This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File:                     Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier:          jS0lFsU+SYldGvSBlhkgCxxQDSdJj6oqS1iEbu72rW8=
Subject key identifier:   B6:AF:30:ED:C3:6D:4F:67:2B:D6:F0:BE:45:FA:D6:C8:6B:DC:DF:BB
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       019B18DF27B274D586BCE7ADB602D775FD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number:          0582
Signing time:             Sat 13 Dec 2025 18:00:36 +0000
Manifest this update:     Sat 13 Dec 2025 18:00:36 +0000
Manifest next update:     Sun 14 Dec 2025 18:00:36 +0000
Files and hashes:         1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
                          2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: tBd8GfYc+jZozgv3Qe3KzC/L4VLD5KN5lfylF6dSmu4=)
                          3: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:df:27:b2:74:d5:86:bc:e7:ad:b6:02:d7:75:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Dec 13 18:00:36 2025 GMT
            Not After : Dec 14 18:00:36 2025 GMT
        Subject: CN=b6af30edc36d4f672bd6f0be45fad6c86bdcdfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:e3:c6:9f:2a:49:4c:f9:a0:8e:04:4b:41:
                    84:11:f9:1e:64:0e:a5:67:2b:dc:b5:ca:47:f3:1f:
                    a1:c8:e6:d8:0d:45:1b:56:c9:1c:5e:5c:1c:4a:bc:
                    0e:5f:a7:fe:d4:d6:85:18:96:09:4a:a9:f9:11:6f:
                    46:3f:12:3e:a8:f6:00:ef:73:76:24:cc:4c:64:87:
                    98:8f:e6:70:a2:32:95:89:bd:e2:f0:79:30:fd:23:
                    fa:bd:f1:bd:a7:2f:2e:7e:8e:b6:90:e8:d4:b0:0d:
                    d6:0e:37:75:b9:25:33:3c:e8:8e:d1:eb:c0:66:fc:
                    5c:12:6d:b0:49:50:25:4c:1c:12:0d:3e:d5:41:cf:
                    ac:25:ec:2b:64:50:c2:a1:03:42:02:18:42:8c:e4:
                    1e:dc:3f:dc:f0:73:7d:80:a3:8b:8c:0a:92:57:1e:
                    04:ef:34:4a:25:f5:21:ef:3b:01:05:6c:62:e8:34:
                    0f:7b:dc:1a:30:b3:6c:19:e4:1b:c6:a9:d6:03:3a:
                    92:e7:2c:8d:18:32:e0:81:e5:69:0e:e7:5e:9d:f2:
                    27:2a:72:50:1b:3f:2b:4b:30:6f:e2:f6:6e:af:0b:
                    22:d0:74:03:0e:8e:a9:dd:5f:15:97:c6:10:c9:9f:
                    a3:79:04:1a:0c:34:e1:47:64:85:23:d3:d2:5f:84:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AF:30:ED:C3:6D:4F:67:2B:D6:F0:BE:45:FA:D6:C8:6B:DC:DF:BB
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:f7:aa:2c:4e:d5:8c:fe:7c:11:88:8c:ae:a5:59:42:b8:
         02:43:17:76:f3:ac:ce:9b:22:a1:5d:64:21:2a:13:54:19:28:
         8b:a5:0e:31:db:c0:36:55:91:f4:35:3f:32:e2:15:d6:fc:07:
         6f:88:8c:58:db:f7:91:93:f9:a7:90:06:fe:b6:bf:f5:52:47:
         b5:82:53:cc:00:db:a7:86:63:ea:2e:02:75:49:5f:a2:ce:23:
         3c:11:29:80:c5:53:87:42:7e:26:58:37:6a:80:6a:06:04:74:
         31:0a:66:9f:63:49:6f:69:6d:56:c2:5a:f7:1d:6e:ac:6e:db:
         04:3c:6a:6a:3c:a7:ef:29:06:56:56:72:26:65:ef:86:b6:e6:
         82:bd:b6:f7:eb:71:63:45:a9:19:be:e2:62:a6:2a:91:8f:0c:
         70:7b:3b:ca:7b:4c:3d:3a:29:89:40:00:6c:12:47:b0:45:ed:
         44:7a:41:99:ed:45:bd:53:21:a0:e3:3d:45:82:81:36:4a:42:
         2b:d8:b0:d8:1f:c5:1a:ed:35:bd:f9:cb:62:2c:f5:0d:a8:20:
         95:cf:af:7f:b6:d3:83:f1:76:d2:8f:a7:7e:0f:4a:bf:29:4c:
         5f:59:7a:1b:25:10:af:70:6f:1e:40:89:67:55:0c:d5:49:b6:
         e8:53:aa:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsY3yeydNWGvOettgLXdf0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj
OWRmZjcwHhcNMjUxMjEzMTgwMDM2WhcNMjUxMjE0MTgwMDM2WjAzMTEwLwYDVQQD
EyhiNmFmMzBlZGMzNmQ0ZjY3MmJkNmYwYmU0NWZhZDZjODZiZGNkZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWrjxp8qSUz5oI4ES0GEEfkeZA6l
ZyvctcpH8x+hyObYDUUbVskcXlwcSrwOX6f+1NaFGJYJSqn5EW9GPxI+qPYA73N2
JMxMZIeYj+ZwojKVib3i8Hkw/SP6vfG9py8ufo62kOjUsA3WDjd1uSUzPOiO0evA
ZvxcEm2wSVAlTBwSDT7VQc+sJewrZFDCoQNCAhhCjOQe3D/c8HN9gKOLjAqSVx4E
7zRKJfUh7zsBBWxi6DQPe9waMLNsGeQbxqnWAzqS5yyNGDLggeVpDudenfInKnJQ
Gz8rSzBv4vZurwsi0HQDDo6p3V8Vl8YQyZ+jeQQaDDThR2SFI9PSX4SVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLavMO3DbU9nK9bwvkX61shr3N+7MB8GA1UdIwQY
MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt
NTNjZDkxYjI4YzRmLzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm
LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqv3qixO
1Yz+fBGIjK6lWUK4AkMXdvOszpsioV1kISoTVBkoi6UOMdvANlWR9DU/MuIV1vwH
b4iMWNv3kZP5p5AG/ra/9VJHtYJTzADbp4Zj6i4CdUlfos4jPBEpgMVTh0J+Jlg3
aoBqBgR0MQpmn2NJb2ltVsJa9x1urG7bBDxqajyn7ykGVlZyJmXvhrbmgr229+tx
Y0WpGb7iYqYqkY8McHs7yntMPTopiUAAbBJHsEXtRHpBme1FvVMhoOM9RYKBNkpC
K9iw2B/FGu01vfnLYiz1Dagglc+vf7bTg/F20o+nfg9KvylMX1l6GyUQr3BvHkCJ
Z1UM1Um26FOqnw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:52:37 2025 by rpki-client