This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File:                     Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier:          E4CgdIJY5fKK6o9w2Wtp62/vUmePdveo3Fd8NnTyNxk=
Subject key identifier:   60:C4:EF:0E:F1:98:4F:21:9E:5C:AC:2C:02:0A:D1:86:E5:21:93:3B
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer:       /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial:       019B2852DEB7D2B110F86909C2B4C17051C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number:          1307
Signing time:             Tue 16 Dec 2025 18:01:18 +0000
Manifest this update:     Tue 16 Dec 2025 18:01:18 +0000
Manifest next update:     Wed 17 Dec 2025 18:01:18 +0000
Files and hashes:         1: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: Qq26+qbsd5/+J3K1LedaNJumEMp5/Zn3q4npiSmEjqo=)
                          2: T5aiE1hBQ7IRSCWrSsHsYtBRcAg.roa (hash: 309chVwaxlsKtPuysVWOW95E7n0FUrlzdRWGLRMTzgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:52:de:b7:d2:b1:10:f8:69:09:c2:b4:c1:70:51:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
        Validity
            Not Before: Dec 16 18:01:18 2025 GMT
            Not After : Dec 17 18:01:18 2025 GMT
        Subject: CN=60c4ef0ef1984f219e5cac2c020ad186e521933b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:4e:c8:a6:88:f9:3a:d2:45:18:6b:d8:41:
                    c0:89:8a:64:2b:66:96:10:93:83:a5:ff:ff:f3:f8:
                    78:1a:ac:72:02:34:a1:e5:77:ac:2b:57:c0:25:4d:
                    68:48:63:ed:90:80:ef:06:3c:d6:fa:d7:35:66:ba:
                    ee:1d:ce:78:36:12:be:fc:f6:71:5f:58:54:36:5a:
                    ab:be:00:1d:3b:93:d7:ee:8e:55:80:0f:22:27:26:
                    dd:f2:d7:32:58:ff:50:fd:3c:f6:f1:9d:e3:a5:a4:
                    20:af:8c:ba:a5:d2:d7:84:e2:28:fb:4e:70:c3:9c:
                    13:ef:9e:2b:89:0b:52:50:c5:e6:f0:e4:1a:05:32:
                    f3:83:d5:8a:8d:7e:c0:d6:ae:d5:b3:48:41:59:ff:
                    f9:c9:1f:c4:5e:2a:9f:f7:59:1d:eb:72:d7:f2:67:
                    b8:1d:e5:7e:0c:61:15:a8:66:2c:48:15:4c:19:06:
                    ae:c2:7c:04:08:e3:f8:b5:38:8b:0d:9c:b0:66:ed:
                    b1:c9:e1:fc:7e:2f:db:5f:29:6d:68:9d:b0:9b:c6:
                    98:ed:5e:67:3b:7c:73:49:cf:cc:d2:ac:47:54:2f:
                    71:d9:0a:7c:38:0d:93:88:c2:1e:ec:ee:35:b5:72:
                    37:43:88:a8:fa:16:95:c2:31:e8:bb:21:94:f0:7c:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:EF:0E:F1:98:4F:21:9E:5C:AC:2C:02:0A:D1:86:E5:21:93:3B
            X509v3 Authority Key Identifier:
                keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:aa:0d:9a:77:8a:6b:8f:bb:b8:20:bc:81:35:26:be:7b:
         2c:9a:be:55:01:41:53:ef:62:8b:bd:f8:cd:96:f0:83:a8:73:
         97:15:b0:e8:bd:ef:3e:e5:d7:bf:1b:e9:d8:fd:40:67:51:8a:
         0d:09:d4:3d:ea:9c:0b:fe:c3:03:18:a0:f4:9e:dd:7f:07:ba:
         52:88:dc:e0:21:1b:31:75:e2:3f:9b:bf:a4:8a:d0:ac:49:86:
         ef:ea:6d:73:c4:a6:9a:5c:70:16:66:96:87:12:05:56:8f:7e:
         2e:f0:d2:6e:23:e9:26:54:81:7a:4b:68:94:2e:72:cf:79:d0:
         c1:01:10:20:da:ec:6a:04:e6:66:2d:5a:5e:09:12:eb:38:65:
         7c:97:fe:2a:61:d8:49:ac:43:40:67:15:fd:98:dd:6c:58:53:
         8f:17:9c:04:08:e5:3f:a7:43:8a:f2:02:28:09:ef:42:51:0f:
         89:97:57:8f:f0:b7:66:9d:9f:04:18:cd:8b:14:dc:5f:2a:85:
         04:d0:e3:bf:d0:48:44:ae:c0:63:d9:2e:11:66:4c:65:1c:bc:
         24:84:34:df:49:9d:1d:74:06:23:46:c9:67:12:33:3f:a4:bf:
         9a:c4:16:80:a7:e8:2c:b5:14:e7:58:bd:24:6e:18:2f:2d:2e:
         e2:16:a1:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsoUt630rEQ+GkJwrTBcFHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZmRlMmFkNzEyM2IzYTg2MDA4MDU4ODA1YmIxMDE2ZjZi
NzNmYjAwHhcNMjUxMjE2MTgwMTE4WhcNMjUxMjE3MTgwMTE4WjAzMTEwLwYDVQQD
Eyg2MGM0ZWYwZWYxOTg0ZjIxOWU1Y2FjMmMwMjBhZDE4NmU1MjE5MzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooxOyKaI+TrSRRhr2EHAiYpkK2aW
EJODpf//8/h4GqxyAjSh5XesK1fAJU1oSGPtkIDvBjzW+tc1ZrruHc54NhK+/PZx
X1hUNlqrvgAdO5PX7o5VgA8iJybd8tcyWP9Q/Tz28Z3jpaQgr4y6pdLXhOIo+05w
w5wT754riQtSUMXm8OQaBTLzg9WKjX7A1q7Vs0hBWf/5yR/EXiqf91kd63LX8me4
HeV+DGEVqGYsSBVMGQauwnwECOP4tTiLDZywZu2xyeH8fi/bXyltaJ2wm8aY7V5n
O3xzSc/M0qxHVC9x2Qp8OA2TiMIe7O41tXI3Q4io+haVwjHouyGU8HwRkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDE7w7xmE8hnlysLAIK0YblIZM7MB8GA1UdIwQY
MBaAFD794q1xI7OoYAgFiAW7EBb2tz+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5Nzct
YzgwZDMzYTI2NTM1LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNjE3OWYtNGJkYS00ODcxLTg5NzctYzgwZDMzYTI2NTM1
LzEvUHYzaXJYRWpzNmhnQ0FXSUJic1FGdmEzUDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6CqDZp3
imuPu7ggvIE1Jr57LJq+VQFBU+9ii734zZbwg6hzlxWw6L3vPuXXvxvp2P1AZ1GK
DQnUPeqcC/7DAxig9J7dfwe6Uojc4CEbMXXiP5u/pIrQrEmG7+ptc8SmmlxwFmaW
hxIFVo9+LvDSbiPpJlSBektolC5yz3nQwQEQINrsagTmZi1aXgkS6zhlfJf+KmHY
SaxDQGcV/ZjdbFhTjxecBAjlP6dDivICKAnvQlEPiZdXj/C3Zp2fBBjNixTcXyqF
BNDjv9BIRK7AY9kuEWZMZRy8JIQ030mdHXQGI0bJZxIzP6S/msQWgKfoLLUU51i9
JG4YLy0u4hahlw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 20:55:07 2025 by rpki-client