This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File:                     auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier:          +odyXZiWQBP5/ZR50ODvDexRcBGavUYqrZW0nQyBrV4=
Subject key identifier:   AF:00:90:D0:43:3D:51:C9:5E:CD:89:AA:7B:35:8F:97:F4:7A:29:2B
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       019B0E5BCE533A9F4635849CAB0244CEF997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number:          1224
Signing time:             Thu 11 Dec 2025 17:00:56 +0000
Manifest this update:     Thu 11 Dec 2025 17:00:56 +0000
Manifest next update:     Fri 12 Dec 2025 17:00:56 +0000
Files and hashes:         1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: aeGdC3r20DvO1JfAXFQ0qSRXfknyd4KERUK4q5csyFE=)
                          2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
                          3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:5b:ce:53:3a:9f:46:35:84:9c:ab:02:44:ce:f9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Dec 11 17:00:56 2025 GMT
            Not After : Dec 12 17:00:56 2025 GMT
        Subject: CN=af0090d0433d51c95ecd89aa7b358f97f47a292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:0d:a7:60:ef:1e:80:58:fb:6d:8c:ea:fa:
                    68:5d:42:71:14:30:fb:d5:1b:85:47:e9:ff:3e:fe:
                    ab:ba:d1:b2:9d:b4:e2:0e:29:a8:ca:64:79:7c:04:
                    a3:8a:0f:a1:84:d4:17:d4:2c:68:49:97:4e:22:6a:
                    d4:ec:25:87:2b:b8:0e:b2:84:8b:3e:c4:d7:a4:13:
                    b9:e2:ed:4b:9b:b3:98:02:5f:60:78:39:eb:31:61:
                    2b:ae:65:b3:9d:2e:07:fe:9a:82:6d:52:91:87:a7:
                    64:55:25:74:3e:9b:55:8e:1b:23:8c:2a:56:f5:a6:
                    fa:08:69:f3:f5:85:ff:7b:e7:13:2f:4f:2a:24:d6:
                    4f:a3:57:88:89:eb:d8:1b:fa:53:02:e3:e8:73:16:
                    9d:18:9c:ed:7a:7b:6c:03:06:53:b9:55:94:2c:dd:
                    60:11:74:69:48:79:67:c3:ff:be:0d:d9:a3:a2:f2:
                    45:2a:2e:dd:15:23:7a:9f:69:30:3f:49:37:34:e7:
                    a7:2c:fb:90:4a:13:6d:6d:c3:3d:5e:08:98:0c:3b:
                    1a:ed:c0:62:b9:87:23:a5:43:c5:90:18:dc:c3:5c:
                    61:07:a0:82:4a:2e:46:01:8c:59:76:b2:5e:2a:a2:
                    c8:5b:c0:1c:fd:18:60:5c:cc:bb:66:2b:d9:bf:57:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:90:D0:43:3D:51:C9:5E:CD:89:AA:7B:35:8F:97:F4:7A:29:2B
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:c0:dd:fb:e3:09:c0:e4:19:d6:86:7d:98:f2:46:ae:25:
         83:e9:88:0c:3e:77:30:db:00:72:9d:02:09:b6:c0:c9:e7:cf:
         c5:a3:3a:34:6b:e0:0f:b7:58:85:d3:a1:08:cc:9f:f4:94:34:
         d8:66:c9:e0:d7:9d:48:91:ca:f9:31:9b:22:ab:0b:42:a2:b4:
         41:27:10:0e:db:27:19:79:c7:a3:ca:93:a0:91:ef:7e:76:82:
         48:49:1c:e9:23:fc:d4:6f:7a:4c:9f:14:2a:76:a6:9e:93:a5:
         e2:8a:7c:ff:6f:f2:c7:e1:c2:92:4f:d2:93:fc:75:c1:a2:42:
         02:d6:c8:69:72:f5:1b:c2:a6:da:74:0a:56:62:2f:6f:ed:72:
         df:21:a5:a1:1a:79:0b:49:c2:c7:6f:0b:e1:34:4d:49:dd:07:
         ce:d0:80:71:d8:aa:2f:4b:ba:d5:49:d3:e3:eb:fd:6a:d5:08:
         72:28:39:ca:71:48:07:b4:e2:99:1c:9a:f4:ef:5b:92:3a:12:
         e7:b3:a4:2f:a9:75:ff:7a:e8:dd:62:f8:45:7f:a1:2e:af:f2:
         75:83:c8:9d:58:b3:0c:4b:f0:30:83:18:bb:7d:0b:a3:84:32:
         a3:a7:0d:0f:01:c8:99:48:36:4a:ad:38:54:6c:6c:c8:7a:e8:
         78:16:06:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOW85TOp9GNYScqwJEzvmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWJhMGYyMzc0MTIwZDU0ZmE1YmNkYzJhOWQyNDUxNDE3
MmVhNmQwHhcNMjUxMjExMTcwMDU2WhcNMjUxMjEyMTcwMDU2WjAzMTEwLwYDVQQD
EyhhZjAwOTBkMDQzM2Q1MWM5NWVjZDg5YWE3YjM1OGY5N2Y0N2EyOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNQNp2DvHoBY+22M6vpoXUJxFDD7
1RuFR+n/Pv6rutGynbTiDimoymR5fASjig+hhNQX1CxoSZdOImrU7CWHK7gOsoSL
PsTXpBO54u1Lm7OYAl9geDnrMWErrmWznS4H/pqCbVKRh6dkVSV0PptVjhsjjCpW
9ab6CGnz9YX/e+cTL08qJNZPo1eIievYG/pTAuPocxadGJztentsAwZTuVWULN1g
EXRpSHlnw/++DdmjovJFKi7dFSN6n2kwP0k3NOenLPuQShNtbcM9XgiYDDsa7cBi
uYcjpUPFkBjcw1xhB6CCSi5GAYxZdrJeKqLIW8Ac/RhgXMy7ZivZv1cwKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8AkNBDPVHJXs2Jqns1j5f0eikrMB8GA1UdIwQY
MBaAFGrroPI3QSDVT6W83CqdJFFBcuptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZmFlOTMtZTc5Zi00OTlmLTkyMDMt
MGZlOGJkNjU1NmQ1LzEvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZmFlOTMtZTc5Zi00OTlmLTkyMDMtMGZlOGJkNjU1NmQ1
LzEvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5PA3fvj
CcDkGdaGfZjyRq4lg+mIDD53MNsAcp0CCbbAyefPxaM6NGvgD7dYhdOhCMyf9JQ0
2GbJ4NedSJHK+TGbIqsLQqK0QScQDtsnGXnHo8qToJHvfnaCSEkc6SP81G96TJ8U
KnamnpOl4op8/2/yx+HCkk/Sk/x1waJCAtbIaXL1G8Km2nQKVmIvb+1y3yGloRp5
C0nCx28L4TRNSd0HztCAcdiqL0u61UnT4+v9atUIcig5ynFIB7TimRya9O9bkjoS
57OkL6l1/3ro3WL4RX+hLq/ydYPInVizDEvwMIMYu30Lo4Qyo6cNDwHImUg2Sq04
VGxsyHroeBYGEQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 01:23:46 2025 by rpki-client