This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          HZtiVCVIz4O/fC5ZwuA2A4DiboU5ZVxnxLwVS0+N510=
Subject key identifier:   64:2F:88:94:FC:53:D5:46:13:DE:81:9B:BC:4C:0D:EE:75:8C:F8:E3
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019B2475FF73DC95218E09492F6C8DFB7082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0904
Signing time:             Tue 16 Dec 2025 00:01:11 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:11 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:11 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: CoCUL4Fgb1vfQF/bRakH6HRuU4Sue/xxdEQx9sOBFaU=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:75:ff:73:dc:95:21:8e:09:49:2f:6c:8d:fb:70:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Dec 16 00:01:11 2025 GMT
            Not After : Dec 17 00:01:11 2025 GMT
        Subject: CN=642f8894fc53d54613de819bbc4c0dee758cf8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:af:1f:5e:1a:1f:de:f7:95:8d:99:b1:4b:
                    c6:25:54:d7:21:32:62:e5:35:c9:a2:e2:11:d6:0b:
                    6b:83:a3:f3:0a:23:3f:24:4e:b8:cf:7d:eb:d8:fe:
                    ec:e3:c6:a5:12:fe:d6:4a:a1:3f:f0:24:63:59:b1:
                    5b:09:ad:91:6c:9b:06:74:99:61:84:2b:4d:76:ff:
                    f4:15:55:e1:96:5b:ef:2a:b7:b0:f2:3e:f3:70:f1:
                    65:a3:5e:52:18:2d:2a:e2:75:a5:2c:b8:07:a9:db:
                    24:f4:cd:6f:63:77:d0:d3:d5:bd:77:28:a4:58:f9:
                    8b:f0:a2:e7:5c:39:32:0d:3e:1b:bf:c5:51:c7:d7:
                    bc:b9:d5:a7:7f:64:49:cc:4e:a8:08:1e:da:41:12:
                    c2:6e:a7:b5:6d:d7:ca:6f:b1:0b:2e:ce:3b:2a:de:
                    45:84:93:28:4d:d1:9b:20:aa:53:25:6a:ac:eb:e1:
                    5d:f1:0a:27:38:0a:14:78:9c:08:67:26:fc:df:8d:
                    f6:94:a3:02:e8:13:70:a7:ed:eb:4e:ce:53:14:34:
                    5f:2a:05:ba:59:2b:fa:23:97:d1:3e:48:f6:a3:9f:
                    1b:94:4f:a6:35:1c:d1:76:4d:4e:d7:11:c6:d7:68:
                    1c:3a:6c:29:9e:a5:d0:58:42:74:af:74:9c:4a:fc:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:88:94:FC:53:D5:46:13:DE:81:9B:BC:4C:0D:EE:75:8C:F8:E3
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:64:32:6d:d7:60:7f:1b:8b:f7:25:8e:0f:ea:ca:75:33:35:
         d1:dd:d0:b8:29:91:c3:78:7e:1a:03:d5:4e:58:c2:52:f7:8a:
         97:6b:ca:2b:f1:75:36:97:9c:bd:51:da:d1:67:07:22:61:d1:
         b9:23:5c:13:3a:58:d1:ac:ed:4e:c7:d3:3e:14:e2:58:6c:28:
         51:2d:40:62:7b:7d:66:4e:59:61:ea:ca:f7:34:51:b6:bf:36:
         2f:bc:dc:4c:41:0d:9b:16:59:61:64:de:89:5e:c8:6e:a0:57:
         a6:f2:26:1e:ad:e0:a8:62:c9:73:9d:ce:80:79:72:5f:6c:37:
         22:f5:4b:5e:38:e5:05:23:b9:38:d3:a9:ac:7a:df:90:9c:ce:
         9c:6f:cc:e9:6c:0a:8f:fc:8f:e0:fd:22:a7:3b:3b:c6:46:85:
         de:32:b8:53:ba:9c:60:5b:c7:64:cd:91:2d:0b:62:82:d1:33:
         d5:18:94:0b:96:2e:ae:30:56:1a:bb:68:bf:13:40:2c:cf:98:
         dc:f1:33:d2:87:98:ed:a1:7a:d3:11:2c:c7:4e:bd:1f:0c:47:
         b7:dd:79:eb:72:85:34:81:27:33:fc:94:0f:a4:01:cc:46:c8:
         f4:0d:3f:8e:28:20:11:0a:02:4e:e6:57:a9:1b:76:d6:12:29:
         94:85:22:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskdf9z3JUhjglJL2yN+3CCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjUxMjE2MDAwMTExWhcNMjUxMjE3MDAwMTExWjAzMTEwLwYDVQQD
Eyg2NDJmODg5NGZjNTNkNTQ2MTNkZTgxOWJiYzRjMGRlZTc1OGNmOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugWvH14aH973lY2ZsUvGJVTXITJi
5TXJouIR1gtrg6PzCiM/JE64z33r2P7s48alEv7WSqE/8CRjWbFbCa2RbJsGdJlh
hCtNdv/0FVXhllvvKrew8j7zcPFlo15SGC0q4nWlLLgHqdsk9M1vY3fQ09W9dyik
WPmL8KLnXDkyDT4bv8VRx9e8udWnf2RJzE6oCB7aQRLCbqe1bdfKb7ELLs47Kt5F
hJMoTdGbIKpTJWqs6+Fd8QonOAoUeJwIZyb83432lKMC6BNwp+3rTs5TFDRfKgW6
WSv6I5fRPkj2o58blE+mNRzRdk1O1xHG12gcOmwpnqXQWEJ0r3ScSvwNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQviJT8U9VGE96Bm7xMDe51jPjjMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmQybddg
fxuL9yWOD+rKdTM10d3QuCmRw3h+GgPVTljCUveKl2vKK/F1NpecvVHa0WcHImHR
uSNcEzpY0aztTsfTPhTiWGwoUS1AYnt9Zk5ZYerK9zRRtr82L7zcTEENmxZZYWTe
iV7IbqBXpvImHq3gqGLJc53OgHlyX2w3IvVLXjjlBSO5ONOprHrfkJzOnG/M6WwK
j/yP4P0ipzs7xkaF3jK4U7qcYFvHZM2RLQtigtEz1RiUC5YurjBWGrtovxNALM+Y
3PEz0oeY7aF60xEsx069HwxHt91563KFNIEnM/yUD6QBzEbI9A0/jiggEQoCTuZX
qRt21hIplIUiXw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 06:22:05 2025 by rpki-client