This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          paGLM+m/ffqR5Yhbh8eM7kNCCd1Hvcfrj73AAIsArxI=
Subject key identifier:   7C:52:0E:36:6C:FE:1E:F2:9C:06:8F:FB:7B:E6:6A:4A:B6:46:EB:40
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       019B0E93698A7F768AC2087D09F5B3C0131B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          1196
Signing time:             Thu 11 Dec 2025 18:01:40 +0000
Manifest this update:     Thu 11 Dec 2025 18:01:40 +0000
Manifest next update:     Fri 12 Dec 2025 18:01:40 +0000
Files and hashes:         1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=)
                          2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: DBHmGziVXA5Vpo1ZO7Rok6sj4e1SDd/mKimCB2KUazY=)
                          3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=)
                          4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=)
                          5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=)
                          6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=)
                          7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=)
                          8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=)
                          9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=)
                          10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=)
                          11: rZeua0JpgspEzA0ZdwUTq0O1Bcg.roa (hash: PzfhSIF2+5kS2/v7NVciQ/Z0mLX/ZqdXk7JgE9AnGhg=)
                          12: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=)
                          13: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=)
                          14: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:93:69:8a:7f:76:8a:c2:08:7d:09:f5:b3:c0:13:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Dec 11 18:01:40 2025 GMT
            Not After : Dec 12 18:01:40 2025 GMT
        Subject: CN=7c520e366cfe1ef29c068ffb7be66a4ab646eb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:f6:19:2c:2f:6b:96:39:71:41:50:4e:8f:
                    05:68:1a:76:c3:c3:65:06:5b:83:53:c6:8c:37:ad:
                    a7:e6:b9:19:9a:84:b6:39:71:05:85:0b:fa:f2:cb:
                    31:a9:6e:9b:5c:7a:e6:47:91:e4:24:67:93:d4:d5:
                    a9:3d:dc:b9:cd:c8:05:0a:8b:0d:6c:28:9c:a0:c4:
                    56:d0:ad:62:b4:ed:ce:11:df:0a:56:cb:79:07:46:
                    65:17:d4:39:df:ab:00:45:c9:3e:06:35:4a:25:f5:
                    4a:a2:59:f5:6f:5e:c3:14:c4:71:f0:ce:69:10:1c:
                    57:9a:28:d8:cd:4b:03:40:7a:60:a6:45:02:f9:5c:
                    f3:c7:7e:ee:a0:c7:08:a2:84:78:ab:30:23:fb:c7:
                    91:5a:e5:82:d3:f7:e0:b4:c8:05:44:3f:61:6e:91:
                    8a:28:8a:e0:ea:30:7c:a9:cf:44:95:7e:b6:9f:7f:
                    41:3a:2c:0c:d4:ca:cf:0a:10:4c:7a:90:13:eb:b9:
                    a7:22:60:b0:10:e9:65:fb:7e:55:9a:17:de:23:2b:
                    56:94:04:c7:ab:07:21:52:66:da:17:dd:6f:fa:20:
                    73:db:52:7c:2c:88:29:a6:f5:0a:04:7b:69:33:2c:
                    56:e1:33:51:07:dd:1f:38:a1:45:a4:9f:97:23:d6:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:0E:36:6C:FE:1E:F2:9C:06:8F:FB:7B:E6:6A:4A:B6:46:EB:40
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:2e:89:fd:13:4a:e1:4b:9b:e0:e4:82:26:51:35:c0:e1:
         5c:a4:00:8c:c8:c3:27:c8:fd:cc:45:2f:8f:7f:92:d4:a1:87:
         db:37:1c:8c:1d:89:26:b0:ea:53:42:2e:2c:f6:ad:0e:b9:94:
         a8:fd:f5:9b:77:25:e9:c0:e6:ee:ba:b4:3a:84:87:a9:41:20:
         2b:fd:77:d6:d7:cf:74:62:22:dd:43:81:84:fa:37:1e:aa:3d:
         dd:43:54:df:86:5a:b7:63:ed:72:27:69:04:1a:c6:d0:a3:33:
         a3:2e:1e:28:da:0d:aa:9b:04:46:5c:89:b7:ef:64:46:7f:ac:
         42:91:b5:76:db:3d:93:f0:22:01:76:71:4b:a3:4f:ee:76:37:
         76:3a:ab:e2:62:25:69:57:88:b1:44:8d:76:9f:ea:e0:d0:1f:
         93:2a:ec:e1:65:3b:cc:0b:3d:67:d8:51:4d:ed:9b:d0:78:57:
         c7:9b:44:46:0f:18:3b:68:80:70:72:3c:66:31:68:b6:a3:c2:
         69:79:7c:a7:d9:82:36:bc:dc:19:78:8a:1f:df:02:3a:46:f3:
         33:79:31:82:af:3d:c3:22:cb:2e:fb:a8:9a:b6:2c:23:c4:0a:
         a8:c6:b5:9d:10:dd:75:11:5d:a3:89:77:2e:ff:0b:0b:7e:f5:
         55:96:2b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOk2mKf3aKwgh9CfWzwBMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjUxMjExMTgwMTQwWhcNMjUxMjEyMTgwMTQwWjAzMTEwLwYDVQQD
Eyg3YzUyMGUzNjZjZmUxZWYyOWMwNjhmZmI3YmU2NmE0YWI2NDZlYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVv2GSwva5Y5cUFQTo8FaBp2w8Nl
BluDU8aMN62n5rkZmoS2OXEFhQv68ssxqW6bXHrmR5HkJGeT1NWpPdy5zcgFCosN
bCicoMRW0K1itO3OEd8KVst5B0ZlF9Q536sARck+BjVKJfVKoln1b17DFMRx8M5p
EBxXmijYzUsDQHpgpkUC+Vzzx37uoMcIooR4qzAj+8eRWuWC0/fgtMgFRD9hbpGK
KIrg6jB8qc9ElX62n39BOiwM1MrPChBMepAT67mnImCwEOll+35VmhfeIytWlATH
qwchUmbaF91v+iBz21J8LIgppvUKBHtpMyxW4TNRB90fOKFFpJ+XI9YjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxSDjZs/h7ynAaP+3vmakq2RutAMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj10uif0T
SuFLm+DkgiZRNcDhXKQAjMjDJ8j9zEUvj3+S1KGH2zccjB2JJrDqU0IuLPatDrmU
qP31m3cl6cDm7rq0OoSHqUEgK/131tfPdGIi3UOBhPo3Hqo93UNU34Zat2Ptcidp
BBrG0KMzoy4eKNoNqpsERlyJt+9kRn+sQpG1dts9k/AiAXZxS6NP7nY3djqr4mIl
aVeIsUSNdp/q4NAfkyrs4WU7zAs9Z9hRTe2b0HhXx5tERg8YO2iAcHI8ZjFotqPC
aXl8p9mCNrzcGXiKH98COkbzM3kxgq89wyLLLvuomrYsI8QKqMa1nRDddRFdo4l3
Lv8LC371VZYr8A==
-----END CERTIFICATE-----
Generated at Fri Dec 12 03:42:12 2025 by rpki-client