This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File:                     rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier:          /KmorMkLRUcGGii+JfQBEqVBICAF3zZ3HgX7Dt68BCk=
Subject key identifier:   B0:85:35:EF:4E:F3:DD:C8:B4:0B:27:9C:C9:77:46:8E:56:10:E6:7F
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer:       /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial:       019B1A974A1A66C76CFD05149166D763E25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number:          1776
Signing time:             Sun 14 Dec 2025 02:01:20 +0000
Manifest this update:     Sun 14 Dec 2025 02:01:20 +0000
Manifest next update:     Mon 15 Dec 2025 02:01:20 +0000
Files and hashes:         1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
                          2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
                          3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: vIVwRo9mA0EixiN2ISq7Uy6btQSFRunwYi1pmsWuhCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:97:4a:1a:66:c7:6c:fd:05:14:91:66:d7:63:e2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
        Validity
            Not Before: Dec 14 02:01:20 2025 GMT
            Not After : Dec 15 02:01:20 2025 GMT
        Subject: CN=b08535ef4ef3ddc8b40b279cc977468e5610e67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0e:2b:5c:4f:69:2b:58:a1:6d:50:9a:19:e9:
                    5a:4f:e4:a8:35:e1:a5:28:5e:b4:64:32:df:74:a1:
                    58:9d:a8:3c:85:8d:5f:8f:e2:74:6d:38:75:2e:bc:
                    c3:a5:6c:ff:16:da:d5:b1:2a:dd:4d:b5:b0:c6:b3:
                    63:93:81:f1:a7:3d:c4:93:e0:a0:bc:f9:3a:08:c6:
                    ef:32:f3:bc:84:0a:cc:01:73:9e:57:53:f9:83:57:
                    2a:db:ad:6b:24:ed:1e:1c:d7:f3:3d:9a:87:61:38:
                    4f:d9:9a:30:72:3a:64:0b:36:dd:9f:1a:7b:0a:eb:
                    08:ce:dd:5a:c1:fb:4d:a6:62:76:d2:3a:94:62:14:
                    a6:22:2e:16:81:43:3e:12:6d:8d:0b:62:13:1d:63:
                    10:06:65:f0:a2:ec:03:41:cd:ae:7f:01:f1:fd:47:
                    8f:12:2f:84:2d:ba:9f:68:ba:0e:a1:b0:c7:f2:c2:
                    ad:80:e5:c6:00:b2:ea:5f:d6:91:2d:48:72:41:ee:
                    c8:af:57:fe:35:4f:88:23:fb:47:b0:9f:ce:ca:8e:
                    8e:92:4b:27:3b:2c:14:ad:4e:ea:52:d2:79:72:cd:
                    1a:61:01:90:a9:73:14:65:82:e3:6a:c6:03:7b:e3:
                    13:94:8d:bf:2e:db:ef:79:3a:d7:17:07:fb:66:89:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:85:35:EF:4E:F3:DD:C8:B4:0B:27:9C:C9:77:46:8E:56:10:E6:7F
            X509v3 Authority Key Identifier:
                keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:ca:07:5e:89:ec:b5:25:36:96:a3:0a:04:55:d7:0a:4e:
         f4:d8:7f:de:c5:db:cd:1b:99:b2:e0:3b:7c:70:03:fa:09:fa:
         70:21:e0:ae:49:76:fe:98:2b:27:41:4c:e6:43:b6:92:92:0a:
         64:17:81:25:3f:41:07:4e:36:88:a3:dd:6c:52:a5:cb:0a:28:
         2d:d9:e3:73:02:ce:02:10:ed:e9:d7:f7:d0:2f:56:3f:22:af:
         5f:3b:9e:93:ba:6d:d1:9f:60:ae:a0:d5:2e:65:8b:e5:88:ef:
         63:67:5b:96:7a:28:b9:bf:60:1c:0d:f4:e7:a9:15:97:1f:d3:
         2f:04:72:f4:f1:b2:c2:25:db:85:48:d5:5c:b5:d5:ca:26:d4:
         67:6f:c3:17:ab:5e:96:11:61:53:19:73:c1:ce:04:33:49:d7:
         61:73:8d:63:4d:5f:bc:4e:6f:a9:94:bf:71:79:7a:bc:7d:a6:
         cb:eb:83:d4:07:16:e2:74:87:be:bc:3c:a9:c1:a8:61:0c:3c:
         b7:54:46:34:76:f2:b5:db:d9:fe:34:5f:52:e3:fa:36:f1:06:
         8d:ef:cd:97:f5:ff:a9:48:ee:32:1d:59:70:d1:68:c6:40:88:
         6d:5b:0b:a5:9a:18:eb:08:d2:c5:12:eb:36:88:0d:e3:c4:93:
         c1:06:93:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsal0oaZsds/QUUkWbXY+JdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew
YTNlYzYwHhcNMjUxMjE0MDIwMTIwWhcNMjUxMjE1MDIwMTIwWjAzMTEwLwYDVQQD
EyhiMDg1MzVlZjRlZjNkZGM4YjQwYjI3OWNjOTc3NDY4ZTU2MTBlNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A4rXE9pK1ihbVCaGelaT+SoNeGl
KF60ZDLfdKFYnag8hY1fj+J0bTh1LrzDpWz/FtrVsSrdTbWwxrNjk4Hxpz3Ek+Cg
vPk6CMbvMvO8hArMAXOeV1P5g1cq261rJO0eHNfzPZqHYThP2ZowcjpkCzbdnxp7
CusIzt1awftNpmJ20jqUYhSmIi4WgUM+Em2NC2ITHWMQBmXwouwDQc2ufwHx/UeP
Ei+ELbqfaLoOobDH8sKtgOXGALLqX9aRLUhyQe7Ir1f+NU+II/tHsJ/Oyo6Okksn
OywUrU7qUtJ5cs0aYQGQqXMUZYLjasYDe+MTlI2/LtvveTrXFwf7ZomndQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCFNe9O893ItAsnnMl3Ro5WEOZ/MB8GA1UdIwQY
MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt
NjcxYmVlMmJjYzA0LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0
LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIvKB16J
7LUlNpajCgRV1wpO9Nh/3sXbzRuZsuA7fHAD+gn6cCHgrkl2/pgrJ0FM5kO2kpIK
ZBeBJT9BB042iKPdbFKlywooLdnjcwLOAhDt6df30C9WPyKvXzuek7pt0Z9grqDV
LmWL5YjvY2dblnooub9gHA3056kVlx/TLwRy9PGywiXbhUjVXLXVyibUZ2/DF6te
lhFhUxlzwc4EM0nXYXONY01fvE5vqZS/cXl6vH2my+uD1AcW4nSHvrw8qcGoYQw8
t1RGNHbytdvZ/jRfUuP6NvEGje/Nl/X/qUjuMh1ZcNFoxkCIbVsLpZoY6wjSxRLr
NogN48STwQaTeA==
-----END CERTIFICATE-----
Generated at Sun Dec 14 11:50:38 2025 by rpki-client