This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File:                     Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier:          7OJQmCIwef5w38K/DWlphjIywBSV50hA80ELq/QUdpg=
Subject key identifier:   64:99:9A:51:82:DD:2F:EE:DC:61:9B:6A:A0:24:65:81:24:3B:F9:78
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer:       /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial:       019B36B4C656175DB40EE8BFB36947039DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 13:02:55 +0000
Manifest this update:     Fri 19 Dec 2025 13:02:55 +0000
Manifest next update:     Sat 20 Dec 2025 13:02:55 +0000
Files and hashes:         1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: OALpcbifcjxPKhvFUHJ5/dqvZFt8dZti6FlhtuBRhn4=)
                          2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
                          3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
                          4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b4:c6:56:17:5d:b4:0e:e8:bf:b3:69:47:03:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
        Validity
            Not Before: Dec 19 13:02:55 2025 GMT
            Not After : Dec 20 13:02:55 2025 GMT
        Subject: CN=64999a5182dd2feedc619b6aa0246581243bf978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:b5:ee:90:b5:41:89:aa:ba:bd:c0:20:f9:
                    9b:42:ea:9d:66:d3:18:ac:0b:0c:72:22:57:8e:10:
                    ef:f6:e7:d3:a5:f4:4a:d6:68:03:80:9c:1f:b5:63:
                    e2:9c:45:45:75:82:1d:0b:81:96:b0:e7:6f:37:cd:
                    7f:8b:78:4f:ec:b0:10:ab:23:3d:ad:e3:99:62:08:
                    69:a4:af:e9:77:fa:81:a5:57:91:96:9c:6d:ce:0f:
                    ac:9d:1f:50:b0:fa:c7:2a:18:66:8d:37:da:c3:e7:
                    62:ec:48:3d:2a:25:3f:6c:2a:d3:31:57:6e:ff:47:
                    14:b5:ba:cb:4b:e6:3b:9c:3a:7f:9b:6e:19:c5:fa:
                    a3:4b:49:71:9e:95:f4:ec:dc:90:d7:2a:bc:1d:bb:
                    ea:ff:af:b3:8e:2b:dc:ce:11:34:f1:59:80:3b:14:
                    c2:d7:ca:81:c9:3d:e1:ba:8a:5f:03:5b:39:20:d6:
                    1b:f0:0c:55:ef:20:d9:16:17:3a:9f:1e:27:37:82:
                    95:d3:bb:49:45:89:ca:17:c7:39:aa:30:d0:de:38:
                    91:61:76:4b:90:95:61:09:e9:a6:26:c6:03:2c:21:
                    dd:25:a5:9c:90:b3:c3:09:77:aa:1c:68:c2:40:af:
                    fa:6a:2b:30:86:9c:07:de:ac:e0:a7:64:a5:eb:02:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:9A:51:82:DD:2F:EE:DC:61:9B:6A:A0:24:65:81:24:3B:F9:78
            X509v3 Authority Key Identifier:
                keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:7e:aa:f8:80:51:42:2b:8e:bf:a9:c1:2f:7b:1f:31:64:
         73:fc:64:09:3c:1a:b4:d9:26:9f:a0:03:50:ea:94:55:3c:8a:
         3d:96:16:8e:f0:58:4c:2f:71:92:2d:92:8c:fb:b0:3a:b7:91:
         be:28:3b:dc:00:46:c3:96:d0:15:3d:02:e9:74:3a:c1:94:be:
         e2:6d:c1:78:ab:97:cd:fb:8b:e6:83:5f:a6:ba:2e:e3:82:71:
         60:70:d3:80:6c:fa:dd:82:40:f6:59:c3:58:51:b9:4e:ba:66:
         16:21:77:b2:e0:53:fb:44:f1:48:bb:cf:eb:f7:dd:d6:91:dd:
         fc:9a:d0:ae:f9:c1:48:26:1d:23:c9:b4:06:5d:c8:c5:ef:b8:
         77:b5:73:77:5b:37:98:ea:f9:b5:32:ae:53:a7:e8:6b:76:ba:
         26:85:25:eb:81:84:06:23:55:b5:da:c0:e5:96:8c:97:7b:02:
         70:35:c1:2c:c3:28:71:7c:e3:e7:79:d0:80:14:2e:73:2b:e0:
         04:f9:dc:b0:f2:e1:29:14:34:44:e8:74:ec:16:a7:ab:47:45:
         cd:64:f7:f7:04:14:0f:4e:13:62:97:35:b8:96:0e:f4:14:57:
         cd:24:21:9d:d3:ba:3d:86:85:a5:9f:d6:2c:6c:70:10:23:a1:
         21:02:8f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2tMZWF120Dui/s2lHA538MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YmQzMGFjMzU2MWExZGY3ZmM2YjI5NmJmOWQyOWRkNTU4
MWYxZWUwHhcNMjUxMjE5MTMwMjU1WhcNMjUxMjIwMTMwMjU1WjAzMTEwLwYDVQQD
Eyg2NDk5OWE1MTgyZGQyZmVlZGM2MTliNmFhMDI0NjU4MTI0M2JmOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVy17pC1QYmqur3AIPmbQuqdZtMY
rAsMciJXjhDv9ufTpfRK1mgDgJwftWPinEVFdYIdC4GWsOdvN81/i3hP7LAQqyM9
reOZYghppK/pd/qBpVeRlpxtzg+snR9QsPrHKhhmjTfaw+di7Eg9KiU/bCrTMVdu
/0cUtbrLS+Y7nDp/m24ZxfqjS0lxnpX07NyQ1yq8Hbvq/6+zjivczhE08VmAOxTC
18qByT3huopfA1s5INYb8AxV7yDZFhc6nx4nN4KV07tJRYnKF8c5qjDQ3jiRYXZL
kJVhCemmJsYDLCHdJaWckLPDCXeqHGjCQK/6aiswhpwH3qzgp2Sl6wLXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSZmlGC3S/u3GGbaqAkZYEkO/l4MB8GA1UdIwQY
MBaAFAa9MKw1YaHff8aylr+dKd1VgfHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hMDFhYjUtODNjMC00ZTE5LTkwOTMt
NzkxNzViMTUxYTUyLzEvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hMDFhYjUtODNjMC00ZTE5LTkwOTMtNzkxNzViMTUxYTUy
LzEvQnIwd3JEVmhvZDlfeHJLV3Y1MHAzVldCOGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl35+qviA
UUIrjr+pwS97HzFkc/xkCTwatNkmn6ADUOqUVTyKPZYWjvBYTC9xki2SjPuwOreR
vig73ABGw5bQFT0C6XQ6wZS+4m3BeKuXzfuL5oNfprou44JxYHDTgGz63YJA9lnD
WFG5TrpmFiF3suBT+0TxSLvP6/fd1pHd/JrQrvnBSCYdI8m0Bl3Ixe+4d7Vzd1s3
mOr5tTKuU6foa3a6JoUl64GEBiNVtdrA5ZaMl3sCcDXBLMMocXzj53nQgBQucyvg
BPncsPLhKRQ0ROh07Banq0dFzWT39wQUD04TYpc1uJYO9BRXzSQhndO6PYaFpZ/W
LGxwECOhIQKPXg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:53:48 2025 by rpki-client