This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          V+P1G2eZGa+TtEITBHtbAYKyVBDp0fleAU9G+8JQgpo=
Subject key identifier:   ED:59:72:42:C1:E0:F0:DB:D6:8D:36:79:6E:C7:40:C0:AE:17:82:66
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       019B15DED8A4886B27207C16030FF430AC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          13EF
Signing time:             Sat 13 Dec 2025 04:01:24 +0000
Manifest this update:     Sat 13 Dec 2025 04:01:24 +0000
Manifest next update:     Sun 14 Dec 2025 04:01:24 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: UdFcbuaOMJosf2GD2vr1Wxa63M9ISwqmFjHWnKgMQwI=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:15:de:d8:a4:88:6b:27:20:7c:16:03:0f:f4:30:ac:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Dec 13 04:01:24 2025 GMT
            Not After : Dec 14 04:01:24 2025 GMT
        Subject: CN=ed597242c1e0f0dbd68d36796ec740c0ae178266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:78:f8:df:18:f9:d1:1b:c0:a5:6a:4f:2e:
                    87:68:12:db:f3:79:79:f4:6b:c7:f3:c0:92:69:53:
                    93:47:1f:85:4a:a7:f0:c2:d2:0a:f4:37:0f:55:93:
                    ef:45:a9:68:09:fb:f0:22:e5:7f:93:7f:fb:7f:33:
                    45:45:f9:92:03:f6:32:d3:7e:73:74:7c:6b:9e:b0:
                    62:54:94:34:37:98:a2:7e:fd:33:50:5f:9a:13:f2:
                    f4:d7:0c:d1:b4:78:e2:15:3a:52:d7:64:e1:2c:7f:
                    78:6b:3a:1f:5a:12:a8:07:87:b7:02:25:87:07:cc:
                    3f:2a:bd:f6:3b:17:d8:26:37:39:ff:e4:d5:0a:c4:
                    85:5b:23:85:b8:c2:9f:28:d3:0a:da:02:0b:ab:56:
                    d7:0f:3b:ed:5c:d9:9a:03:ba:cd:e1:bf:17:c3:c5:
                    2f:96:7d:f5:90:15:05:57:af:38:57:78:0d:51:08:
                    e8:c5:c9:e3:be:08:95:ab:69:82:12:db:ec:c3:fc:
                    a3:6c:11:48:45:ab:4b:6a:fb:df:cf:27:d1:3e:bd:
                    36:88:8d:3a:c7:95:67:26:b0:4f:79:7d:db:02:72:
                    f9:74:5e:83:13:c7:a6:29:0d:22:30:49:e0:c8:f0:
                    a9:44:4d:6b:1a:38:5c:b9:bb:c1:33:a0:fd:d1:1e:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:72:42:C1:E0:F0:DB:D6:8D:36:79:6E:C7:40:C0:AE:17:82:66
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:fd:73:7d:53:64:a8:9f:34:02:d7:05:4c:30:3a:67:ef:
         99:07:f5:5e:a1:30:92:4f:50:52:3d:e8:f4:4b:92:11:68:c2:
         ba:be:fe:f2:e7:82:77:7d:cf:0b:7f:f0:b6:19:21:45:fb:d9:
         f3:d5:5c:49:85:1e:f9:de:d3:8a:39:0b:6a:47:25:6b:a4:bc:
         b9:79:be:e0:14:7c:75:3a:3c:4f:49:4d:39:c4:e3:b1:18:63:
         a2:7c:e4:5b:48:fe:de:67:66:cb:07:4b:d2:87:62:80:9e:0f:
         03:4e:b7:2c:fe:af:9e:bf:cf:06:56:73:45:5c:43:ed:ab:8d:
         33:cd:f6:3e:57:9f:cf:e5:ce:cc:f9:d6:f2:e9:80:dc:52:57:
         c2:8a:c4:1b:78:22:d9:42:88:11:32:13:21:70:a7:a8:c5:eb:
         50:30:5a:43:2c:e5:10:36:ef:c4:c4:c3:28:87:f4:4d:e6:b6:
         2a:27:b9:ab:42:57:57:51:18:d8:0a:fe:f4:f3:77:3b:3b:6c:
         63:4c:37:22:21:c8:60:9a:61:92:28:49:d3:2e:f2:f0:56:7d:
         13:51:50:4e:55:9c:1c:0c:52:1b:48:b3:84:e3:4d:6e:03:45:
         6e:61:75:13:a9:f5:09:bb:ce:a4:03:3b:8a:d3:77:6a:04:d2:
         50:63:94:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsV3tikiGsnIHwWAw/0MKxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz
MmVhOWIwHhcNMjUxMjEzMDQwMTI0WhcNMjUxMjE0MDQwMTI0WjAzMTEwLwYDVQQD
EyhlZDU5NzI0MmMxZTBmMGRiZDY4ZDM2Nzk2ZWM3NDBjMGFlMTc4MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12B4+N8Y+dEbwKVqTy6HaBLb83l5
9GvH88CSaVOTRx+FSqfwwtIK9DcPVZPvRaloCfvwIuV/k3/7fzNFRfmSA/Yy035z
dHxrnrBiVJQ0N5iifv0zUF+aE/L01wzRtHjiFTpS12ThLH94azofWhKoB4e3AiWH
B8w/Kr32OxfYJjc5/+TVCsSFWyOFuMKfKNMK2gILq1bXDzvtXNmaA7rN4b8Xw8Uv
ln31kBUFV684V3gNUQjoxcnjvgiVq2mCEtvsw/yjbBFIRatLavvfzyfRPr02iI06
x5VnJrBPeX3bAnL5dF6DE8emKQ0iMEngyPCpRE1rGjhcubvBM6D90R7tOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1ZckLB4PDb1o02eW7HQMCuF4JmMB8GA1UdIwQY
MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFP/9c31T
ZKifNALXBUwwOmfvmQf1XqEwkk9QUj3o9EuSEWjCur7+8ueCd33PC3/wthkhRfvZ
89VcSYUe+d7TijkLakcla6S8uXm+4BR8dTo8T0lNOcTjsRhjonzkW0j+3mdmywdL
0odigJ4PA063LP6vnr/PBlZzRVxD7auNM832Plefz+XOzPnW8umA3FJXworEG3gi
2UKIETITIXCnqMXrUDBaQyzlEDbvxMTDKIf0Tea2Kie5q0JXV1EY2Ar+9PN3Ozts
Y0w3IiHIYJphkihJ0y7y8FZ9E1FQTlWcHAxSG0izhONNbgNFbmF1E6n1CbvOpAM7
itN3agTSUGOUow==
-----END CERTIFICATE-----
Generated at Sat Dec 13 06:44:21 2025 by rpki-client