This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          a/Ii7ZGSmAgMP+l8P/FdB8+C441CcC21/dVXlPtEG1M=
Subject key identifier:   20:66:4D:2F:91:5E:3D:ED:22:E5:7E:3B:EE:B0:18:7F:1F:66:8E:1F
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       019B46939981BCBF41608628087EF9A36F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          057E
Signing time:             Mon 22 Dec 2025 15:00:36 +0000
Manifest this update:     Mon 22 Dec 2025 15:00:36 +0000
Manifest next update:     Tue 23 Dec 2025 15:00:36 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: 7fCE7UXySCcMbn9PVJTSRwZyWF3TRkR1jv/oQmZ+pZo=)
                          2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
                          3: rQUKCahIBhl3q6X_ssqHaslUPkw.roa (hash: oqWMNr1y2jXmtuppkY6LyFtpsdVUxnQjZycMv+hYavM=)
                          4: tFTfuySubfSrRVHUhxYeF1u80Zs.roa (hash: fQsA3U2f82hs7Bti4LUoQIz7rVn7qpzt4RTZ9jhDkSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:93:99:81:bc:bf:41:60:86:28:08:7e:f9:a3:6f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Dec 22 15:00:36 2025 GMT
            Not After : Dec 23 15:00:36 2025 GMT
        Subject: CN=20664d2f915e3ded22e57e3beeb0187f1f668e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:08:13:68:11:bc:42:b7:b6:65:e8:f8:aa:
                    db:61:8f:e3:0c:ec:12:74:9e:3c:b8:df:87:93:97:
                    fd:53:16:0b:39:c0:d8:30:d7:da:9d:35:7f:c5:a5:
                    63:61:ec:c1:6a:5b:49:e9:83:07:0a:2e:72:2e:b8:
                    84:ff:26:17:1b:e4:0c:97:c4:e0:12:c8:14:ef:90:
                    94:d3:62:1a:3d:64:ae:c2:9f:33:0d:6d:3d:7d:41:
                    38:77:b7:e8:9b:1c:86:52:ae:0c:6e:b0:21:d4:83:
                    94:db:06:40:8b:10:f5:6b:a6:0b:bf:19:d8:3e:aa:
                    26:ff:78:67:05:83:c7:c1:f3:32:bf:c5:de:d8:c0:
                    aa:3e:6c:6a:f8:de:93:cd:4e:e3:3f:02:a2:2c:c5:
                    a6:3a:b1:b4:74:09:d0:f5:6b:0d:db:d7:9a:c9:b9:
                    00:08:1c:7b:a5:28:b1:fe:2d:a4:fa:c9:7f:72:63:
                    c3:8a:ea:2a:9c:3b:fe:45:c9:2a:e4:95:6b:84:62:
                    17:ae:68:95:ed:48:5e:e0:7f:f3:a1:7f:42:54:21:
                    d9:50:af:5c:fe:e7:8f:c5:5a:e8:1d:9d:ad:c2:88:
                    48:fd:4a:7b:36:7d:17:43:01:c7:62:dd:40:f0:80:
                    04:a6:89:91:66:bd:6a:8d:df:dc:c1:a6:95:c9:cb:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:4D:2F:91:5E:3D:ED:22:E5:7E:3B:EE:B0:18:7F:1F:66:8E:1F
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:9b:6b:67:0d:b0:0a:5c:b4:9f:ee:33:ef:22:43:d3:94:df:
         d0:00:2d:e7:df:39:5d:c7:bd:6d:9d:b5:a7:c4:5b:11:00:c9:
         05:d4:2a:64:53:8d:89:a2:c9:53:63:d0:94:8e:e3:68:78:c6:
         ba:1a:2f:13:d9:df:13:4b:71:3c:9c:d6:43:33:95:b1:3c:d6:
         fa:82:c4:45:b0:55:f1:d9:80:13:8a:3b:ec:00:f7:5e:30:c5:
         6a:b7:54:cd:cc:0e:56:59:e5:fc:3c:c5:d7:9f:7f:b2:05:b6:
         af:0f:06:15:d8:fc:5a:5a:46:c0:8c:1d:5e:04:ee:b1:df:33:
         43:48:5a:fa:46:27:19:08:06:b1:e3:fe:7e:b4:87:82:6d:8b:
         db:c5:8b:ba:6b:a4:46:a2:25:84:6c:61:f1:92:2b:11:9e:9e:
         17:0b:62:69:c6:29:7a:5d:a0:4f:40:79:13:4b:d3:a9:ef:58:
         12:4a:b8:0a:96:36:6e:56:14:c7:06:86:11:67:ca:93:6e:e4:
         7b:76:eb:0d:b6:93:7d:b0:53:71:cc:09:2c:8a:7b:17:ec:78:
         4b:19:b8:56:68:fd:fe:98:85:7f:2d:ee:84:c9:48:a2:50:4f:
         65:07:a8:56:61:b9:63:91:6a:fc:71:ad:98:6e:3d:9e:f7:f9:
         b3:8b:21:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtGk5mBvL9BYIYoCH75o2+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjUxMjIyMTUwMDM2WhcNMjUxMjIzMTUwMDM2WjAzMTEwLwYDVQQD
EygyMDY2NGQyZjkxNWUzZGVkMjJlNTdlM2JlZWIwMTg3ZjFmNjY4ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon0IE2gRvEK3tmXo+KrbYY/jDOwS
dJ48uN+Hk5f9UxYLOcDYMNfanTV/xaVjYezBaltJ6YMHCi5yLriE/yYXG+QMl8Tg
EsgU75CU02IaPWSuwp8zDW09fUE4d7fomxyGUq4MbrAh1IOU2wZAixD1a6YLvxnY
Pqom/3hnBYPHwfMyv8Xe2MCqPmxq+N6TzU7jPwKiLMWmOrG0dAnQ9WsN29eaybkA
CBx7pSix/i2k+sl/cmPDiuoqnDv+Rckq5JVrhGIXrmiV7Uhe4H/zoX9CVCHZUK9c
/uePxVroHZ2twohI/Up7Nn0XQwHHYt1A8IAEpomRZr1qjd/cwaaVyct6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBmTS+RXj3tIuV+O+6wGH8fZo4fMB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA45trZw2w
Cly0n+4z7yJD05Tf0AAt5985Xce9bZ21p8RbEQDJBdQqZFONiaLJU2PQlI7jaHjG
uhovE9nfE0txPJzWQzOVsTzW+oLERbBV8dmAE4o77AD3XjDFardUzcwOVlnl/DzF
159/sgW2rw8GFdj8WlpGwIwdXgTusd8zQ0ha+kYnGQgGseP+frSHgm2L28WLumuk
RqIlhGxh8ZIrEZ6eFwtiacYpel2gT0B5E0vTqe9YEkq4CpY2blYUxwaGEWfKk27k
e3brDbaTfbBTccwJLIp7F+x4Sxm4Vmj9/piFfy3uhMlIolBPZQeoVmG5Y5Fq/HGt
mG49nvf5s4shdQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:32:14 2025 by rpki-client