This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          U+mMvMh0AecFF4dNSZrjULHxT+gt6h1FMga+MvQerZ8=
Subject key identifier:   AD:1D:E8:70:C5:A6:E8:2A:B9:AA:C5:66:2C:C2:94:4C:76:99:4D:66
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       019B085A7477935DBAD791B2172D49FED9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          1362
Signing time:             Wed 10 Dec 2025 13:01:44 +0000
Manifest this update:     Wed 10 Dec 2025 13:01:44 +0000
Manifest next update:     Thu 11 Dec 2025 13:01:44 +0000
Files and hashes:         1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=)
                          2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=)
                          3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=)
                          4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=)
                          5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=)
                          6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=)
                          7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=)
                          8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=)
                          9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=)
                          10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: Bji1xvs2U1BIn62dtz6kVgz3o/KZBWHSeKXqwO9qNck=)
                          11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=)
                          12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=)
                          13: e2eD9qK2hYztM9wMgcHLi8AhZs8.roa (hash: tUPW+7fViLoXv6YzC5FAQqNxsVyrAjo9of3A+F1usKg=)
                          14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=)
                          15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:5a:74:77:93:5d:ba:d7:91:b2:17:2d:49:fe:d9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Dec 10 13:01:44 2025 GMT
            Not After : Dec 11 13:01:44 2025 GMT
        Subject: CN=ad1de870c5a6e82ab9aac5662cc2944c76994d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:0b:29:37:34:6f:ba:d2:76:b9:b1:08:a8:
                    de:b1:87:b1:c6:63:1a:30:c2:6a:03:80:8f:49:39:
                    b5:c8:f8:ec:3d:37:89:de:76:aa:6a:ee:d4:ad:37:
                    de:98:be:2d:38:57:a0:0f:29:85:f2:d9:c5:16:43:
                    b5:90:97:ca:df:ea:e2:46:42:b4:d4:1d:78:af:79:
                    d4:37:23:e3:78:cf:01:de:86:16:ea:f4:de:a2:fc:
                    b5:0e:40:d4:e1:28:17:6e:63:f4:26:42:54:1d:52:
                    27:86:d9:85:67:60:1b:8f:17:86:3e:f1:fa:02:3f:
                    bb:8d:31:0e:d8:5d:c2:9e:e0:9d:2e:b7:47:53:cd:
                    09:c7:4a:71:20:42:a3:1b:c7:da:6d:62:d7:36:4f:
                    f6:15:28:b4:8b:fa:d7:13:90:ed:a7:89:83:97:36:
                    6a:23:a3:ab:16:dc:9c:14:4a:b7:44:b0:fc:94:f0:
                    56:82:37:97:01:68:15:bb:f1:f5:d4:ff:74:cf:3e:
                    fd:fb:25:86:22:dc:ef:47:4b:85:d8:ce:b8:4b:2c:
                    42:e1:db:85:26:82:af:99:da:09:5b:07:e2:da:f7:
                    7f:e4:71:ae:5b:9b:86:f2:b1:be:64:92:bc:c0:cf:
                    d5:32:2c:af:12:27:dc:ee:19:ed:bd:77:ea:05:70:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:E8:70:C5:A6:E8:2A:B9:AA:C5:66:2C:C2:94:4C:76:99:4D:66
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:c2:a4:bd:76:76:7e:0a:8d:26:6a:4c:c4:86:3b:fb:d6:
         d3:ba:95:05:c3:00:12:e4:8a:3a:87:5c:01:61:c6:11:3c:49:
         b7:fd:fe:dc:ee:82:97:b1:60:d8:88:5f:54:21:3a:a4:36:da:
         e1:43:86:a9:5f:c7:4c:3e:f8:40:84:dc:ef:60:d9:6a:74:a5:
         e4:6b:d3:dc:2e:45:91:8a:e0:86:05:8d:82:04:f5:90:c9:71:
         e6:69:fd:d2:14:bd:9e:9a:8a:c8:5e:1e:8b:d5:99:43:14:9c:
         92:76:58:2d:43:aa:3c:27:2a:9d:ef:9b:6c:d6:26:c5:ee:01:
         0a:cb:00:d9:54:51:74:97:82:73:2e:e4:9d:42:6c:f7:02:09:
         78:49:6d:52:b3:e1:44:e2:57:d6:36:7b:57:0d:ec:d8:d0:08:
         53:77:c9:86:09:f9:ff:55:58:f3:44:e7:2a:95:2f:29:8a:c6:
         80:18:ad:45:ab:cb:ab:46:3c:c1:02:a5:11:b4:97:36:63:7c:
         6b:c6:08:f7:17:55:4b:66:ce:02:fa:5c:a2:ff:72:2e:dd:d4:
         e1:4b:a8:4c:fa:93:5d:f4:fd:6a:12:24:a0:79:a9:da:39:2f:
         9b:96:26:70:22:28:78:03:79:57:eb:9a:db:af:da:ca:9f:5d:
         bb:d4:1a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsIWnR3k12615GyFy1J/tnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjUxMjEwMTMwMTQ0WhcNMjUxMjExMTMwMTQ0WjAzMTEwLwYDVQQD
EyhhZDFkZTg3MGM1YTZlODJhYjlhYWM1NjYyY2MyOTQ0Yzc2OTk0ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JILKTc0b7rSdrmxCKjesYexxmMa
MMJqA4CPSTm1yPjsPTeJ3naqau7UrTfemL4tOFegDymF8tnFFkO1kJfK3+riRkK0
1B14r3nUNyPjeM8B3oYW6vTeovy1DkDU4SgXbmP0JkJUHVInhtmFZ2AbjxeGPvH6
Aj+7jTEO2F3CnuCdLrdHU80Jx0pxIEKjG8fabWLXNk/2FSi0i/rXE5Dtp4mDlzZq
I6OrFtycFEq3RLD8lPBWgjeXAWgVu/H11P90zz79+yWGItzvR0uF2M64SyxC4duF
JoKvmdoJWwfi2vd/5HGuW5uG8rG+ZJK8wM/VMiyvEifc7hntvXfqBXCjIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0d6HDFpugquarFZizClEx2mU1mMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9HCpL12
dn4KjSZqTMSGO/vW07qVBcMAEuSKOodcAWHGETxJt/3+3O6Cl7Fg2IhfVCE6pDba
4UOGqV/HTD74QITc72DZanSl5GvT3C5FkYrghgWNggT1kMlx5mn90hS9npqKyF4e
i9WZQxScknZYLUOqPCcqne+bbNYmxe4BCssA2VRRdJeCcy7knUJs9wIJeEltUrPh
ROJX1jZ7Vw3s2NAIU3fJhgn5/1VY80TnKpUvKYrGgBitRavLq0Y8wQKlEbSXNmN8
a8YI9xdVS2bOAvpcov9yLt3U4UuoTPqTXfT9ahIkoHmp2jkvm5YmcCIoeAN5V+ua
26/ayp9du9Qa+Q==
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:06:57 2025 by rpki-client