This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File:                     pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier:          95rvcFXRIvLhLCHkRiGZ0n4tKE82wh3ETBjUQuN4reU=
Subject key identifier:   2E:E9:1F:F6:8B:75:D7:4A:20:02:07:EF:70:EE:33:84:A5:42:01:08
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer:       /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial:       019B1B051D99ACE46F085B86F3EE1259328F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number:          0BBB
Signing time:             Sun 14 Dec 2025 04:01:18 +0000
Manifest this update:     Sun 14 Dec 2025 04:01:18 +0000
Manifest next update:     Mon 15 Dec 2025 04:01:18 +0000
Files and hashes:         1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=)
                          2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=)
                          3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=)
                          4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: JycGnadj9+7MfjRdCJxE3htPjVYwP6ZO9zgBkPshcmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:05:1d:99:ac:e4:6f:08:5b:86:f3:ee:12:59:32:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
        Validity
            Not Before: Dec 14 04:01:18 2025 GMT
            Not After : Dec 15 04:01:18 2025 GMT
        Subject: CN=2ee91ff68b75d74a200207ef70ee3384a5420108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:6a:ab:5f:fe:43:15:66:f9:51:76:02:6c:
                    fa:3d:a9:68:a0:f0:70:1c:52:df:3a:a0:2c:41:fb:
                    1d:2a:52:b0:19:29:60:ea:b3:b8:f6:a0:3b:a8:8e:
                    ed:d8:98:7d:61:fc:2d:88:9b:39:b5:75:21:ef:ad:
                    2b:3c:d8:68:00:85:c3:19:39:31:12:14:72:5e:b2:
                    0d:bd:08:fa:db:06:86:a2:e3:cf:a5:83:42:13:7c:
                    bb:04:06:48:67:44:44:3a:3e:d8:1a:94:ab:47:f9:
                    5e:70:01:c7:12:6e:06:39:db:3a:c3:b0:88:77:90:
                    14:f8:2e:ee:7d:53:18:b6:49:af:4c:63:86:33:36:
                    c4:90:21:8b:b2:fa:82:83:f5:9c:57:ce:ed:f4:b6:
                    4c:97:e5:b0:fb:4a:53:87:b2:72:14:7f:be:7f:aa:
                    2d:d5:6b:d7:89:50:6b:38:ed:64:02:13:1c:4b:fd:
                    56:b7:51:66:64:4a:71:d0:60:ed:57:50:9c:d1:d9:
                    94:1c:8a:31:de:14:b8:cf:53:91:f9:a6:5a:63:8b:
                    a2:15:fc:ec:f7:40:b0:88:80:bc:46:7b:b4:b4:53:
                    14:3d:58:1c:6b:3e:d2:d2:52:b8:d5:68:5c:f4:18:
                    62:10:14:a8:45:b4:5b:93:4a:78:67:d2:37:cd:e9:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:1F:F6:8B:75:D7:4A:20:02:07:EF:70:EE:33:84:A5:42:01:08
            X509v3 Authority Key Identifier:
                keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:94:24:5b:13:ee:9c:8a:a8:83:16:a2:a8:b1:8f:77:20:
         62:dd:e2:f8:95:58:c8:9e:9a:e4:84:3c:ef:81:38:9e:03:d9:
         d1:04:7c:97:13:d9:99:fb:37:70:31:45:ec:21:c4:ee:e2:70:
         e0:88:ae:42:9c:bd:12:94:41:6f:92:43:12:73:fb:2c:bb:80:
         30:ed:d5:cd:ff:48:52:c0:23:e0:ab:ed:51:f9:3b:d2:63:93:
         1e:1d:08:21:c5:c3:ff:33:72:8c:cc:6b:e3:9b:8d:94:5a:e9:
         80:e9:04:24:8b:a3:9b:30:bf:38:35:18:99:a4:9c:45:58:c3:
         b0:7a:43:37:a1:1f:14:61:91:dc:18:33:a7:12:1d:d3:19:30:
         95:35:f2:8b:96:5c:aa:e9:87:57:e6:9c:fe:07:da:18:29:a7:
         c9:4f:12:10:02:8b:eb:ef:24:60:08:5a:25:87:cf:21:ce:ee:
         08:78:3c:56:82:9e:87:6a:0d:03:cd:73:ba:05:2d:3d:ca:3f:
         e3:a3:6d:79:50:b1:6a:fd:a0:4f:4c:28:91:00:c0:44:87:62:
         7c:12:30:04:24:f2:b8:4d:73:4f:75:a7:45:a0:41:44:b3:98:
         72:d0:bb:29:e8:cb:ee:40:7a:4c:64:f9:33:83:98:b2:9b:91:
         56:95:8a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbBR2ZrORvCFuG8+4SWTKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2
YTczYzMwHhcNMjUxMjE0MDQwMTE4WhcNMjUxMjE1MDQwMTE4WjAzMTEwLwYDVQQD
EygyZWU5MWZmNjhiNzVkNzRhMjAwMjA3ZWY3MGVlMzM4NGE1NDIwMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm99qq1/+QxVm+VF2Amz6PalooPBw
HFLfOqAsQfsdKlKwGSlg6rO49qA7qI7t2Jh9YfwtiJs5tXUh760rPNhoAIXDGTkx
EhRyXrINvQj62waGouPPpYNCE3y7BAZIZ0REOj7YGpSrR/lecAHHEm4GOds6w7CI
d5AU+C7ufVMYtkmvTGOGMzbEkCGLsvqCg/WcV87t9LZMl+Ww+0pTh7JyFH++f6ot
1WvXiVBrOO1kAhMcS/1Wt1FmZEpx0GDtV1Cc0dmUHIox3hS4z1OR+aZaY4uiFfzs
90CwiIC8Rnu0tFMUPVgcaz7S0lK41Whc9BhiEBSoRbRbk0p4Z9I3zen9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7pH/aLdddKIAIH73DuM4SlQgEIMB8GA1UdIwQY
MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt
YWJjYjFlNzU4MmIzLzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz
LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcuUJFsT
7pyKqIMWoqixj3cgYt3i+JVYyJ6a5IQ874E4ngPZ0QR8lxPZmfs3cDFF7CHE7uJw
4IiuQpy9EpRBb5JDEnP7LLuAMO3Vzf9IUsAj4KvtUfk70mOTHh0IIcXD/zNyjMxr
45uNlFrpgOkEJIujmzC/ODUYmaScRVjDsHpDN6EfFGGR3BgzpxId0xkwlTXyi5Zc
qumHV+ac/gfaGCmnyU8SEAKL6+8kYAhaJYfPIc7uCHg8VoKeh2oNA81zugUtPco/
46NteVCxav2gT0wokQDARIdifBIwBCTyuE1zT3WnRaBBRLOYctC7KejL7kB6TGT5
M4OYspuRVpWKTg==
-----END CERTIFICATE-----
Generated at Sun Dec 14 13:26:28 2025 by rpki-client