This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          O5GoKz17N5cJckY56dbvf4dEJuvIT7pbbWVUalfzTgw=
Subject key identifier:   7A:83:EE:3E:52:27:45:AA:8D:78:4C:71:1C:EC:5F:06:C8:16:81:E0
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019AF20909E06BCDA64849E4E3B791C01E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0F7E
Signing time:             Sat 06 Dec 2025 05:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:09 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: Pq0KuuwX/M2i6a5ahwZaOmmyM/bRRJAyRHHODdKC2o8=)
                          2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
                          3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:09:e0:6b:cd:a6:48:49:e4:e3:b7:91:c0:1e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Dec  6 05:01:09 2025 GMT
            Not After : Dec  7 05:01:09 2025 GMT
        Subject: CN=7a83ee3e522745aa8d784c711cec5f06c81681e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:e1:d9:a9:6e:a5:64:93:7a:e7:0a:b7:58:
                    d7:8b:7c:33:14:b1:95:b4:40:76:91:7e:b9:2a:98:
                    b2:3d:68:2a:2b:ab:b5:a9:2e:c7:f5:b8:42:70:38:
                    e4:68:84:6f:71:f4:97:72:c4:26:ab:07:ce:bf:32:
                    c2:9f:5d:23:af:f6:1f:49:eb:f9:a2:57:cd:8c:38:
                    7f:b0:d5:d8:f8:01:0e:8a:14:56:89:6c:57:15:f8:
                    59:ec:19:48:bb:08:96:c1:4c:e4:47:ad:6f:66:e3:
                    69:1b:27:5a:b0:96:2c:d9:42:0f:8b:d6:8f:46:01:
                    bd:b0:ae:64:fd:b8:5d:e9:0b:15:4e:51:91:dd:e2:
                    15:c2:88:7e:fd:ec:12:85:0e:ac:14:72:91:5b:63:
                    76:c3:ca:d0:a6:d6:8a:e6:56:9d:c0:10:12:7e:5f:
                    1b:f3:45:89:71:52:27:db:0b:bd:5c:1d:68:2d:80:
                    81:da:40:52:86:c8:bf:69:81:cd:3b:3f:6d:1b:41:
                    f7:5d:be:6a:0e:72:3a:fb:a5:73:67:b0:3d:35:10:
                    ec:96:5d:93:e6:26:43:64:56:ec:e2:e4:f4:c6:41:
                    71:7b:d9:19:8d:e1:60:5a:e6:0f:87:04:78:1f:be:
                    af:e1:58:e3:b9:a3:cf:71:3d:c9:d0:ad:66:f3:8c:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:EE:3E:52:27:45:AA:8D:78:4C:71:1C:EC:5F:06:C8:16:81:E0
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:02:e1:2f:60:32:1f:e8:52:8a:d2:8a:07:91:77:da:f0:5b:
         62:f5:00:86:9d:7d:52:22:3b:9f:04:6a:e3:85:32:e7:7c:58:
         bf:0a:c3:01:50:56:12:1b:c9:b6:6e:59:12:8f:24:ff:5d:16:
         f9:56:74:8a:01:4c:13:a0:43:b7:7b:62:ff:db:23:ed:d9:c3:
         5f:34:f2:55:6e:6b:2c:1a:80:8c:5a:ac:e2:88:36:3a:95:64:
         f0:4d:78:b5:d2:4d:5e:1b:f2:a2:a7:29:2a:f9:0b:f2:d6:63:
         14:2c:60:eb:29:19:03:56:89:cc:7e:b0:60:97:48:32:a7:38:
         0a:84:46:67:de:a6:04:33:b3:47:6c:3a:74:51:5e:7d:8c:05:
         68:cc:c3:b3:0a:ea:95:d7:a1:64:96:ca:e6:cb:c7:48:e1:42:
         0b:bb:93:fa:ac:e2:28:b1:f6:ca:67:c3:8a:1f:8c:40:76:4c:
         5e:40:f9:f6:35:00:db:2e:4a:0b:d8:89:19:6b:9a:e4:02:28:
         57:c5:4e:3c:a7:42:a2:e7:b6:ac:77:88:52:59:13:5f:cb:cc:
         68:74:72:70:d5:ce:24:ab:6a:d4:d2:3f:7d:c7:dc:91:a5:38:
         af:ed:d6:97:16:41:7a:07:61:22:25:34:41:2a:34:1a:b4:70:
         3f:b8:e3:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCQnga82mSEnk47eRwB5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDBlNWViYTJmOGJmYzhmZThmZTU2Y2M4OGE0Mjg5NjUy
MzkwYmEwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD
Eyg3YTgzZWUzZTUyMjc0NWFhOGQ3ODRjNzExY2VjNWYwNmM4MTY4MWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7h2alupWSTeucKt1jXi3wzFLGV
tEB2kX65KpiyPWgqK6u1qS7H9bhCcDjkaIRvcfSXcsQmqwfOvzLCn10jr/YfSev5
olfNjDh/sNXY+AEOihRWiWxXFfhZ7BlIuwiWwUzkR61vZuNpGydasJYs2UIPi9aP
RgG9sK5k/bhd6QsVTlGR3eIVwoh+/ewShQ6sFHKRW2N2w8rQptaK5ladwBASfl8b
80WJcVIn2wu9XB1oLYCB2kBShsi/aYHNOz9tG0H3Xb5qDnI6+6VzZ7A9NRDsll2T
5iZDZFbs4uT0xkFxe9kZjeFgWuYPhwR4H76v4VjjuaPPcT3J0K1m84yFdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqD7j5SJ0WqjXhMcRzsXwbIFoHgMB8GA1UdIwQY
MBaAFPRA5eui+L/I/o/lbMiKQollI5C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2Yt
MDBiOTJjMWMxZWY0LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2YtMDBiOTJjMWMxZWY0
LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEALhL2Ay
H+hSitKKB5F32vBbYvUAhp19UiI7nwRq44Uy53xYvwrDAVBWEhvJtm5ZEo8k/10W
+VZ0igFME6BDt3ti/9sj7dnDXzTyVW5rLBqAjFqs4og2OpVk8E14tdJNXhvyoqcp
KvkL8tZjFCxg6ykZA1aJzH6wYJdIMqc4CoRGZ96mBDOzR2w6dFFefYwFaMzDswrq
ldehZJbK5svHSOFCC7uT+qziKLH2ymfDih+MQHZMXkD59jUA2y5KC9iJGWua5AIo
V8VOPKdCoue2rHeIUlkTX8vMaHRycNXOJKtq1NI/fcfckaU4r+3WlxZBegdhIiU0
QSo0GrRwP7jjgg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:23:17 2025 by rpki-client