This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File:                     M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier:          FeAdRx3FqfJq2t+VkXR0u2VYy4QhrS8a2UTlH52EJdw=
Subject key identifier:   8D:F8:4F:8D:71:4A:1F:7D:93:CF:A0:BE:66:1F:4F:E7:34:90:00:DC
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer:       /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial:       019B10B8233687A0BD20E9F3C9D985B928C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number:          0798
Signing time:             Fri 12 Dec 2025 04:01:01 +0000
Manifest this update:     Fri 12 Dec 2025 04:01:01 +0000
Manifest next update:     Sat 13 Dec 2025 04:01:01 +0000
Files and hashes:         1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: t5sPLYWPCueRCckpNHAHJn/3iB/7/XDcuiEGglnwVSE=)
                          2: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (hash: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=)
                          3: pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa (hash: /iFO5Q2CWXoYbsdsqiARGyGI0bzDMxUuOB7fdJEKKMw=)
                          4: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (hash: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:b8:23:36:87:a0:bd:20:e9:f3:c9:d9:85:b9:28:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
        Validity
            Not Before: Dec 12 04:01:01 2025 GMT
            Not After : Dec 13 04:01:01 2025 GMT
        Subject: CN=8df84f8d714a1f7d93cfa0be661f4fe7349000dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:bc:01:df:20:0e:5a:01:cf:44:88:c4:51:
                    ca:c7:be:74:76:5f:78:81:37:66:b0:ef:75:b7:de:
                    99:ad:99:17:31:89:f5:85:d6:56:dc:12:d8:20:d8:
                    19:0b:14:ce:1f:ae:b5:65:ca:4d:a0:9b:1b:f1:f0:
                    7a:29:d0:30:17:ed:fe:75:10:02:d7:22:9b:1e:b1:
                    62:ec:bc:12:cc:c4:56:b0:e4:d6:cd:30:7c:da:51:
                    21:87:7e:f7:0a:06:da:a4:2c:fb:b1:fc:a9:6d:b8:
                    7c:8e:73:34:9c:7d:fa:4b:7d:c9:ee:36:b5:c6:92:
                    aa:2b:ce:81:a2:c1:bf:a8:f9:ca:dd:87:6a:78:6d:
                    35:85:94:11:8c:85:9e:11:8a:80:c9:96:27:3b:0f:
                    4d:d2:58:a3:f5:3d:aa:be:41:c2:18:c2:7b:23:83:
                    08:37:6a:32:6c:f5:c0:a9:d5:e6:39:cb:01:63:ad:
                    43:c6:bd:06:9d:11:7b:cb:75:79:04:de:82:cc:08:
                    8b:3e:34:41:8d:7f:93:e9:ca:b4:79:59:09:e6:af:
                    29:21:50:29:70:26:16:6b:8e:98:da:a2:95:d0:b7:
                    3a:b3:3e:d7:ec:10:ad:a0:64:2f:b2:51:bd:61:9d:
                    33:65:9d:20:70:b9:6a:ad:19:e9:f9:4d:79:8e:cc:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:4F:8D:71:4A:1F:7D:93:CF:A0:BE:66:1F:4F:E7:34:90:00:DC
            X509v3 Authority Key Identifier:
                keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:21:e8:3c:6e:cd:0a:0e:21:a4:10:6a:67:6a:86:cc:66:
         ba:94:0b:64:b0:b6:55:91:01:96:27:b9:b4:a3:4f:c4:e9:b9:
         47:bf:90:c4:2c:b1:c9:0a:ca:ad:27:31:5a:87:58:c7:90:c2:
         cf:5a:13:90:06:73:84:2a:a4:5b:e9:c9:9f:07:51:c5:f9:84:
         6d:18:f9:9d:44:2c:7f:56:c9:b5:31:36:d6:fc:0d:fb:68:fa:
         0a:45:7a:2c:f5:ab:91:05:60:74:e9:5d:ca:55:30:be:e4:6b:
         ac:d9:f3:df:84:8c:7c:7e:80:47:50:ab:60:ed:5a:05:ef:c9:
         26:a9:4e:33:56:07:55:e1:90:41:53:eb:85:cd:32:73:7c:eb:
         72:cd:dd:92:96:dd:23:ad:4a:ba:07:ae:59:34:de:fc:53:0f:
         41:f3:59:ac:07:58:23:f5:a2:52:08:06:3a:90:f0:57:66:1b:
         70:bd:94:bf:bc:a7:29:90:86:18:c5:04:25:12:d0:89:63:16:
         86:9a:8f:a4:db:b8:da:4c:eb:fd:0f:46:bd:f7:d2:89:c6:96:
         10:15:f5:e4:4f:be:38:1a:73:32:67:93:67:52:96:4f:da:b5:
         fd:73:23:71:cb:2e:2c:7c:f2:52:d6:40:d7:31:30:10:fe:0f:
         0f:be:bd:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQuCM2h6C9IOnzydmFuSjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2
MTBjODQwHhcNMjUxMjEyMDQwMTAxWhcNMjUxMjEzMDQwMTAxWjAzMTEwLwYDVQQD
Eyg4ZGY4NGY4ZDcxNGExZjdkOTNjZmEwYmU2NjFmNGZlNzM0OTAwMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVW8Ad8gDloBz0SIxFHKx750dl94
gTdmsO91t96ZrZkXMYn1hdZW3BLYINgZCxTOH661ZcpNoJsb8fB6KdAwF+3+dRAC
1yKbHrFi7LwSzMRWsOTWzTB82lEhh373CgbapCz7sfypbbh8jnM0nH36S33J7ja1
xpKqK86BosG/qPnK3YdqeG01hZQRjIWeEYqAyZYnOw9N0lij9T2qvkHCGMJ7I4MI
N2oybPXAqdXmOcsBY61Dxr0GnRF7y3V5BN6CzAiLPjRBjX+T6cq0eVkJ5q8pIVAp
cCYWa46Y2qKV0Lc6sz7X7BCtoGQvslG9YZ0zZZ0gcLlqrRnp+U15jszDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI34T41xSh99k8+gvmYfT+c0kADcMB8GA1UdIwQY
MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt
YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1
LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmUh6Dxu
zQoOIaQQamdqhsxmupQLZLC2VZEBlie5tKNPxOm5R7+QxCyxyQrKrScxWodYx5DC
z1oTkAZzhCqkW+nJnwdRxfmEbRj5nUQsf1bJtTE21vwN+2j6CkV6LPWrkQVgdOld
ylUwvuRrrNnz34SMfH6AR1CrYO1aBe/JJqlOM1YHVeGQQVPrhc0yc3zrcs3dkpbd
I61KugeuWTTe/FMPQfNZrAdYI/WiUggGOpDwV2YbcL2Uv7ynKZCGGMUEJRLQiWMW
hpqPpNu42kzr/Q9GvffSicaWEBX15E++OBpzMmeTZ1KWT9q1/XMjccsuLHzyUtZA
1zEwEP4PD769gA==
-----END CERTIFICATE-----
Generated at Fri Dec 12 06:31:20 2025 by rpki-client