This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          iVQ1RzyqewpL4OBKnR1HPt31yPYXZjF45EXEmGlpLzw=
Subject key identifier:   1B:85:DD:00:98:79:C4:60:5D:BA:72:2A:80:5F:F4:0E:AC:91:0F:BF
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019B61D454E33FF03AEF33C385D3BFD8C2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          17C6
Signing time:             Sat 27 Dec 2025 22:01:03 +0000
Manifest this update:     Sat 27 Dec 2025 22:01:03 +0000
Manifest next update:     Sun 28 Dec 2025 22:01:03 +0000
Files and hashes:         1: 5axqmBu68SWPthXHgZ7-ufRF7t4.roa (hash: LaVG/k9wDk1fSbPLPYvcgmtjwuS4h1Egzlo7UIwt1h0=)
                          2: Ce8ARkA4IMdSJfA3iQkeDsLWpmA.roa (hash: aPACdMylakeiCBnW2vGcgKKrR6BCif2F2hfa2zLHonM=)
                          3: M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa (hash: gy6FwOKBXTaLdVYVnEAs4hHwzg7SeC5YExBV8UoGhlY=)
                          4: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: VZ6Eva/4YiCAqtsJCzMPYifIk3gUJk0KmdKZnR4/oAA=)
                          5: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (hash: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=)
                          6: hHpgnkHBn7jNnoYxbotvE9vrOHs.roa (hash: vwUiUKTRStlpxfIc77utAGpduIi8mu5ntxt1cIjkh3M=)
                          7: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
                          8: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:61:d4:54:e3:3f:f0:3a:ef:33:c3:85:d3:bf:d8:c2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Dec 27 22:01:03 2025 GMT
            Not After : Dec 28 22:01:03 2025 GMT
        Subject: CN=1b85dd009879c4605dba722a805ff40eac910fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:dc:25:32:75:d3:f7:d6:7b:35:9a:72:37:
                    73:38:91:9f:6b:e5:e6:a8:7e:be:d9:26:b1:4d:70:
                    f2:18:da:6c:50:ac:3c:83:7a:d2:ca:6b:fc:59:fd:
                    db:36:46:04:a3:af:d0:48:80:c2:00:da:2e:1c:56:
                    9d:70:2a:14:ae:b4:b3:73:9a:ac:02:ca:c8:2e:e0:
                    51:c2:3d:5d:7d:4a:4c:6b:ac:74:e0:6b:09:d4:51:
                    eb:eb:4a:42:f4:67:d5:52:c0:b4:56:dd:60:65:ce:
                    35:39:12:ab:02:c2:64:6e:46:e7:82:48:3d:b5:d4:
                    ce:d9:37:7e:d2:5b:26:3d:5a:30:26:c6:9b:7e:62:
                    8a:ad:c0:0c:14:ae:86:fd:af:47:20:12:6c:a7:81:
                    03:0d:0e:99:85:8a:b3:3c:8f:b4:78:47:9a:9b:d4:
                    df:90:14:7c:41:ab:ca:c8:0b:ba:55:c1:e8:ef:82:
                    35:4b:4a:4c:86:d1:e9:cd:4a:50:1a:38:f8:42:b1:
                    08:44:1b:83:d2:6c:82:91:3c:e6:e7:aa:91:a9:19:
                    6f:c2:50:8e:e2:6e:ea:2c:70:7e:e0:0b:72:1f:4b:
                    a8:29:4b:04:6c:f2:1f:1d:06:6c:2b:e8:8d:26:a6:
                    52:16:cc:a2:bd:05:a0:31:e4:3d:db:d5:c8:71:57:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:DD:00:98:79:C4:60:5D:BA:72:2A:80:5F:F4:0E:AC:91:0F:BF
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:a4:58:85:e8:b5:c3:92:34:c9:fb:e2:af:83:5f:51:77:
         c7:a3:7f:0d:cf:5f:db:c4:bc:1a:62:e7:b8:02:30:80:a7:2b:
         d3:a1:a2:b2:91:1f:38:a2:c4:4e:ee:b7:4c:f9:da:46:99:3d:
         ca:f2:16:b1:94:ff:3a:ee:7f:8a:7e:48:49:f9:e3:f1:6d:c8:
         00:58:0f:02:27:46:4c:ce:56:5f:5b:55:68:9b:23:ca:e8:32:
         31:61:86:13:8c:12:a4:3c:e1:41:16:32:3e:9f:2c:63:fe:08:
         aa:3f:32:27:f6:03:f9:ed:e9:bc:f9:55:4a:e8:47:06:49:1c:
         2f:d4:af:e8:2c:6b:3b:4d:bc:db:55:9b:4e:a4:9c:b3:01:15:
         ff:41:a3:83:45:7f:2e:d9:b5:74:8e:f0:04:a0:6c:09:df:49:
         db:ba:8c:4d:e9:7e:76:58:4f:5a:fc:11:f4:01:f8:8d:99:bd:
         f8:57:53:10:e4:21:a9:84:9d:c5:21:cb:3d:14:be:9f:95:a2:
         f7:89:c8:6a:57:80:f9:06:e6:8d:b0:71:fd:c3:46:b4:38:7d:
         bc:d9:b5:e7:32:63:1e:2f:ce:89:aa:92:19:5e:87:4b:2d:ed:
         a8:cd:d5:5b:e6:26:5b:ab:72:c0:65:df:75:39:ce:a8:2a:22:
         c8:5c:3e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZth1FTjP/A67zPDhdO/2MK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjUxMjI3MjIwMTAzWhcNMjUxMjI4MjIwMTAzWjAzMTEwLwYDVQQD
EygxYjg1ZGQwMDk4NzljNDYwNWRiYTcyMmE4MDVmZjQwZWFjOTEwZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1szcJTJ10/fWezWacjdzOJGfa+Xm
qH6+2SaxTXDyGNpsUKw8g3rSymv8Wf3bNkYEo6/QSIDCANouHFadcCoUrrSzc5qs
AsrILuBRwj1dfUpMa6x04GsJ1FHr60pC9GfVUsC0Vt1gZc41ORKrAsJkbkbngkg9
tdTO2Td+0lsmPVowJsabfmKKrcAMFK6G/a9HIBJsp4EDDQ6ZhYqzPI+0eEeam9Tf
kBR8QavKyAu6VcHo74I1S0pMhtHpzUpQGjj4QrEIRBuD0myCkTzm56qRqRlvwlCO
4m7qLHB+4AtyH0uoKUsEbPIfHQZsK+iNJqZSFsyivQWgMeQ929XIcVc+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuF3QCYecRgXbpyKoBf9A6skQ+/MB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCykWIXo
tcOSNMn74q+DX1F3x6N/Dc9f28S8GmLnuAIwgKcr06GispEfOKLETu63TPnaRpk9
yvIWsZT/Ou5/in5ISfnj8W3IAFgPAidGTM5WX1tVaJsjyugyMWGGE4wSpDzhQRYy
Pp8sY/4Iqj8yJ/YD+e3pvPlVSuhHBkkcL9Sv6CxrO02821WbTqScswEV/0Gjg0V/
Ltm1dI7wBKBsCd9J27qMTel+dlhPWvwR9AH4jZm9+FdTEOQhqYSdxSHLPRS+n5Wi
94nIaleA+QbmjbBx/cNGtDh9vNm15zJjHi/OiaqSGV6HSy3tqM3VW+YmW6tywGXf
dTnOqCoiyFw+qg==
-----END CERTIFICATE-----
Generated at Sun Dec 28 03:17:11 2025 by rpki-client