This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          qD4VKxLZGS+i6/Xy18aMesNqDkNFZySArNhp5dDWOM4=
Subject key identifier:   39:2C:EC:48:30:43:7B:98:67:D9:57:75:31:1B:C7:C8:87:AD:40:BD
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       019B1B054F0CACDDD964149CA4F9BA9CC126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          1774
Signing time:             Sun 14 Dec 2025 04:01:31 +0000
Manifest this update:     Sun 14 Dec 2025 04:01:31 +0000
Manifest next update:     Mon 15 Dec 2025 04:01:31 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: pMxNabMAo2T8b1MFnzThS+a1Woq8Bdm5Q/I5/C8rI9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:05:4f:0c:ac:dd:d9:64:14:9c:a4:f9:ba:9c:c1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Dec 14 04:01:31 2025 GMT
            Not After : Dec 15 04:01:31 2025 GMT
        Subject: CN=392cec4830437b9867d95775311bc7c887ad40bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:3e:c3:fb:c3:25:bd:af:cc:27:51:fd:65:
                    de:99:36:59:6c:f3:65:56:8a:8a:55:d1:e5:7d:30:
                    8f:cf:e4:1a:c0:f6:55:6c:fe:b0:a1:fd:a3:18:50:
                    6d:b7:c5:01:cb:52:35:fe:b1:01:a7:78:aa:d6:c9:
                    4a:bb:66:cc:9a:9e:6e:cf:68:45:ee:89:26:c4:14:
                    4e:c6:18:39:8d:b0:82:ff:d1:52:a8:c1:93:86:36:
                    fd:9f:e9:7e:84:09:65:56:97:ca:e4:8b:ca:06:e2:
                    93:4a:f3:42:41:2b:ce:5a:d0:71:ce:e1:34:7d:4e:
                    55:56:5c:18:01:13:f2:8e:a1:a0:f6:ac:91:9e:cc:
                    f8:0f:48:b8:e6:08:38:83:6a:27:56:9b:4b:4a:d3:
                    05:35:14:3c:3a:ae:9d:10:c0:ee:2e:26:9d:11:ac:
                    1d:9c:80:a9:10:79:26:7a:6d:34:99:b2:9c:3d:1b:
                    a5:8c:b1:d4:d3:56:5b:e6:af:94:bc:4e:c1:d7:c8:
                    4a:02:f1:63:69:0e:d0:60:7c:1b:05:e2:5e:42:31:
                    84:ac:c5:9b:15:bf:4f:8b:5c:6c:c6:3a:1f:83:d7:
                    fe:d0:af:b8:ba:40:3f:89:63:4f:36:d7:ca:5a:47:
                    d2:69:24:96:44:e8:c4:d8:ca:d0:d4:62:5c:f8:e2:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2C:EC:48:30:43:7B:98:67:D9:57:75:31:1B:C7:C8:87:AD:40:BD
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:f0:28:b2:4e:2c:5e:e3:ea:e7:38:52:7a:38:0f:df:0b:
         74:b3:2c:4d:89:f5:1f:74:f6:00:1b:e8:18:30:b4:b3:2e:ce:
         03:d2:8f:ec:18:c7:5a:ff:56:53:12:13:1e:46:bd:d7:61:a3:
         70:9a:05:dd:5c:5d:f1:fd:09:cb:c2:4a:d0:37:56:f9:1e:2a:
         59:f8:3f:d3:2c:d9:4b:04:0d:2d:80:02:87:45:2b:26:d3:d0:
         f9:a6:53:33:30:0f:90:8a:d2:1a:51:87:77:d9:06:8d:2f:0a:
         99:14:bf:5d:39:7e:eb:d1:2c:d5:b2:09:a6:43:80:91:52:a2:
         72:4a:66:41:28:c5:6f:cc:57:92:35:80:c1:8c:20:8c:2f:64:
         2c:8a:34:65:fb:fa:af:2c:9c:2f:aa:36:8d:01:f2:59:ae:99:
         4c:fe:ec:3b:26:d3:ac:89:9d:8b:a3:15:42:bb:70:10:2c:0b:
         48:a6:e2:1d:dc:09:08:ad:c9:2d:70:18:40:bf:01:35:fd:bc:
         d6:4d:f4:02:a6:57:69:dc:4a:12:60:d3:fc:4b:2d:7c:40:30:
         fe:a3:bf:83:37:6a:4c:a9:ec:e2:26:13:8d:ef:71:b8:09:a6:
         b7:bc:51:94:74:57:f8:4e:87:08:2e:f0:c0:91:6d:2b:85:cb:
         d9:32:6e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbBU8MrN3ZZBScpPm6nMEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw
NDA3OWUwHhcNMjUxMjE0MDQwMTMxWhcNMjUxMjE1MDQwMTMxWjAzMTEwLwYDVQQD
EygzOTJjZWM0ODMwNDM3Yjk4NjdkOTU3NzUzMTFiYzdjODg3YWQ0MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtus+w/vDJb2vzCdR/WXemTZZbPNl
VoqKVdHlfTCPz+QawPZVbP6wof2jGFBtt8UBy1I1/rEBp3iq1slKu2bMmp5uz2hF
7okmxBROxhg5jbCC/9FSqMGThjb9n+l+hAllVpfK5IvKBuKTSvNCQSvOWtBxzuE0
fU5VVlwYARPyjqGg9qyRnsz4D0i45gg4g2onVptLStMFNRQ8Oq6dEMDuLiadEawd
nICpEHkmem00mbKcPRuljLHU01Zb5q+UvE7B18hKAvFjaQ7QYHwbBeJeQjGErMWb
Fb9Pi1xsxjofg9f+0K+4ukA/iWNPNtfKWkfSaSSWROjE2MrQ1GJc+OIHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDks7EgwQ3uYZ9lXdTEbx8iHrUC9MB8GA1UdIwQY
MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt
YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj
LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcfwKLJO
LF7j6uc4Uno4D98LdLMsTYn1H3T2ABvoGDC0sy7OA9KP7BjHWv9WUxITHka912Gj
cJoF3Vxd8f0Jy8JK0DdW+R4qWfg/0yzZSwQNLYACh0UrJtPQ+aZTMzAPkIrSGlGH
d9kGjS8KmRS/XTl+69Es1bIJpkOAkVKickpmQSjFb8xXkjWAwYwgjC9kLIo0Zfv6
ryycL6o2jQHyWa6ZTP7sOybTrImdi6MVQrtwECwLSKbiHdwJCK3JLXAYQL8BNf28
1k30AqZXadxKEmDT/EstfEAw/qO/gzdqTKns4iYTje9xuAmmt7xRlHRX+E6HCC7w
wJFtK4XL2TJulQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 14:21:26 2025 by rpki-client