This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          YJbDkdOrNlZ1NAD7BMDeixRYdf3Wbvc2AK+I3s1/qyM=
Subject key identifier:   FB:B7:C0:63:B0:C0:73:8B:05:3E:FF:23:B2:38:B2:DF:14:0F:3D:42
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       019B19BCD7214CBF81967A74AEA7ABA13ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          0BB9
Signing time:             Sat 13 Dec 2025 22:02:44 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:44 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:44 +0000
Files and hashes:         1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: prW2IiDVa++gHgIogr1jGWAjlm6mfKPW0X+ESDzDD0k=)
                          2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:d7:21:4c:bf:81:96:7a:74:ae:a7:ab:a1:3a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Dec 13 22:02:44 2025 GMT
            Not After : Dec 14 22:02:44 2025 GMT
        Subject: CN=fbb7c063b0c0738b053eff23b238b2df140f3d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:42:46:af:63:5a:7a:bd:84:73:ea:92:50:
                    55:a5:2e:4b:d8:ad:8a:00:b8:0b:47:0f:99:09:d6:
                    1c:c8:cd:d3:3d:be:7a:d2:39:62:c4:22:8a:49:b3:
                    16:e4:e9:4d:08:13:da:8b:33:b6:cd:16:ee:f6:87:
                    4e:6e:fe:13:9a:02:ac:48:ce:2c:cc:ba:9f:6b:c9:
                    9b:40:99:43:da:27:31:98:92:b3:bd:aa:8f:d3:04:
                    47:dd:f4:c9:2b:9d:2f:c0:99:84:3f:36:a5:a8:c0:
                    b6:c9:10:e5:91:e1:21:f8:e9:03:dc:99:1d:b1:71:
                    a1:4b:7f:a1:6a:e1:d2:c2:76:09:74:0f:a9:e2:89:
                    4c:a5:fc:7e:c8:ff:0f:4f:72:42:d3:69:e3:e6:a8:
                    77:98:c0:2e:83:55:2e:07:0b:8f:bb:c4:12:58:8e:
                    c1:d4:25:24:84:d3:f0:48:49:1e:9d:a3:aa:aa:f7:
                    63:d9:32:f0:97:18:d7:4a:ec:76:14:63:64:6d:30:
                    ed:57:df:46:e7:e4:51:2e:d4:64:73:a0:d1:6c:c5:
                    a3:f1:d4:00:c6:d0:30:3d:8e:c5:d8:4b:9d:e1:f8:
                    80:8b:1e:91:3c:ed:6a:8f:a2:7b:1b:f6:3d:52:9f:
                    f7:ce:f1:df:03:9c:f0:e9:7f:f5:38:fa:a7:ab:8d:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:C0:63:B0:C0:73:8B:05:3E:FF:23:B2:38:B2:DF:14:0F:3D:42
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:f0:c3:4a:60:f4:b3:ad:89:30:4b:5c:35:be:a4:ee:4a:
         d9:c3:fe:4a:43:ca:3b:f1:9d:fe:01:ac:5a:0f:60:4d:91:77:
         37:2c:bb:a6:1b:b6:c3:75:67:2e:6f:99:a4:fe:50:35:eb:bd:
         ab:ac:0f:73:3a:c9:45:5e:ab:38:98:89:6f:55:76:05:72:ba:
         5f:cc:ca:e7:9f:00:fc:40:de:bd:60:38:3e:41:78:56:f6:20:
         7f:24:31:48:64:07:57:f2:9f:c5:8d:00:07:cd:36:e8:8c:d1:
         97:32:0b:f0:a5:73:a5:90:55:d6:73:96:06:ec:8b:e3:32:f2:
         1b:8e:b3:6f:8d:5d:27:08:8a:ce:33:83:d0:02:5a:51:26:09:
         14:db:d6:6d:1c:18:83:36:4a:a9:5a:df:2f:f5:2b:62:1f:4f:
         5c:8e:47:72:2f:2a:e3:5b:1d:a7:19:82:8d:f0:36:c9:d7:86:
         c6:b1:7d:aa:96:77:a1:53:07:07:3c:a2:fe:46:61:bd:1a:7d:
         69:52:3b:83:53:37:42:99:a4:82:0e:2c:b1:a9:89:44:98:f7:
         6d:46:df:8e:5e:32:5a:b6:ba:24:48:69:6c:8a:5f:c2:c2:d7:
         25:11:b7:3b:34:25:db:7d:c8:c2:56:ef:bd:71:a3:f8:1b:78:
         26:d8:77:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsZvNchTL+Blnp0rqeroTrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjUxMjEzMjIwMjQ0WhcNMjUxMjE0MjIwMjQ0WjAzMTEwLwYDVQQD
EyhmYmI3YzA2M2IwYzA3MzhiMDUzZWZmMjNiMjM4YjJkZjE0MGYzZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnABCRq9jWnq9hHPqklBVpS5L2K2K
ALgLRw+ZCdYcyM3TPb560jlixCKKSbMW5OlNCBPaizO2zRbu9odObv4TmgKsSM4s
zLqfa8mbQJlD2icxmJKzvaqP0wRH3fTJK50vwJmEPzalqMC2yRDlkeEh+OkD3Jkd
sXGhS3+hauHSwnYJdA+p4olMpfx+yP8PT3JC02nj5qh3mMAug1UuBwuPu8QSWI7B
1CUkhNPwSEkenaOqqvdj2TLwlxjXSux2FGNkbTDtV99G5+RRLtRkc6DRbMWj8dQA
xtAwPY7F2Eud4fiAix6RPO1qj6J7G/Y9Up/3zvHfA5zw6X/1OPqnq40JqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu3wGOwwHOLBT7/I7I4st8UDz1CMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE93ww0pg
9LOtiTBLXDW+pO5K2cP+SkPKO/Gd/gGsWg9gTZF3Nyy7phu2w3VnLm+ZpP5QNeu9
q6wPczrJRV6rOJiJb1V2BXK6X8zK558A/EDevWA4PkF4VvYgfyQxSGQHV/KfxY0A
B8026IzRlzIL8KVzpZBV1nOWBuyL4zLyG46zb41dJwiKzjOD0AJaUSYJFNvWbRwY
gzZKqVrfL/UrYh9PXI5Hci8q41sdpxmCjfA2ydeGxrF9qpZ3oVMHBzyi/kZhvRp9
aVI7g1M3Qpmkgg4ssamJRJj3bUbfjl4yWra6JEhpbIpfwsLXJRG3OzQl233Iwlbv
vXGj+Bt4Jth33A==
-----END CERTIFICATE-----
Generated at Sun Dec 14 07:43:15 2025 by rpki-client