This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          9D92kocG5hrnykjadjmUCPPQbZUiXS96Ezvph5oJ8OE=
Subject key identifier:   65:23:3D:82:98:17:7A:FA:D5:01:C0:F1:72:E8:E5:58:4B:5A:B0:31
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019B35694E200278DB0F881BBD3F3F02FBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1787
Signing time:             Fri 19 Dec 2025 07:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 07:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 07:00:52 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: uI84sTOnf4dPjo5ihNbinxWkKPhb98LyB3g5A5DFEJQ=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:69:4e:20:02:78:db:0f:88:1b:bd:3f:3f:02:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Dec 19 07:00:52 2025 GMT
            Not After : Dec 20 07:00:52 2025 GMT
        Subject: CN=65233d8298177afad501c0f172e8e5584b5ab031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:ef:12:68:99:80:c7:42:f4:2a:02:6b:31:
                    ad:24:f1:be:3d:61:7a:a0:c5:b0:03:39:e8:ea:3e:
                    b9:ec:f9:85:9c:37:2e:07:59:83:1f:e9:9b:90:f5:
                    b1:20:c5:b3:aa:c0:4d:c8:26:ed:e5:cb:ff:b2:99:
                    c3:26:ee:e5:3e:e9:4b:ba:57:15:4c:ae:3a:fd:3b:
                    ad:12:0c:ab:70:90:40:c4:68:a7:bb:39:88:84:84:
                    4d:9c:8d:b8:db:1b:5b:0b:e8:d8:6b:e7:36:9d:3a:
                    f5:f0:67:7c:f7:7d:fc:b3:c7:2a:a4:55:d2:8b:a4:
                    8c:71:f2:19:da:de:cb:73:a7:80:a5:db:ae:47:d2:
                    6d:7c:c4:94:d6:3b:36:1f:ac:3c:70:cd:f0:e2:87:
                    13:46:57:72:03:88:c0:d1:9f:ec:cc:22:bb:9a:93:
                    b6:39:9c:26:13:77:c8:af:8e:75:47:f2:58:63:42:
                    57:d0:14:91:7c:28:ce:b8:67:49:36:5b:9a:17:a7:
                    3a:f2:1f:57:6d:a3:6b:67:b1:41:82:fb:52:38:9f:
                    fd:f6:eb:4a:ce:b5:98:95:58:79:1a:92:e6:6a:0d:
                    e3:ea:0c:78:6b:7c:16:c1:bc:3e:bd:1a:3b:c2:7d:
                    22:7c:9c:c0:f4:a5:72:2e:72:2b:09:d8:42:82:64:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:3D:82:98:17:7A:FA:D5:01:C0:F1:72:E8:E5:58:4B:5A:B0:31
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:72:54:51:14:32:04:34:67:60:95:91:10:f9:f6:98:ed:ec:
         62:8a:8f:2f:ae:0b:9c:e2:01:70:9b:66:f8:55:6b:f3:48:ca:
         27:49:97:11:1f:6a:68:de:c3:30:25:8f:0e:a4:be:8c:1b:5f:
         7c:46:c3:9c:ab:62:04:64:32:3c:e6:f5:6c:06:55:38:49:1c:
         85:57:a0:7f:3a:0c:49:57:7c:58:05:7f:9e:35:f2:5b:69:a4:
         e8:16:ae:4c:0e:d8:e3:57:da:bc:f6:ac:47:72:21:f2:08:d5:
         d7:c9:ee:71:fa:b4:c2:e3:e2:53:99:31:a5:ca:5f:a8:82:ac:
         a9:33:c9:b9:1c:1b:b2:ad:ae:c4:2e:d4:aa:66:7c:b8:7e:df:
         5a:7f:f3:c8:97:f9:fc:4d:f8:1d:7f:2c:de:4c:d2:85:9d:83:
         45:95:c5:db:d5:19:74:f4:a5:1e:75:3f:d7:fa:f3:bc:f8:35:
         72:59:65:db:5c:e2:3e:be:39:9b:10:f7:dc:57:53:80:99:4b:
         ed:90:c6:ea:c9:b8:8f:94:cf:1e:d8:8a:2a:b8:aa:3c:63:09:
         98:56:3b:71:13:0a:20:d8:92:d5:8e:3a:78:9a:aa:1f:04:5a:
         95:e6:77:f5:f8:44:24:8f:ff:6c:5c:96:67:78:45:e8:4c:eb:
         ae:44:b5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs1aU4gAnjbD4gbvT8/AvvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YzMzcyZGY1N2M4MTRhYmE4YjUxYTkwNzg2MWQ5MmI5
ZTRmNTUwHhcNMjUxMjE5MDcwMDUyWhcNMjUxMjIwMDcwMDUyWjAzMTEwLwYDVQQD
Eyg2NTIzM2Q4Mjk4MTc3YWZhZDUwMWMwZjE3MmU4ZTU1ODRiNWFiMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOHvEmiZgMdC9CoCazGtJPG+PWF6
oMWwAzno6j657PmFnDcuB1mDH+mbkPWxIMWzqsBNyCbt5cv/spnDJu7lPulLulcV
TK46/TutEgyrcJBAxGinuzmIhIRNnI242xtbC+jYa+c2nTr18Gd89338s8cqpFXS
i6SMcfIZ2t7Lc6eApduuR9JtfMSU1js2H6w8cM3w4ocTRldyA4jA0Z/szCK7mpO2
OZwmE3fIr451R/JYY0JX0BSRfCjOuGdJNluaF6c68h9XbaNrZ7FBgvtSOJ/99utK
zrWYlVh5GpLmag3j6gx4a3wWwbw+vRo7wn0ifJzA9KVyLnIrCdhCgmS4iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUjPYKYF3r61QHA8XLo5VhLWrAxMB8GA1UdIwQY
MBaAFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMt
YTIyNGZlZmFjMjE4LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMtYTIyNGZlZmFjMjE4
LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3JUURQy
BDRnYJWREPn2mO3sYoqPL64LnOIBcJtm+FVr80jKJ0mXER9qaN7DMCWPDqS+jBtf
fEbDnKtiBGQyPOb1bAZVOEkchVegfzoMSVd8WAV/njXyW2mk6BauTA7Y41favPas
R3Ih8gjV18nucfq0wuPiU5kxpcpfqIKsqTPJuRwbsq2uxC7UqmZ8uH7fWn/zyJf5
/E34HX8s3kzShZ2DRZXF29UZdPSlHnU/1/rzvPg1clll21ziPr45mxD33FdTgJlL
7ZDG6sm4j5TPHtiKKriqPGMJmFY7cRMKINiS1Y46eJqqHwRaleZ39fhEJI//bFyW
Z3hF6EzrrkS1/A==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:08:56 2025 by rpki-client