This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File:                     rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier:          Y7hGNcYjiwsA4U2kJBrOY6pWkOmLyYCbt3Hl8e08tnE=
Subject key identifier:   92:01:82:93:71:2B:17:19:55:28:7A:06:3B:73:4D:73:F9:A4:67:0C
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer:       /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial:       019B5DC10ADA26AA54383FA48D9FD219B812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number:          06B7
Signing time:             Sat 27 Dec 2025 03:01:30 +0000
Manifest this update:     Sat 27 Dec 2025 03:01:30 +0000
Manifest next update:     Sun 28 Dec 2025 03:01:30 +0000
Files and hashes:         1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
                          2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: xtvwf8D0tAGUU95CQBXdU3itdvmonCYivXp3DtPcVWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:c1:0a:da:26:aa:54:38:3f:a4:8d:9f:d2:19:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
        Validity
            Not Before: Dec 27 03:01:30 2025 GMT
            Not After : Dec 28 03:01:30 2025 GMT
        Subject: CN=92018293712b171955287a063b734d73f9a4670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:8d:3e:de:60:a4:4e:78:7f:a6:9e:fa:6c:
                    9a:1e:e0:41:9f:63:f2:85:6f:e7:ce:92:f6:ce:e3:
                    90:e6:10:22:a0:85:67:08:bd:fe:58:b2:b9:79:ff:
                    f5:46:df:02:ac:76:07:59:fd:cd:74:29:ff:d0:27:
                    4d:23:4a:aa:d4:81:b8:ce:17:43:af:c7:ed:69:60:
                    a3:d9:a0:09:ec:fc:f0:1e:af:a4:2a:3d:5b:2a:fc:
                    de:8a:1f:42:7b:3b:0f:07:d7:c3:c7:07:59:26:23:
                    80:57:66:73:71:47:39:da:70:94:2b:c9:ce:0a:2a:
                    07:48:3b:83:61:27:ec:be:b9:65:00:3b:98:99:69:
                    e7:d1:bc:d5:0c:e1:30:ce:52:82:a1:6b:3d:d3:3c:
                    49:71:e9:6a:55:ed:a1:21:93:fd:c9:01:ee:5c:bb:
                    8a:52:13:26:1b:89:9c:fb:64:59:45:65:5f:70:7b:
                    2b:f4:c1:7a:95:1a:5f:f9:d1:a9:75:a6:7f:09:b2:
                    59:a7:ca:a7:92:39:04:d5:12:43:a8:86:40:57:91:
                    69:a2:05:77:0c:06:88:34:4b:25:58:7c:2b:5a:92:
                    d8:32:09:26:0c:b4:54:dd:c8:d5:8f:6c:49:bf:2b:
                    0a:21:10:2f:d3:19:bd:62:d2:05:3c:78:9f:3e:52:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:01:82:93:71:2B:17:19:55:28:7A:06:3B:73:4D:73:F9:A4:67:0C
            X509v3 Authority Key Identifier:
                keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:19:aa:29:05:40:89:1f:85:81:05:2e:0a:f9:c0:63:21:35:
         65:17:8f:40:7b:b9:3a:59:4f:ce:c2:e8:9f:a7:a3:36:6f:36:
         8a:30:15:ac:9f:38:00:cc:98:d8:4e:86:af:b5:06:bc:53:90:
         a8:32:f8:92:44:00:0c:96:5d:52:66:43:cc:b2:be:c4:9b:10:
         2a:c7:a9:e5:d0:ae:a3:72:03:b9:5b:ff:b9:ef:2a:38:1b:d5:
         2e:e1:96:aa:a1:d6:fa:6b:d0:a7:d4:c5:89:82:8e:8b:94:a6:
         45:91:2c:ae:a0:c9:60:f5:23:1f:20:f8:5f:a4:46:89:dc:df:
         d5:1c:5d:15:10:c4:88:9b:23:1b:0e:13:c9:36:a8:6d:d1:13:
         56:56:69:b2:71:23:4e:10:ba:49:df:bc:4e:a1:16:c6:89:ff:
         1b:e0:cf:f0:85:4e:ec:75:7f:46:1a:44:55:d6:d8:93:30:01:
         f9:69:f4:20:58:54:f5:2b:3a:79:32:02:7a:67:d0:e4:43:42:
         a6:de:85:33:aa:ec:c8:3e:c5:3d:35:b2:39:f9:81:46:43:5d:
         ce:31:ac:61:bc:01:83:cd:a5:f2:90:fb:cc:b3:5c:b0:bb:04:
         5c:ff:90:0f:16:6d:f0:8f:e2:3f:53:de:6d:db:62:81:06:a8:
         99:ea:71:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtdwQraJqpUOD+kjZ/SGbgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj
YTYyZjQwHhcNMjUxMjI3MDMwMTMwWhcNMjUxMjI4MDMwMTMwWjAzMTEwLwYDVQQD
Eyg5MjAxODI5MzcxMmIxNzE5NTUyODdhMDYzYjczNGQ3M2Y5YTQ2NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHmNPt5gpE54f6ae+myaHuBBn2Py
hW/nzpL2zuOQ5hAioIVnCL3+WLK5ef/1Rt8CrHYHWf3NdCn/0CdNI0qq1IG4zhdD
r8ftaWCj2aAJ7PzwHq+kKj1bKvzeih9CezsPB9fDxwdZJiOAV2ZzcUc52nCUK8nO
CioHSDuDYSfsvrllADuYmWnn0bzVDOEwzlKCoWs90zxJcelqVe2hIZP9yQHuXLuK
UhMmG4mc+2RZRWVfcHsr9MF6lRpf+dGpdaZ/CbJZp8qnkjkE1RJDqIZAV5FpogV3
DAaINEslWHwrWpLYMgkmDLRU3cjVj2xJvysKIRAv0xm9YtIFPHifPlLddQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIBgpNxKxcZVSh6BjtzTXP5pGcMMB8GA1UdIwQY
MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt
ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2
LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xmqKQVA
iR+FgQUuCvnAYyE1ZRePQHu5OllPzsLon6ejNm82ijAVrJ84AMyY2E6Gr7UGvFOQ
qDL4kkQADJZdUmZDzLK+xJsQKsep5dCuo3IDuVv/ue8qOBvVLuGWqqHW+mvQp9TF
iYKOi5SmRZEsrqDJYPUjHyD4X6RGidzf1RxdFRDEiJsjGw4TyTaobdETVlZpsnEj
ThC6Sd+8TqEWxon/G+DP8IVO7HV/RhpEVdbYkzAB+Wn0IFhU9Ss6eTICemfQ5ENC
pt6FM6rsyD7FPTWyOfmBRkNdzjGsYbwBg82l8pD7zLNcsLsEXP+QDxZt8I/iP1Pe
bdtigQaomepxlg==
-----END CERTIFICATE-----
Generated at Sat Dec 27 04:24:51 2025 by rpki-client