This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File:                     26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier:          C5takPS4Wp8GTxzmKwf5d0LsHsU94o5fVRj+jH4V2W8=
Subject key identifier:   48:A9:03:4C:61:37:C3:FA:1C:5D:CB:78:8E:5A:3C:C9:7D:67:6D:04
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer:       /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial:       019B0E26F297BEDC76DF44E36D48A17964A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number:          1778
Signing time:             Thu 11 Dec 2025 16:03:12 +0000
Manifest this update:     Thu 11 Dec 2025 16:03:12 +0000
Manifest next update:     Fri 12 Dec 2025 16:03:12 +0000
Files and hashes:         1: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: hWOtEOenoKP+uNTJIJLjW/0ZowfarxkftX1UQWUHou8=)
                          2: 7j4WA3ysp1rOkVmQlKAKuU1wD8E.roa (hash: 50o1sY9mxiaVzB3RiC3eXccX8VD4SmfGqHVWyBgG97Q=)
                          3: HZK1nXmWN-rO-mSEBWdam8_Ekw8.roa (hash: 7EEOHKjjtUzUNB//SlEOoxLrukB2bXMqrOoSHuBhLss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:26:f2:97:be:dc:76:df:44:e3:6d:48:a1:79:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
        Validity
            Not Before: Dec 11 16:03:12 2025 GMT
            Not After : Dec 12 16:03:12 2025 GMT
        Subject: CN=48a9034c6137c3fa1c5dcb788e5a3cc97d676d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:dc:17:af:e2:1a:40:54:f0:2a:6b:05:f1:
                    94:fe:14:65:2d:3c:fd:a8:10:b1:bc:44:a6:ca:e6:
                    12:04:16:f5:9f:57:13:bb:5a:dc:a2:d4:78:64:8e:
                    0e:fa:42:0c:7e:2b:bd:0e:d2:1c:49:c7:87:1d:e4:
                    57:da:40:e9:5a:f4:ee:4e:4b:e5:d9:0f:41:cf:c9:
                    f7:50:d9:8b:c8:c8:63:b8:9c:33:00:3c:f2:2c:6e:
                    0d:a2:f7:60:09:01:9d:6d:fc:38:1e:44:e8:d7:3e:
                    88:4e:05:18:c0:de:41:f2:39:ea:f6:6e:4d:73:97:
                    9e:f7:66:3e:a5:c8:db:96:91:a8:0b:48:87:45:12:
                    96:9f:e9:4b:a2:93:f8:1c:43:49:7f:a0:68:db:29:
                    b8:a2:01:e8:3d:6f:04:57:a8:fa:ff:a5:5f:33:09:
                    27:8f:39:be:19:0d:d8:5d:32:dd:c8:04:b2:40:d7:
                    60:7d:8e:dc:8f:13:f1:e3:da:c2:e6:e0:82:f4:48:
                    41:98:26:42:62:7e:ab:b0:c2:69:85:28:6c:7b:9b:
                    ac:09:0b:66:fe:53:04:d7:64:fc:2c:df:0d:37:28:
                    2d:6f:24:e2:0e:d5:35:8f:73:e5:0b:7b:83:e5:40:
                    68:57:ae:a1:86:e3:bb:51:53:f5:fb:e6:26:67:df:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:03:4C:61:37:C3:FA:1C:5D:CB:78:8E:5A:3C:C9:7D:67:6D:04
            X509v3 Authority Key Identifier:
                keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:52:93:17:85:98:bb:1b:47:cb:83:05:f2:86:e0:52:b7:
         fe:68:59:a3:fb:6e:7d:9c:7a:cb:70:d3:d6:98:2e:ad:39:79:
         62:4c:de:21:5a:97:57:3c:5f:6d:18:a0:69:f7:de:3e:9c:02:
         1b:36:3a:be:e8:db:e9:0d:94:cd:8b:8a:a4:26:fe:15:16:2b:
         58:5e:4f:ab:29:1c:12:44:68:c9:4d:52:e7:bb:0a:e3:e2:23:
         91:cb:9f:75:ee:ab:0d:d9:ae:4f:ad:f3:c2:10:60:ed:10:06:
         e6:10:bb:8e:23:b7:15:ab:78:44:26:22:09:c6:9e:e9:e0:38:
         70:9d:bf:1e:ed:d8:6b:b0:95:9d:03:39:09:bb:84:f3:03:ce:
         64:99:d4:88:c6:05:7f:3d:47:ad:82:7d:77:a0:20:e5:d9:f6:
         14:79:b0:4a:08:e3:57:e8:8b:b8:6b:fe:8a:54:75:13:64:cd:
         6c:55:8e:56:d4:9a:24:0c:8c:0e:ee:81:a3:16:c5:d8:02:4d:
         58:aa:68:e2:51:b5:9a:d4:c3:cb:6b:7d:9b:9b:f1:85:a1:60:
         7f:15:23:8e:c3:03:71:e2:1c:36:08:9d:e8:f4:6c:83:42:df:
         83:24:ec:4b:73:69:1b:df:6b:f1:de:a4:a7:26:60:4a:81:12:
         d0:ce:f3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOJvKXvtx230TjbUiheWSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1
NWQ4ZGIwHhcNMjUxMjExMTYwMzEyWhcNMjUxMjEyMTYwMzEyWjAzMTEwLwYDVQQD
Eyg0OGE5MDM0YzYxMzdjM2ZhMWM1ZGNiNzg4ZTVhM2NjOTdkNjc2ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwArcF6/iGkBU8CprBfGU/hRlLTz9
qBCxvESmyuYSBBb1n1cTu1rcotR4ZI4O+kIMfiu9DtIcSceHHeRX2kDpWvTuTkvl
2Q9Bz8n3UNmLyMhjuJwzADzyLG4NovdgCQGdbfw4HkTo1z6ITgUYwN5B8jnq9m5N
c5ee92Y+pcjblpGoC0iHRRKWn+lLopP4HENJf6Bo2ym4ogHoPW8EV6j6/6VfMwkn
jzm+GQ3YXTLdyASyQNdgfY7cjxPx49rC5uCC9EhBmCZCYn6rsMJphShse5usCQtm
/lME12T8LN8NNygtbyTiDtU1j3PlC3uD5UBoV66hhuO7UVP1++YmZ99mQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEipA0xhN8P6HF3LeI5aPMl9Z20EMB8GA1UdIwQY
MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt
MTJiMmJjNTgwNTNhLzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh
LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzhSkxeF
mLsbR8uDBfKG4FK3/mhZo/tufZx6y3DT1pgurTl5YkzeIVqXVzxfbRigaffePpwC
GzY6vujb6Q2UzYuKpCb+FRYrWF5PqykcEkRoyU1S57sK4+Ijkcufde6rDdmuT63z
whBg7RAG5hC7jiO3Fat4RCYiCcae6eA4cJ2/Hu3Ya7CVnQM5CbuE8wPOZJnUiMYF
fz1HrYJ9d6Ag5dn2FHmwSgjjV+iLuGv+ilR1E2TNbFWOVtSaJAyMDu6BoxbF2AJN
WKpo4lG1mtTDy2t9m5vxhaFgfxUjjsMDceIcNgid6PRsg0LfgyTsS3NpG99r8d6k
pyZgSoES0M7z/g==
-----END CERTIFICATE-----
Generated at Thu Dec 11 23:55:09 2025 by rpki-client