This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File:                     9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier:          0dfT77pypk7OAMoj7tHSYfw5EISYZM8ke09NncU8pEk=
Subject key identifier:   DF:13:93:EB:A5:98:CE:39:5F:C4:14:25:A7:36:85:2F:1D:B4:B2:D6
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer:       /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial:       019B5A8888DC216BDDD5BF0D1288DFB9742A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number:          0731
Signing time:             Fri 26 Dec 2025 12:00:55 +0000
Manifest this update:     Fri 26 Dec 2025 12:00:55 +0000
Manifest next update:     Sat 27 Dec 2025 12:00:55 +0000
Files and hashes:         1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: JvSjvjWTtPqkORg765v/usCosI68GLJOfnqRjf6vnSM=)
                          2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
                          3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:88:88:dc:21:6b:dd:d5:bf:0d:12:88:df:b9:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f566016d878230128b58e279d661c195e6399588
        Validity
            Not Before: Dec 26 12:00:55 2025 GMT
            Not After : Dec 27 12:00:55 2025 GMT
        Subject: CN=df1393eba598ce395fc41425a736852f1db4b2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:11:fa:73:50:3c:b7:cf:18:e5:82:e0:10:
                    55:0a:51:0e:a3:d4:a9:28:e7:fd:a6:e1:23:8f:6a:
                    c9:63:64:28:3e:2e:27:76:27:34:6b:93:a8:82:77:
                    11:0c:9d:af:49:d5:07:a3:26:14:47:0b:33:e4:90:
                    0e:47:92:e7:1b:53:7f:28:08:9b:80:c7:4d:62:c3:
                    15:3b:c6:2f:c6:d0:49:a0:24:c5:d3:f3:88:1e:99:
                    26:b5:88:c5:53:aa:5b:52:2b:18:b6:74:9c:b8:0b:
                    b3:43:39:70:35:38:b2:f9:35:99:9e:bd:e7:7a:ed:
                    3f:69:01:c2:f1:51:fb:02:53:7b:2d:c2:ab:62:89:
                    af:02:bc:1e:38:e4:16:cb:2a:5a:8d:06:81:93:96:
                    30:5e:46:45:79:d0:eb:13:bd:fa:85:57:aa:d7:50:
                    fd:d3:bb:d7:19:44:54:94:61:9f:f2:ff:72:ee:0e:
                    30:69:15:f0:4b:5c:4f:af:84:b9:10:5b:a1:cd:5c:
                    ec:94:b5:15:cd:e1:01:db:0c:89:8c:84:4f:58:53:
                    3c:4c:85:98:19:3e:52:9e:80:a0:3f:7b:d6:7f:4f:
                    0a:bf:38:f8:77:01:43:09:e0:60:b3:60:f3:77:4b:
                    85:40:ee:6b:f8:00:16:a2:7c:80:da:62:2f:29:6f:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:93:EB:A5:98:CE:39:5F:C4:14:25:A7:36:85:2F:1D:B4:B2:D6
            X509v3 Authority Key Identifier:
                keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:67:d4:a0:bf:1e:6e:5f:f6:8e:fb:52:4a:0a:b4:ad:af:68:
         5e:f0:9e:2f:e2:2a:67:2c:b9:ec:62:45:f1:0c:de:11:79:f6:
         c1:07:d2:6e:87:62:95:e5:41:a0:5d:ad:de:64:44:ae:cc:51:
         7f:b8:66:36:4e:ce:5f:10:0c:d6:bb:ff:29:f3:16:16:45:a3:
         4a:c5:a6:e6:d2:d4:42:24:bf:bb:71:26:76:c9:c5:bb:66:8a:
         0c:48:69:ab:1e:3d:e0:61:73:0b:54:e1:e0:ff:d1:5b:30:81:
         f5:44:d1:a9:61:24:e4:f8:06:30:f7:34:c2:3a:13:e3:67:79:
         ab:e9:14:1c:86:3e:e3:3b:2a:db:00:d0:12:67:fe:42:d5:82:
         aa:b9:c0:05:ea:6e:88:0d:d9:ce:ad:ca:e0:8b:16:2d:ec:f5:
         c4:4e:e6:4a:80:af:23:8f:e1:5d:26:98:5a:eb:b6:bf:ea:52:
         7b:cd:fc:cb:a4:05:d3:7e:df:b5:01:7d:90:eb:84:81:ba:23:
         63:8a:90:b3:1f:13:76:64:a7:f7:26:33:72:0e:80:01:ed:0d:
         c4:71:6b:31:03:ab:d0:f8:d6:68:a2:cd:8d:82:b5:9f:54:ee:
         ef:2f:f3:14:74:8b:f9:74:7a:e9:52:69:78:16:25:c8:4e:4c:
         02:fa:c4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtaiIjcIWvd1b8NEojfuXQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjYwMTZkODc4MjMwMTI4YjU4ZTI3OWQ2NjFjMTk1ZTYz
OTk1ODgwHhcNMjUxMjI2MTIwMDU1WhcNMjUxMjI3MTIwMDU1WjAzMTEwLwYDVQQD
EyhkZjEzOTNlYmE1OThjZTM5NWZjNDE0MjVhNzM2ODUyZjFkYjRiMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8oR+nNQPLfPGOWC4BBVClEOo9Sp
KOf9puEjj2rJY2QoPi4ndic0a5OogncRDJ2vSdUHoyYURwsz5JAOR5LnG1N/KAib
gMdNYsMVO8YvxtBJoCTF0/OIHpkmtYjFU6pbUisYtnScuAuzQzlwNTiy+TWZnr3n
eu0/aQHC8VH7AlN7LcKrYomvArweOOQWyypajQaBk5YwXkZFedDrE736hVeq11D9
07vXGURUlGGf8v9y7g4waRXwS1xPr4S5EFuhzVzslLUVzeEB2wyJjIRPWFM8TIWY
GT5SnoCgP3vWf08Kvzj4dwFDCeBgs2Dzd0uFQO5r+AAWonyA2mIvKW+LMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8Tk+ulmM45X8QUJac2hS8dtLLWMB8GA1UdIwQY
MBaAFPVmAW2HgjASi1jiedZhwZXmOZWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzIt
ZDE1YjA3OWMzNWZiLzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzItZDE1YjA3OWMzNWZi
LzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmfUoL8e
bl/2jvtSSgq0ra9oXvCeL+IqZyy57GJF8QzeEXn2wQfSbodileVBoF2t3mRErsxR
f7hmNk7OXxAM1rv/KfMWFkWjSsWm5tLUQiS/u3EmdsnFu2aKDEhpqx494GFzC1Th
4P/RWzCB9UTRqWEk5PgGMPc0wjoT42d5q+kUHIY+4zsq2wDQEmf+QtWCqrnABepu
iA3Zzq3K4IsWLez1xE7mSoCvI4/hXSaYWuu2v+pSe838y6QF037ftQF9kOuEgboj
Y4qQsx8TdmSn9yYzcg6AAe0NxHFrMQOr0PjWaKLNjYK1n1Tu7y/zFHSL+XR66VJp
eBYlyE5MAvrEOw==
-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:15 2025 by rpki-client