This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          JyNnq+AgEoCjD+QF0/fr9EkKr0FcQZtIjRCaht8y7Co=
Subject key identifier:   DE:EE:42:38:B8:D1:35:64:8C:EB:86:E6:96:64:BA:95:FF:95:D0:79
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       019AF7661C3EDCE50F39E247C588E139CD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          1765
Signing time:             Sun 07 Dec 2025 06:00:55 +0000
Manifest this update:     Sun 07 Dec 2025 06:00:55 +0000
Manifest next update:     Mon 08 Dec 2025 06:00:55 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: XI5vVZrB3NhLcuvBUcvXOWyR2GKs8ojZ4/tnf80IpHo=)
                          2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:66:1c:3e:dc:e5:0f:39:e2:47:c5:88:e1:39:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Dec  7 06:00:55 2025 GMT
            Not After : Dec  8 06:00:55 2025 GMT
        Subject: CN=deee4238b8d135648ceb86e69664ba95ff95d079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:ed:74:d7:d2:6b:4b:a0:3d:ee:d8:37:1f:
                    c4:9b:c8:d0:6d:ed:90:dd:d0:fb:84:4f:55:75:78:
                    6f:d9:76:ef:81:57:5a:cf:ad:b4:cc:18:87:01:e8:
                    81:d9:7f:4b:9f:ab:6e:5b:e8:91:17:d3:7c:c4:79:
                    87:1a:32:a4:ad:1b:8e:9d:c8:c0:fc:ed:84:28:6c:
                    4e:db:74:7d:dd:66:39:6c:b2:1d:15:0e:d1:b5:09:
                    c0:15:7e:43:88:cf:70:7d:93:74:53:83:98:30:a1:
                    6a:0b:5c:12:bb:77:65:65:c1:14:2b:bb:73:25:ba:
                    ff:b5:43:d2:d3:1b:be:c6:e2:f4:42:b9:93:f9:d4:
                    01:fd:9d:c4:b6:f1:a9:79:b5:0c:95:5a:7a:c8:8f:
                    16:66:bf:0f:61:b2:02:f6:ad:c3:03:94:27:7b:03:
                    a4:c3:a1:1f:e4:27:72:05:68:6a:ec:1a:cb:0f:3a:
                    4c:af:8b:49:6f:9b:ce:b9:d7:ff:98:6f:0a:02:c2:
                    b5:70:9c:be:fb:95:70:09:38:4d:b0:81:7e:da:67:
                    18:bc:05:d6:38:97:a8:df:85:d4:d6:d0:4f:0f:46:
                    cf:fb:d0:94:c7:41:86:fe:0d:12:4c:23:04:4d:85:
                    9e:93:a9:79:5b:83:43:41:20:b1:53:b0:c7:9e:f2:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EE:42:38:B8:D1:35:64:8C:EB:86:E6:96:64:BA:95:FF:95:D0:79
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:f6:96:88:dd:f2:08:54:f8:97:e4:c7:f8:b3:90:15:ab:
         88:9a:fb:fa:10:bc:41:25:30:4b:88:e6:2a:64:bf:bf:f1:84:
         a1:6c:39:82:9a:2c:0a:0f:51:bd:34:57:4b:ab:b0:17:68:8e:
         a5:60:32:89:54:9c:a5:10:f1:c9:33:5d:2c:e4:51:66:38:95:
         a6:5a:1d:0d:dd:84:02:19:77:e7:34:13:d4:cd:90:30:71:a7:
         f4:14:a8:7b:36:ce:08:96:97:ec:5d:2d:c0:01:03:fc:9d:a0:
         90:84:b6:75:c8:b0:8c:e4:21:df:2b:b3:66:e1:38:12:d6:92:
         a8:21:9c:95:92:1e:77:54:2f:5f:68:d5:48:2c:c7:3e:6b:7c:
         54:b7:fd:9d:be:54:92:ef:d5:2d:d5:0d:46:a6:41:5a:8e:7a:
         de:5a:7c:f8:30:78:5a:ef:5c:c1:81:e5:e0:cc:1f:67:ca:0c:
         76:1e:6d:6d:50:05:84:80:15:72:95:56:77:6a:f7:a5:f3:98:
         7e:5f:3b:15:b0:21:86:75:dd:64:93:00:42:47:bc:d3:66:59:
         58:55:4e:4f:b2:75:d5:9c:c7:e4:e3:58:70:d6:05:b5:2a:9e:
         03:6c:b3:4a:19:10:7e:e8:48:2c:74:9a:bb:ca:a1:8a:25:6e:
         18:1d:f2:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr3Zhw+3OUPOeJHxYjhOc1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi
YTk3ZjMwHhcNMjUxMjA3MDYwMDU1WhcNMjUxMjA4MDYwMDU1WjAzMTEwLwYDVQQD
EyhkZWVlNDIzOGI4ZDEzNTY0OGNlYjg2ZTY5NjY0YmE5NWZmOTVkMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G7tdNfSa0ugPe7YNx/Em8jQbe2Q
3dD7hE9VdXhv2XbvgVdaz620zBiHAeiB2X9Ln6tuW+iRF9N8xHmHGjKkrRuOncjA
/O2EKGxO23R93WY5bLIdFQ7RtQnAFX5DiM9wfZN0U4OYMKFqC1wSu3dlZcEUK7tz
Jbr/tUPS0xu+xuL0QrmT+dQB/Z3EtvGpebUMlVp6yI8WZr8PYbIC9q3DA5QnewOk
w6Ef5CdyBWhq7BrLDzpMr4tJb5vOudf/mG8KAsK1cJy++5VwCThNsIF+2mcYvAXW
OJeo34XU1tBPD0bP+9CUx0GG/g0STCMETYWek6l5W4NDQSCxU7DHnvLmPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7uQji40TVkjOuG5pZkupX/ldB5MB8GA1UdIwQY
MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt
ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm
LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFT2lojd
8ghU+Jfkx/izkBWriJr7+hC8QSUwS4jmKmS/v/GEoWw5gposCg9RvTRXS6uwF2iO
pWAyiVScpRDxyTNdLORRZjiVplodDd2EAhl35zQT1M2QMHGn9BSoezbOCJaX7F0t
wAED/J2gkIS2dciwjOQh3yuzZuE4EtaSqCGclZIed1QvX2jVSCzHPmt8VLf9nb5U
ku/VLdUNRqZBWo563lp8+DB4Wu9cwYHl4MwfZ8oMdh5tbVAFhIAVcpVWd2r3pfOY
fl87FbAhhnXdZJMAQke802ZZWFVOT7J11ZzH5ONYcNYFtSqeA2yzShkQfuhILHSa
u8qhiiVuGB3yKg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:47:29 2025 by rpki-client