This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          w1GhXI0OOROoc1CbxShraZrM+TNP9if1g9B1C1fs/Y8=
Subject key identifier:   16:09:11:E2:A9:B0:7F:C3:DD:5F:82:D3:2E:00:40:EB:D6:A0:5D:5B
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       019B360E310D534FF4B49987A2AA76B9436D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          1246
Signing time:             Fri 19 Dec 2025 10:00:58 +0000
Manifest this update:     Fri 19 Dec 2025 10:00:58 +0000
Manifest next update:     Sat 20 Dec 2025 10:00:58 +0000
Files and hashes:         1: B4orFeIWC5coFv0DXPFWV6bX2TA.roa (hash: QvvdOu/flX7Du+SLiSNrRfEvw1jIp3bm67X+T+zP1MI=)
                          2: OjOSiVLO01NbQEy7fCWWb1dleI0.roa (hash: 1R3ScnGJJHnWlOylikh2Ppg5Q/7g7edL0CQoeTE72rs=)
                          3: TqGaZ21iO7PpNxKcdbTDvHNWI5w.roa (hash: TA9bnT0BdnbGAPvTvVqQo9iBMjThLUbF7MsSEuMnyLI=)
                          4: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: Z3TtQyWt+cYr7UCFe3FCNq3ZmYFIbo7Q+d7TB/glXws=)
                          5: tNVymaqEMA53YlfZDB8JJ8aafJI.roa (hash: dVF8IWQWb1ioPcMe+UkAzFVliOSu7mCkktpnx4UARn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:0e:31:0d:53:4f:f4:b4:99:87:a2:aa:76:b9:43:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: Dec 19 10:00:58 2025 GMT
            Not After : Dec 20 10:00:58 2025 GMT
        Subject: CN=160911e2a9b07fc3dd5f82d32e0040ebd6a05d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:89:ae:97:32:5b:48:c2:5f:71:98:15:c7:
                    80:37:5d:38:0d:36:bc:75:58:61:bf:c0:64:86:5a:
                    fd:89:f0:28:9d:1d:2a:69:1a:5f:5b:86:a4:40:bf:
                    d9:12:44:c8:61:36:09:86:65:bd:1d:c4:e8:08:31:
                    f3:1e:9a:9c:4f:be:58:5a:e9:ee:cc:72:83:03:fa:
                    0c:ac:f1:b2:d2:f1:b4:5e:03:57:cf:03:cf:80:c5:
                    00:ff:fd:15:ec:5e:1f:ed:88:27:02:de:4a:5d:ca:
                    96:64:22:26:c2:8d:2e:52:6c:e3:bc:15:b1:c0:4a:
                    46:8a:78:2e:cd:85:4e:ed:95:7b:12:8b:9e:d4:51:
                    0e:0b:f9:21:ed:24:81:f8:af:3f:35:53:9e:62:84:
                    4d:ad:44:43:7d:4f:34:50:ab:0c:85:24:80:43:28:
                    02:65:e8:2a:43:ac:5b:10:dc:52:06:86:0d:67:fb:
                    26:67:3d:5a:fe:4e:8c:a4:f1:f9:3f:48:0e:65:ba:
                    a3:da:da:3b:78:b3:60:fe:f9:9d:73:57:e3:53:21:
                    e1:55:22:f7:33:df:55:82:1c:29:bf:24:94:ea:5c:
                    b5:18:81:dc:6a:9e:b6:f5:7a:d8:66:c0:da:0c:9a:
