DrCR/BRJxTXms1NYb9crh0whmTaqjk/
zwxeXW1o9eFG0ZN7T+Wijx+4UaOkwvSba2kqmNQZbiOgtvgWTZG7x87Kx+3QIs2x
TpkcrZr1BbBho5SONrYVPpE2uqejy2BlwnWyFfspIQ+b+dgFqXeuesPxa4v1KPwG
OvYzvPrz+CcpDw1etdSUV8satf33waSarQhIJk6NMObzo86iv/5WJlxgpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF4ta5Ofnxj1rgZwaS5Mqo6PrP2MB8GA1UdIwQY
MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt
YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx
LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpD+sX+l
LFnSUkSXFJLeyPhVUQanpYpqrvd18vo6dac7cQRezJeS9rkE6MrzmqjMMRnygQmP
X+SsLHeBYibJQAjHMq0w9h7jIippCNdS/me7l52/ujWy9AcaLtfyf0FlaDAe9liC
GrtsdKpprT2qaHE83B9pa8T1jLrjhcgJBe0aT5WFth8B9KGY2x7BFYsYFlS+kRrC
zzlnXryMAoLd3AlQ0/clbkO+OZXasJhwsOzxoSI2QdZrFxHD/KXKgoLscS3HQD8K
UVoG/vOxIGU9rgx1a9oL7rqjnIw9cGeX0JguS0Qv0u/fjTxTv5ZQ68m1uao8Ugio
KEEZnZ5Y8Lg6/A==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:07:32 2025 by rpki-client