This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          YnpvaDANzSgtC/gCFdDGnmvUGaOUi6P+34lUe3nvuJI=
Subject key identifier:   42:67:59:C8:CF:41:6D:6D:13:D9:9B:05:BE:BD:DB:CF:48:E2:9B:49
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019AEF3E84B88A7F93C4C66A6A0E873DACDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          17A4
Signing time:             Fri 05 Dec 2025 16:00:43 +0000
Manifest this update:     Fri 05 Dec 2025 16:00:43 +0000
Manifest next update:     Sat 06 Dec 2025 16:00:43 +0000
Files and hashes:         1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 7k1tM4KFnDCtxf9jP71uqnGIUav+8L1Q4OBedJfNE5U=)
                          6: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=)
                          7: ff_a8SBBXF3be68FdU0vfTPnh5s.roa (hash: bW2UtMneC9Mg6cMlRlCRXeNJHB26wQRTTLDsoAfILRU=)
                          8: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          9: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          10: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:3e:84:b8:8a:7f:93:c4:c6:6a:6a:0e:87:3d:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Dec  5 16:00:43 2025 GMT
            Not After : Dec  6 16:00:43 2025 GMT
        Subject: CN=426759c8cf416d6d13d99b05bebddbcf48e29b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:9c:16:e6:85:3b:f9:ea:b3:7c:cc:f2:44:
                    3d:15:c3:90:81:28:26:8f:f1:11:b1:89:f9:99:88:
                    0a:3e:80:03:67:93:0d:be:84:30:b2:b7:0d:29:62:
                    c4:a4:56:6e:e3:1b:e6:36:f7:72:4d:83:00:ae:c7:
                    e4:9f:81:fe:5f:af:d6:d5:55:be:3e:86:de:a8:a8:
                    d4:87:c1:31:42:85:db:f2:29:e5:01:22:f9:cf:6c:
                    05:92:9c:ac:cb:b7:0c:3b:a6:2a:e4:1b:f5:15:28:
                    c7:a5:03:36:d8:78:38:85:5c:aa:61:21:72:0e:e9:
                    f8:94:5c:39:48:8b:ce:1a:ef:ba:9d:3a:58:3a:4b:
                    76:5b:5c:db:26:2c:78:79:27:ae:d7:08:ae:f2:9a:
                    fd:c1:cf:3b:30:d9:24:10:2f:ed:41:bd:2e:ad:78:
                    11:60:86:73:3a:c0:06:b0:54:93:cd:ed:ee:1e:cf:
                    24:5f:3e:0a:c3:9e:a3:c4:6c:61:9d:5a:66:43:fe:
                    1b:10:60:0f:bd:66:77:4d:a1:fb:d8:f7:19:76:19:
                    19:e2:e4:c9:5c:f1:47:5e:b9:4c:ef:07:af:e7:08:
                    ec:33:cc:0c:be:f7:55:ba:07:31:d1:e5:8e:aa:5d:
                    43:df:f6:7b:51:50:c6:2f:32:54:92:21:a1:1a:1a:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:59:C8:CF:41:6D:6D:13:D9:9B:05:BE:BD:DB:CF:48:E2:9B:49
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:5b:fb:0e:16:d6:a6:e9:75:b5:fe:6f:f4:d8:7a:e1:19:
         52:c2:91:73:38:e3:68:c8:6d:86:2b:20:88:78:c2:36:72:21:
         d8:79:51:f1:98:28:cf:c3:77:e6:88:26:02:4d:e5:d9:ee:c7:
         34:46:91:b7:78:bf:c2:e9:9c:32:3e:65:19:55:01:f2:26:1e:
         fd:3e:b2:f2:12:f6:4d:8a:a5:61:c8:8e:82:3b:21:0c:7a:27:
         73:f7:2c:e3:96:a4:36:15:2c:3a:03:f9:b2:8c:ef:fb:ae:b9:
         05:14:40:c3:17:66:b3:c9:e3:1d:98:1f:57:be:4a:6d:e1:4e:
         89:28:0a:42:aa:c8:c7:cd:5f:10:4a:10:94:1c:af:d4:99:39:
         18:83:23:64:82:1d:3b:01:97:6f:e9:53:42:98:cc:69:6b:17:
         e2:93:b8:31:9e:e2:70:3c:2c:1d:eb:8a:4e:23:56:16:7c:22:
         1d:fa:15:37:a9:bc:bb:4b:01:86:83:c8:72:74:14:85:fc:a3:
         11:05:ec:6d:70:69:a8:96:7c:b5:eb:22:6b:c7:59:e2:12:25:
         dc:d7:08:44:a9:65:bd:2f:30:94:26:8a:30:72:65:5f:33:8d:
         05:39:1b:94:f1:60:45:de:2f:f8:42:22:54:8a:6f:b0:52:8f:
         8b:03:22:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrvPoS4in+TxMZqag6HPazfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjUxMjA1MTYwMDQzWhcNMjUxMjA2MTYwMDQzWjAzMTEwLwYDVQQD
Eyg0MjY3NTljOGNmNDE2ZDZkMTNkOTliMDViZWJkZGJjZjQ4ZTI5YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqKcFuaFO/nqs3zM8kQ9FcOQgSgm
j/ERsYn5mYgKPoADZ5MNvoQwsrcNKWLEpFZu4xvmNvdyTYMArsfkn4H+X6/W1VW+
PobeqKjUh8ExQoXb8inlASL5z2wFkpysy7cMO6Yq5Bv1FSjHpQM22Hg4hVyqYSFy
Dun4lFw5SIvOGu+6nTpYOkt2W1zbJix4eSeu1wiu8pr9wc87MNkkEC/tQb0urXgR
YIZzOsAGsFSTze3uHs8kXz4Kw56jxGxhnVpmQ/4bEGAPvWZ3TaH72PcZdhkZ4uTJ
XPFHXrlM7wev5wjsM8wMvvdVugcx0eWOql1D3/Z7UVDGLzJUkiGhGhpVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJnWcjPQW1tE9mbBb69289I4ptJMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqZb+w4W
1qbpdbX+b/TYeuEZUsKRczjjaMhthisgiHjCNnIh2HlR8Zgoz8N35ogmAk3l2e7H
NEaRt3i/wumcMj5lGVUB8iYe/T6y8hL2TYqlYciOgjshDHonc/cs45akNhUsOgP5
sozv+665BRRAwxdms8njHZgfV75KbeFOiSgKQqrIx81fEEoQlByv1Jk5GIMjZIId
OwGXb+lTQpjMaWsX4pO4MZ7icDwsHeuKTiNWFnwiHfoVN6m8u0sBhoPIcnQUhfyj
EQXsbXBpqJZ8tesia8dZ4hIl3NcIRKllvS8wlCaKMHJlXzONBTkblPFgRd4v+EIi
VIpvsFKPiwMixg==
-----END CERTIFICATE-----
Generated at Fri Dec 5 19:52:52 2025 by rpki-client