                    b6:62:62:1f:99:8b:76:ea:04:60:55:c5:2a:e0:5d:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:11:E2:A9:B0:7F:C3:DD:5F:82:D3:2E:00:40:EB:D6:A0:5D:5B
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:07:4b:a3:61:be:ff:96:6e:b0:e8:7b:26:5d:67:aa:c6:25:
         1a:f1:73:23:e3:c7:1b:ca:df:04:3c:c9:4c:69:c7:72:15:95:
         44:e4:5d:e4:30:6b:0f:c2:93:4a:f9:d7:b1:62:7e:48:b5:a2:
         05:7a:e7:c9:9a:f0:c1:a1:76:4c:b5:c6:98:66:61:5f:90:4b:
         76:25:e3:63:b9:5a:e1:54:f5:01:cb:83:92:b7:21:96:2f:38:
         38:08:43:f5:1b:06:ff:db:9a:6d:02:d2:3c:8c:43:80:62:9f:
         3a:c8:67:5e:35:94:73:60:03:ba:7d:7e:e0:54:6a:07:89:dc:
         d6:2e:73:2d:b9:a5:85:94:d8:c7:71:81:ad:af:d4:33:ac:b1:
         49:01:30:74:e8:db:31:13:bd:bf:39:14:36:ed:d2:22:91:42:
         b0:00:f7:36:50:46:e6:a2:16:52:45:d6:42:99:2d:63:4c:19:
         21:39:94:9f:ba:5f:46:0d:49:bb:16:fd:37:74:f8:af:d1:46:
         2e:4a:74:09:41:a7:5b:ae:b7:07:64:9b:f7:be:4d:5d:13:c7:
         b2:86:9d:61:91:93:92:b1:e3:7b:d4:34:44:d8:06:f8:b1:8d:
         12:c9:45:cc:a7:2c:4b:89:45:5e:5a:48:88:70:ae:b1:86:2b:
         40:7d:1f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2DjENU0/0tJmHoqp2uUNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNDg5NDViOWQ3MTZjZDQ3ZmJkZTI4NjBkODEwMGZjZGE5
ODc0OTYwHhcNMjUxMjE5MTAwMDU4WhcNMjUxMjIwMTAwMDU4WjAzMTEwLwYDVQQD
EygxNjA5MTFlMmE5YjA3ZmMzZGQ1ZjgyZDMyZTAwNDBlYmQ2YTA1ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqJrpcyW0jCX3GYFceAN104DTa8
dVhhv8Bkhlr9ifAonR0qaRpfW4akQL/ZEkTIYTYJhmW9HcToCDHzHpqcT75YWunu
zHKDA/oMrPGy0vG0XgNXzwPPgMUA//0V7F4f7YgnAt5KXcqWZCImwo0uUmzjvBWx
wEpGinguzYVO7ZV7Eoue1FEOC/kh7SSB+K8/NVOeYoRNrURDfU80UKsMhSSAQygC
ZegqQ6xbENxSBoYNZ/smZz1a/k6MpPH5P0gOZbqj2to7eLNg/vmdc1fjUyHhVSL3
M99VghwpvySU6ly1GIHcap629XrYZsDaDJq2YmIfmYt26gRgVcUq4F2RkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYJEeKpsH/D3V+C0y4AQOvWoF1bMB8GA1UdIwQY
MBaAFHtIlFudcWzUf73ihg2BAPzamHSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2Mt
NGU4NTg5N2YzMDljLzEvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2MtNGU4NTg5N2YzMDlj
LzEvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwdLo2G+
/5ZusOh7Jl1nqsYlGvFzI+PHG8rfBDzJTGnHchWVRORd5DBrD8KTSvnXsWJ+SLWi
BXrnyZrwwaF2TLXGmGZhX5BLdiXjY7la4VT1AcuDkrchli84OAhD9RsG/9uabQLS
PIxDgGKfOshnXjWUc2ADun1+4FRqB4nc1i5zLbmlhZTYx3GBra/UM6yxSQEwdOjb
MRO9vzkUNu3SIpFCsAD3NlBG5qIWUkXWQpktY0wZITmUn7pfRg1Juxb9N3T4r9FG
Lkp0CUGnW663B2Sb975NXRPHsoadYZGTkrHje9Q0RNgG+LGNEslFzKcsS4lFXlpI
iHCusYYrQH0fJA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:20:41 2025 by rpki-client