This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File:                     mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier:          j8VfEYOSSNBtKygOjqwnvuKQJcR5neS6scnHZ39BaGI=
Subject key identifier:   65:3D:F9:C0:A7:5C:16:7C:CF:91:E0:E9:B2:71:1C:52:DB:38:BC:16
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer:       /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial:       019B345687F434F0A08AD3F1E7B4421CFBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number:          04F9
Signing time:             Fri 19 Dec 2025 02:00:44 +0000
Manifest this update:     Fri 19 Dec 2025 02:00:44 +0000
Manifest next update:     Sat 20 Dec 2025 02:00:44 +0000
Files and hashes:         1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
                          2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: 2V956JzWYRSxWGCDFo+z/KBV6pxo+96yPNxBQIOUHo8=)
                          3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:56:87:f4:34:f0:a0:8a:d3:f1:e7:b4:42:1c:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
        Validity
            Not Before: Dec 19 02:00:44 2025 GMT
            Not After : Dec 20 02:00:44 2025 GMT
        Subject: CN=653df9c0a75c167ccf91e0e9b2711c52db38bc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:e1:ed:bf:4d:25:88:53:4e:57:f8:ce:6d:
                    f4:26:24:aa:5a:ee:67:47:28:4b:7f:93:d7:3d:93:
                    24:43:52:d7:43:eb:f1:41:09:c0:65:80:87:12:c4:
                    d9:f0:27:2c:d5:f0:af:e1:0d:f0:6a:de:77:be:fe:
                    aa:94:2a:e9:97:9b:c5:5e:09:27:6c:a5:d6:6b:9a:
                    8e:91:8a:5e:0a:85:d5:d8:af:11:58:fb:be:c3:02:
                    2c:30:4a:b8:fa:a9:0e:96:4f:d4:06:bf:7a:73:9f:
                    aa:74:67:1a:65:ce:df:50:dd:06:b4:09:7c:d6:ad:
                    0a:57:66:e2:7e:31:e3:f3:84:ef:56:fd:9d:43:f4:
                    45:03:09:e3:1a:39:32:38:95:61:81:9b:98:71:34:
                    8b:77:6f:d5:56:d1:7a:02:4c:da:b9:29:e5:1c:3b:
                    cc:4c:48:de:df:df:c6:5a:64:63:69:98:dd:28:89:
                    80:56:93:52:0a:e8:5e:6d:dd:cf:05:a4:b4:b9:a3:
                    e4:8b:b4:d5:ef:62:88:f8:9b:72:65:8b:bc:b1:1b:
                    c5:29:a3:96:c1:d7:3b:c4:57:54:5e:55:fc:79:7f:
                    c2:6a:50:2a:e2:b7:e3:79:96:a9:a3:e1:19:03:2d:
                    e4:63:ae:c1:bf:46:69:84:f5:44:b3:3d:41:8f:91:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3D:F9:C0:A7:5C:16:7C:CF:91:E0:E9:B2:71:1C:52:DB:38:BC:16
            X509v3 Authority Key Identifier:
                keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:10:99:4c:db:e5:20:30:d2:b6:6c:02:f1:75:97:42:21:c1:
         91:a3:11:dd:59:05:35:38:f6:47:81:57:24:30:61:15:a8:c8:
         fb:e6:85:b2:58:63:13:64:68:cd:7c:92:83:82:e8:86:6a:cd:
         a4:88:ce:f7:9a:90:20:0a:cd:f1:e2:a4:75:54:06:bd:7d:72:
         97:08:32:db:8c:aa:3e:72:72:79:14:c4:fc:68:4f:b7:db:22:
         8e:5e:17:45:eb:de:08:4d:ce:8c:23:dc:f1:28:cf:2d:b8:57:
         c2:36:bc:ba:8c:61:fd:e8:3e:27:88:c8:c2:80:50:36:ca:35:
         3d:1d:84:d7:15:75:21:c9:b6:5d:f2:4e:e9:9e:15:df:30:8b:
         7e:f4:bf:ad:cf:fc:29:9b:ea:a1:89:83:89:19:f9:9f:ad:33:
         db:d8:c4:07:e3:da:d3:7b:b0:51:6d:e1:5e:7b:84:bc:70:b1:
         c6:1f:fc:2c:c5:9e:c3:d0:fc:00:79:b2:3f:46:34:4d:bd:f7:
         0c:96:05:51:d3:c9:4d:b0:71:73:05:43:b8:8f:c3:6d:44:1e:
         35:c5:71:9c:03:e5:d7:58:7f:a5:c7:69:72:2f:0b:59:d1:19:
         ab:6e:b6:c9:3c:33:f3:25:75:f3:d1:33:c7:17:cd:f4:49:b2:
         29:ab:d5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs0Vof0NPCgitPx57RCHPv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjUxMjE5MDIwMDQ0WhcNMjUxMjIwMDIwMDQ0WjAzMTEwLwYDVQQD
Eyg2NTNkZjljMGE3NWMxNjdjY2Y5MWUwZTliMjcxMWM1MmRiMzhiYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10jh7b9NJYhTTlf4zm30JiSqWu5n
RyhLf5PXPZMkQ1LXQ+vxQQnAZYCHEsTZ8Ccs1fCv4Q3wat53vv6qlCrpl5vFXgkn
bKXWa5qOkYpeCoXV2K8RWPu+wwIsMEq4+qkOlk/UBr96c5+qdGcaZc7fUN0GtAl8
1q0KV2bifjHj84TvVv2dQ/RFAwnjGjkyOJVhgZuYcTSLd2/VVtF6AkzauSnlHDvM
TEje39/GWmRjaZjdKImAVpNSCuhebd3PBaS0uaPki7TV72KI+JtyZYu8sRvFKaOW
wdc7xFdUXlX8eX/CalAq4rfjeZapo+EZAy3kY67Bv0ZphPVEsz1Bj5HSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU9+cCnXBZ8z5Hg6bJxHFLbOLwWMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhCZTNvl
IDDStmwC8XWXQiHBkaMR3VkFNTj2R4FXJDBhFajI++aFslhjE2RozXySg4LohmrN
pIjO95qQIArN8eKkdVQGvX1ylwgy24yqPnJyeRTE/GhPt9sijl4XReveCE3OjCPc
8SjPLbhXwja8uoxh/eg+J4jIwoBQNso1PR2E1xV1Icm2XfJO6Z4V3zCLfvS/rc/8
KZvqoYmDiRn5n60z29jEB+Pa03uwUW3hXnuEvHCxxh/8LMWew9D8AHmyP0Y0Tb33
DJYFUdPJTbBxcwVDuI/DbUQeNcVxnAPl11h/pcdpci8LWdEZq262yTwz8yV189Ez
xxfN9EmyKavVOg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:23:30 2025 by rpki-client