This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          nIPixLAEMEEGwZ+3X4TQyaNwJg4K3xN8uTa9LcVtTsw=
Subject key identifier:   1F:3D:56:77:10:B3:6E:AC:E5:5A:2C:0B:67:2D:0A:EC:DD:60:3E:78
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       019B10EF8198588AF2D8239C74E4FBAD73B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          1782
Signing time:             Fri 12 Dec 2025 05:01:30 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:30 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:30 +0000
Files and hashes:         1: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (hash: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=)
                          2: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: tKtd4GlXm6upVyJtDIw5d0wUi3dTJbnDKX4bh5iZM5w=)
                          3: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (hash: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=)
                          4: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (hash: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=)
                          5: RUBK6YgAvaDdWQcnoq_c2QP-xe4.roa (hash: Uqv+aEnH2dA3s4zAi+ZXrmM5vUYHFe7H5OkNDJW1qSI=)
                          6: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (hash: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:81:98:58:8a:f2:d8:23:9c:74:e4:fb:ad:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Dec 12 05:01:30 2025 GMT
            Not After : Dec 13 05:01:30 2025 GMT
        Subject: CN=1f3d567710b36eace55a2c0b672d0aecdd603e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:54:46:16:d3:53:f3:57:db:54:99:a8:80:
                    5e:52:29:4f:d2:82:47:c4:7d:09:ef:6f:c6:d4:8b:
                    03:fb:e6:75:43:fe:7c:96:ce:c7:20:88:2b:45:4c:
                    2c:a9:c6:e8:3d:10:a6:9f:e3:b0:18:86:0c:f6:d8:
                    e3:96:be:66:60:6c:2b:56:44:5d:a9:4d:aa:37:bf:
                    14:4a:37:28:38:84:ec:ea:dd:94:f4:96:55:28:19:
                    cc:d1:ae:23:91:36:eb:4c:cf:f6:da:16:05:c9:1a:
                    c0:99:0b:a0:05:d0:28:1c:ca:fd:8b:54:e8:fd:5a:
                    c3:e4:a6:fb:c5:89:89:0a:00:49:da:be:b4:17:b4:
                    b2:9c:7c:de:e2:cc:54:31:ec:8b:74:91:9c:7a:22:
                    14:b5:60:ad:86:51:99:d1:0a:e7:65:30:3b:e6:07:
                    5a:52:4f:90:c5:73:4b:b3:4f:e9:9e:f3:68:61:a4:
                    a5:9d:9b:f4:cd:a8:34:d4:d9:11:a4:b5:54:34:81:
                    f6:f1:cc:86:a2:5d:79:89:f9:dd:a4:21:8f:87:ce:
                    8b:37:ba:21:8f:60:0a:fe:22:ee:6b:52:49:77:6f:
                    15:94:e7:56:95:6e:ae:ea:f7:4f:c1:86:87:61:a0:
                    49:22:1c:30:01:12:62:24:24:35:2a:5c:d4:4b:cf:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:56:77:10:B3:6E:AC:E5:5A:2C:0B:67:2D:0A:EC:DD:60:3E:78
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cc:ec:67:57:61:d5:03:cd:37:c0:3a:9b:5c:31:70:9c:49:
         52:d5:58:ba:d4:1d:7f:90:ed:65:cb:6b:68:58:e5:3e:68:1d:
         ee:75:b0:08:26:ad:60:1d:3d:85:61:cc:a5:f2:ca:3b:f1:4a:
         97:1f:d8:5c:5b:0e:cb:59:4c:0e:8d:cc:5b:fc:5a:36:d8:de:
         53:3a:3c:d6:4c:80:f0:be:dd:56:59:c7:93:6b:b4:3c:7c:fb:
         e6:25:b7:31:ee:45:92:7f:5c:5a:d1:ed:98:7d:1e:ce:f8:b2:
         19:fe:92:8b:bc:ec:42:6b:57:1b:bf:31:ec:aa:54:1f:31:f2:
         b3:60:8b:89:23:85:e8:13:41:c6:c8:61:84:f3:2d:38:57:99:
         f5:2d:db:bb:a8:4c:2f:60:44:85:c4:c4:a7:07:94:62:dd:86:
         64:7a:7e:37:0e:e2:87:c3:ea:ef:37:ca:14:68:59:c3:1f:fc:
         f1:97:4b:75:34:53:19:1c:e8:49:e8:6b:44:eb:0a:31:97:2d:
         2d:2c:34:18:bf:ec:c8:1b:1c:41:12:2f:e6:9b:82:48:dd:47:
         59:bc:5c:fd:67:0a:8a:82:b1:04:32:7e:16:fe:36:2c:5a:ad:
         d9:7e:d4:ca:8f:2d:d1:e4:70:7e:d6:70:bc:de:c8:b5:47:f5:
         78:65:09:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQ74GYWIry2COcdOT7rXOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjUxMjEyMDUwMTMwWhcNMjUxMjEzMDUwMTMwWjAzMTEwLwYDVQQD
EygxZjNkNTY3NzEwYjM2ZWFjZTU1YTJjMGI2NzJkMGFlY2RkNjAzZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAtURhbTU/NX21SZqIBeUilP0oJH
xH0J72/G1IsD++Z1Q/58ls7HIIgrRUwsqcboPRCmn+OwGIYM9tjjlr5mYGwrVkRd
qU2qN78USjcoOITs6t2U9JZVKBnM0a4jkTbrTM/22hYFyRrAmQugBdAoHMr9i1To
/VrD5Kb7xYmJCgBJ2r60F7SynHze4sxUMeyLdJGceiIUtWCthlGZ0QrnZTA75gda
Uk+QxXNLs0/pnvNoYaSlnZv0zag01NkRpLVUNIH28cyGol15ifndpCGPh86LN7oh
j2AK/iLua1JJd28VlOdWlW6u6vdPwYaHYaBJIhwwARJiJCQ1KlzUS8/UGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB89VncQs26s5VosC2ctCuzdYD54MB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWczsZ1dh
1QPNN8A6m1wxcJxJUtVYutQdf5DtZctraFjlPmgd7nWwCCatYB09hWHMpfLKO/FK
lx/YXFsOy1lMDo3MW/xaNtjeUzo81kyA8L7dVlnHk2u0PHz75iW3Me5Fkn9cWtHt
mH0ezviyGf6Si7zsQmtXG78x7KpUHzHys2CLiSOF6BNBxshhhPMtOFeZ9S3bu6hM
L2BEhcTEpweUYt2GZHp+Nw7ih8Pq7zfKFGhZwx/88ZdLdTRTGRzoSehrROsKMZct
LSw0GL/syBscQRIv5puCSN1HWbxc/WcKioKxBDJ+Fv42LFqt2X7Uyo8t0eRwftZw
vN7ItUf1eGUJ2Q==
-----END CERTIFICATE-----
Generated at Fri Dec 12 07:43:37 2025 by rpki-client