This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          YJ93cVs4wkblzRmHPJCT/KnOnvweTmdqT0xdKz2d9TY=
Subject key identifier:   8B:59:8E:0F:3A:B4:7B:C7:F1:C1:B6:F9:8E:F0:34:38:D5:39:DA:EE
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       019B0AECBE6CBCA7810F8D89FE414BA55977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          116A
Signing time:             Thu 11 Dec 2025 01:00:45 +0000
Manifest this update:     Thu 11 Dec 2025 01:00:45 +0000
Manifest next update:     Fri 12 Dec 2025 01:00:45 +0000
Files and hashes:         1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
                          2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
                          3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
                          4: TjpJjcuyANtrBUwpt-ltVjypyq0.roa (hash: 6I0zwsgf60E7cL93x6R+EuPe6JdbwhpcovM4vLNnw1A=)
                          5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
                          6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
                          7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
                          8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: 1jWoHOKllLT9SGpi5Pl+HiPLURqf7x9oc1lqzjX6e80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0a:ec:be:6c:bc:a7:81:0f:8d:89:fe:41:4b:a5:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Dec 11 01:00:45 2025 GMT
            Not After : Dec 12 01:00:45 2025 GMT
        Subject: CN=8b598e0f3ab47bc7f1c1b6f98ef03438d539daee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:21:fc:f3:70:36:1a:13:ef:50:cd:89:12:
                    43:a9:e3:38:7f:aa:2a:7f:5e:f4:d8:8c:9c:36:7e:
                    ff:c7:94:e5:f8:bd:48:8b:a6:d8:82:17:cb:aa:ed:
                    35:d5:9e:a0:3e:5b:92:a7:51:40:5f:93:4d:a2:9e:
                    c0:23:3a:a4:03:dd:f9:a0:a2:bd:4b:5c:e2:05:df:
                    d8:61:19:26:08:ef:3c:a7:2e:63:3f:dd:a0:b4:0a:
                    9c:84:19:b9:8e:3a:aa:22:25:fc:21:76:56:c2:ee:
                    69:4e:01:3f:be:34:c0:2e:6f:58:60:7e:e6:6a:f8:
                    3e:32:24:be:c3:f4:10:11:1d:ae:b5:3b:02:f9:69:
                    60:0a:52:c6:37:90:28:98:82:bd:23:6f:18:30:84:
                    a3:92:79:38:23:16:33:b2:22:87:6f:9c:9b:39:ef:
                    74:7b:f6:a4:a5:f5:85:48:b5:7f:e7:36:76:bd:33:
                    3b:e8:46:26:18:36:c3:8c:8c:b7:9d:9c:74:a7:03:
                    2b:03:f5:0d:a9:ec:b8:a8:71:6f:28:06:d4:68:ca:
                    b1:a6:b3:8c:da:94:6d:f8:3b:c9:db:d5:ca:da:81:
                    22:a9:f9:03:8e:17:77:45:3e:38:50:dc:55:03:c1:
                    29:0c:b6:4d:93:7c:4d:35:cb:11:2c:c3:9c:7c:d3:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:8E:0F:3A:B4:7B:C7:F1:C1:B6:F9:8E:F0:34:38:D5:39:DA:EE
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:56:dc:85:4d:5e:dc:35:be:40:0f:e5:d7:ab:ad:de:72:8c:
         58:3f:f0:6d:d4:47:67:6b:9e:1f:cf:4b:86:fb:cf:06:5a:53:
         07:7e:12:b1:ef:f5:08:3a:e0:6f:b2:86:6b:62:f2:05:17:8a:
         29:19:59:df:46:a6:08:21:66:cd:97:f8:ee:d2:ea:e8:61:d8:
         9b:0f:21:4e:d1:20:8b:37:02:50:0c:4c:4d:2b:ba:15:42:33:
         79:53:e9:f5:d8:f8:7a:78:b9:ef:e6:bc:29:25:da:63:3f:77:
         b8:c5:ac:df:57:25:e7:cf:15:39:ba:06:5e:d5:d5:c4:46:10:
         16:34:ba:9a:87:e8:6f:b9:24:d8:c7:45:79:2c:cd:b2:df:2b:
         5c:9b:95:e6:4b:99:5f:42:18:cc:ce:35:10:b6:d4:28:7c:da:
         75:41:9d:27:e9:8f:16:a1:27:18:24:f0:96:a8:22:3a:ec:db:
         a1:d0:e6:01:df:cd:9d:ac:52:1c:af:a7:c9:65:70:6c:07:39:
         f7:a3:ae:58:31:22:73:94:48:4f:fc:0f:03:20:f7:33:79:2e:
         fa:f4:a8:0c:f6:9a:d1:a3:c2:e8:ff:39:3b:72:4a:c4:0c:94:
         51:61:44:26:a7:07:c8:ec:70:09:54:c7:e0:c1:0f:52:58:7d:
         f2:90:6c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsK7L5svKeBD42J/kFLpVl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUxMjExMDEwMDQ1WhcNMjUxMjEyMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg4YjU5OGUwZjNhYjQ3YmM3ZjFjMWI2Zjk4ZWYwMzQzOGQ1MzlkYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTIh/PNwNhoT71DNiRJDqeM4f6oq
f1702IycNn7/x5Tl+L1Ii6bYghfLqu011Z6gPluSp1FAX5NNop7AIzqkA935oKK9
S1ziBd/YYRkmCO88py5jP92gtAqchBm5jjqqIiX8IXZWwu5pTgE/vjTALm9YYH7m
avg+MiS+w/QQER2utTsC+WlgClLGN5AomIK9I28YMISjknk4IxYzsiKHb5ybOe90
e/akpfWFSLV/5zZ2vTM76EYmGDbDjIy3nZx0pwMrA/UNqey4qHFvKAbUaMqxprOM
2pRt+DvJ29XK2oEiqfkDjhd3RT44UNxVA8EpDLZNk3xNNcsRLMOcfNNRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItZjg86tHvH8cG2+Y7wNDjVOdruMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1bchU1e
3DW+QA/l16ut3nKMWD/wbdRHZ2ueH89LhvvPBlpTB34Sse/1CDrgb7KGa2LyBReK
KRlZ30amCCFmzZf47tLq6GHYmw8hTtEgizcCUAxMTSu6FUIzeVPp9dj4eni57+a8
KSXaYz93uMWs31cl588VOboGXtXVxEYQFjS6mofob7kk2MdFeSzNst8rXJuV5kuZ
X0IYzM41ELbUKHzadUGdJ+mPFqEnGCTwlqgiOuzbodDmAd/NnaxSHK+nyWVwbAc5
96OuWDEic5RIT/wPAyD3M3ku+vSoDPaa0aPC6P85O3JKxAyUUWFEJqcHyOxwCVTH
4MEPUlh98pBs0w==
-----END CERTIFICATE-----
Generated at Thu Dec 11 05:18:56 2025 by rpki-client