This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File:                     BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier:          kIGt8RHr3S7gnIkumgYCacaVMwJU9KwSNj4ci/BbGWI=
Subject key identifier:   B3:B2:D1:1F:44:1C:98:C5:38:7A:15:4A:E9:B5:10:97:08:D6:2A:62
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer:       /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial:       019B50054C1FB2AF7A302EF09B4437672CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number:          1796
Signing time:             Wed 24 Dec 2025 11:01:22 +0000
Manifest this update:     Wed 24 Dec 2025 11:01:22 +0000
Manifest next update:     Thu 25 Dec 2025 11:01:22 +0000
Files and hashes:         1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: pIerMwdinMTKv3I83wov11yWdF69/WTVoB2gvE+SiAA=)
                          2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
                          3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:05:4c:1f:b2:af:7a:30:2e:f0:9b:44:37:67:2c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
        Validity
            Not Before: Dec 24 11:01:22 2025 GMT
            Not After : Dec 25 11:01:22 2025 GMT
        Subject: CN=b3b2d11f441c98c5387a154ae9b5109708d62a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:05:84:20:bc:4c:a7:12:f0:c4:94:5b:65:
                    70:9c:bb:e3:93:10:6a:73:ca:d6:d4:10:0c:f9:f3:
                    71:73:43:32:36:ac:a5:a8:34:20:e4:2b:9e:46:94:
                    d4:4e:4c:3b:24:8d:b6:fc:f9:0a:53:87:ac:83:d6:
                    75:4c:95:b6:09:c0:f2:40:8c:9b:9a:39:2b:79:2c:
                    15:ec:25:3d:73:72:f8:c4:0c:dc:42:bd:45:3c:fc:
                    2f:ca:60:35:b6:87:34:96:01:35:47:8d:5e:c8:1a:
                    cb:65:5d:78:21:16:ba:62:f1:b4:55:7c:2e:e2:77:
                    71:d4:76:a5:fb:50:3b:a8:6e:b8:0b:92:fb:6e:68:
                    54:86:d3:1e:62:28:37:0e:b4:22:b1:c0:cb:f3:45:
                    36:fa:af:f9:f3:a5:bc:27:38:93:dd:d8:f3:37:23:
                    c2:ad:db:53:fb:d8:53:7d:65:77:f1:25:ac:50:4f:
                    86:09:61:1f:b1:19:28:d7:b7:07:48:dd:45:54:8a:
                    8a:1f:0d:d5:22:00:90:f6:65:1b:9b:4a:32:5e:33:
                    28:df:bf:3f:a7:2f:6e:e1:3e:6f:aa:ff:44:25:8b:
                    32:33:3d:89:5f:0e:8a:29:e3:82:6c:fd:94:66:bd:
                    fc:33:d7:9f:1f:61:2e:75:05:71:72:4d:17:49:ce:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B2:D1:1F:44:1C:98:C5:38:7A:15:4A:E9:B5:10:97:08:D6:2A:62
            X509v3 Authority Key Identifier:
                keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:bc:9e:8c:c4:2f:6c:68:94:84:e8:3d:a0:fd:a8:78:f6:
         d3:86:2e:c4:78:d5:4d:d0:23:74:ad:15:c7:f1:02:d1:eb:e5:
         c8:e1:7c:94:6b:c1:03:c9:55:19:1c:b2:4f:e3:8e:05:b8:87:
         50:19:54:24:8d:64:5a:32:fe:ee:29:34:6d:05:a1:64:34:4f:
         40:aa:19:4f:84:9b:b1:7b:e4:a1:51:55:5a:45:e4:79:50:88:
         0f:82:21:41:e1:17:7a:dd:6d:ec:43:5b:6b:3c:2d:56:57:76:
         1f:ba:1a:f0:5a:36:b4:8e:8e:a5:97:42:03:3d:f0:76:20:bc:
         43:25:e7:a7:01:43:aa:08:52:f8:49:c7:5c:38:a3:f7:5a:6f:
         2b:fe:b0:74:32:6c:ae:f5:aa:3f:b1:68:d5:a5:e8:6b:46:68:
         9e:72:c3:6d:e0:86:71:74:5d:8c:dc:a9:ba:46:94:7a:23:ee:
         9d:91:ae:71:aa:e1:5b:33:77:c5:26:d3:bc:bc:9a:73:9b:55:
         02:de:0f:fc:9d:70:29:f5:e0:94:e4:c9:3d:d5:c2:26:89:5c:
         40:71:b4:b4:63:6d:48:76:b6:a1:6b:5f:9e:68:de:e5:e9:cb:
         98:7f:84:81:e4:c8:be:cd:dd:9d:0a:30:41:85:06:8a:4f:13:
         91:e8:a2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtQBUwfsq96MC7wm0Q3Zyz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1M2U5NDUwMWYwZmQyY2RlYTNjMmU3YjQ2MzE4ZTZlN2Y1
MTVmNzMwHhcNMjUxMjI0MTEwMTIyWhcNMjUxMjI1MTEwMTIyWjAzMTEwLwYDVQQD
EyhiM2IyZDExZjQ0MWM5OGM1Mzg3YTE1NGFlOWI1MTA5NzA4ZDYyYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn88FhCC8TKcS8MSUW2VwnLvjkxBq
c8rW1BAM+fNxc0MyNqylqDQg5CueRpTUTkw7JI22/PkKU4esg9Z1TJW2CcDyQIyb
mjkreSwV7CU9c3L4xAzcQr1FPPwvymA1toc0lgE1R41eyBrLZV14IRa6YvG0VXwu
4ndx1Hal+1A7qG64C5L7bmhUhtMeYig3DrQiscDL80U2+q/586W8JziT3djzNyPC
rdtT+9hTfWV38SWsUE+GCWEfsRko17cHSN1FVIqKHw3VIgCQ9mUbm0oyXjMo378/
py9u4T5vqv9EJYsyMz2JXw6KKeOCbP2UZr38M9efH2EudQVxck0XSc4EtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOy0R9EHJjFOHoVSum1EJcI1ipiMB8GA1UdIwQY
MBaAFAU+lFAfD9LN6jwue0Yxjm5/UV9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTIt
NjFiNTI2Mzc5MjFiLzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81NjQ1MmItNGI5My00MWU1LWE4YTItNjFiNTI2Mzc5MjFi
LzEvQlQ2VVVCOFAwczNxUEM1N1JqR09ibjlSWDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKae8nozE
L2xolIToPaD9qHj204YuxHjVTdAjdK0Vx/EC0evlyOF8lGvBA8lVGRyyT+OOBbiH
UBlUJI1kWjL+7ik0bQWhZDRPQKoZT4SbsXvkoVFVWkXkeVCID4IhQeEXet1t7ENb
azwtVld2H7oa8Fo2tI6OpZdCAz3wdiC8QyXnpwFDqghS+EnHXDij91pvK/6wdDJs
rvWqP7Fo1aXoa0ZonnLDbeCGcXRdjNypukaUeiPunZGucarhWzN3xSbTvLyac5tV
At4P/J1wKfXglOTJPdXCJolcQHG0tGNtSHa2oWtfnmje5enLmH+EgeTIvs3dnQow
QYUGik8TkeiibA==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:15:24 2025 by rpki-client