This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          +gDnWDpr6S1+9/KZh7rYkTwXqXu8nkJj1wgoXBgYroc=
Subject key identifier:   55:C2:28:70:E7:85:D1:1D:F2:91:A6:FB:CC:C3:69:4A:C7:B6:DB:72
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       019B311EB8AE88AB099F9354C4A03D809EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          0976
Signing time:             Thu 18 Dec 2025 11:00:55 +0000
Manifest this update:     Thu 18 Dec 2025 11:00:55 +0000
Manifest next update:     Fri 19 Dec 2025 11:00:55 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: LyJMh8vzhfCuZ21rrh+qhj7e9HFfv6BscQZUXNDYO3w=)
                          2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:1e:b8:ae:88:ab:09:9f:93:54:c4:a0:3d:80:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Dec 18 11:00:55 2025 GMT
            Not After : Dec 19 11:00:55 2025 GMT
        Subject: CN=55c22870e785d11df291a6fbccc3694ac7b6db72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:75:d5:a5:b1:1a:9f:54:57:76:38:ff:d6:
                    99:dc:d6:ad:6b:06:18:ab:a3:1d:39:63:82:58:b1:
                    d4:44:81:50:00:af:bb:72:1c:d9:73:70:70:21:90:
                    41:fd:c7:86:89:cc:4c:59:53:a6:0c:e4:62:a7:71:
                    6a:2a:43:cc:3f:36:ac:55:82:d5:89:d4:e5:5b:43:
                    0d:86:4c:4b:f2:a8:d7:9d:1d:20:fe:24:5f:55:18:
                    37:ae:fe:5e:a9:98:e4:9e:b7:1f:a6:0e:da:a7:52:
                    f0:65:45:0f:f8:03:86:b3:84:d0:40:35:6f:0b:9b:
                    7e:ef:27:6c:57:b8:06:c9:65:04:d1:16:d9:25:31:
                    81:ae:42:f8:ea:04:a0:a1:48:b5:33:ed:e4:7a:d9:
                    b1:53:b3:58:07:af:2f:3d:b1:cd:8f:9b:49:62:11:
                    7a:a7:33:99:f3:fb:f0:7b:b6:27:c6:1d:6c:e0:31:
                    20:36:36:49:1c:c7:04:34:ae:f6:54:ef:85:cd:67:
                    ff:13:54:c5:9b:c4:0b:23:4c:8a:c8:91:4b:04:e0:
                    11:1c:4b:12:3d:59:2d:4e:3c:99:d6:f4:a4:82:ba:
                    7e:2f:76:e2:e6:d3:4f:10:d9:5e:4f:a3:dd:8b:55:
                    8e:55:69:e8:f9:37:37:36:eb:b8:58:0f:d3:2b:0f:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:28:70:E7:85:D1:1D:F2:91:A6:FB:CC:C3:69:4A:C7:B6:DB:72
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:36:b2:af:14:ff:4a:ae:8b:a6:9c:6a:14:b7:f8:36:c5:
         fb:af:7b:0b:3d:ff:07:1f:13:c3:22:c7:0f:2d:af:9e:f8:61:
         ed:43:24:a1:81:d9:34:44:9b:fb:80:fd:e8:fd:bf:a4:a1:fe:
         d3:e9:ea:60:06:65:ee:f0:ff:4c:38:ce:7e:58:38:29:82:97:
         3a:b1:7b:de:03:8e:b1:d6:3f:f9:ef:bb:e6:a3:12:e0:cd:b7:
         79:9c:24:1c:00:ab:9f:0d:0d:a7:08:ee:94:d8:01:37:73:55:
         d7:26:c8:8f:55:1a:87:b8:43:8b:a5:12:d2:e0:a4:f4:a8:49:
         b7:0a:d9:ec:83:bc:40:e6:b0:3f:f2:8b:6d:8c:af:5d:99:14:
         42:3d:05:59:db:57:0b:2c:1e:41:b0:26:07:07:5c:e0:b3:54:
         d4:ce:c1:be:a9:5d:d8:bf:9e:7c:7d:14:a3:e1:71:88:b8:b5:
         71:b9:57:2f:d1:56:2e:ab:9d:e1:3e:2c:ec:be:6d:99:fe:ad:
         a9:f7:a1:01:d6:85:cd:05:e3:8c:9e:64:9d:fe:fb:95:b0:22:
         28:9f:34:a7:89:56:03:b1:65:ce:50:6d:6b:41:df:43:40:48:
         7b:5f:13:70:19:54:c7:fd:d0:73:55:45:eb:65:e0:34:84:b8:
         0a:a2:5d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsxHriuiKsJn5NUxKA9gJ6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTBmOTliY2RjY2Q3ZmZlNzJiZDM1YzM0NGJjZDAzMmZm
NzRmNzMwHhcNMjUxMjE4MTEwMDU1WhcNMjUxMjE5MTEwMDU1WjAzMTEwLwYDVQQD
Eyg1NWMyMjg3MGU3ODVkMTFkZjI5MWE2ZmJjY2MzNjk0YWM3YjZkYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8l11aWxGp9UV3Y4/9aZ3NatawYY
q6MdOWOCWLHURIFQAK+7chzZc3BwIZBB/ceGicxMWVOmDORip3FqKkPMPzasVYLV
idTlW0MNhkxL8qjXnR0g/iRfVRg3rv5eqZjknrcfpg7ap1LwZUUP+AOGs4TQQDVv
C5t+7ydsV7gGyWUE0RbZJTGBrkL46gSgoUi1M+3ketmxU7NYB68vPbHNj5tJYhF6
pzOZ8/vwe7Ynxh1s4DEgNjZJHMcENK72VO+FzWf/E1TFm8QLI0yKyJFLBOARHEsS
PVktTjyZ1vSkgrp+L3bi5tNPENleT6Pdi1WOVWno+Tc3Nuu4WA/TKw8l0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXCKHDnhdEd8pGm+8zDaUrHtttyMB8GA1UdIwQY
MBaAFDHg+ZvNzNf/5yvTXDRLzQMv909zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUt
ZDVkMzdhYTliNjA0LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUtZDVkMzdhYTliNjA0
LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD82sq8U
/0qui6acahS3+DbF+697Cz3/Bx8TwyLHDy2vnvhh7UMkoYHZNESb+4D96P2/pKH+
0+nqYAZl7vD/TDjOflg4KYKXOrF73gOOsdY/+e+75qMS4M23eZwkHACrnw0Npwju
lNgBN3NV1ybIj1Uah7hDi6US0uCk9KhJtwrZ7IO8QOawP/KLbYyvXZkUQj0FWdtX
CyweQbAmBwdc4LNU1M7Bvqld2L+efH0Uo+FxiLi1cblXL9FWLqud4T4s7L5tmf6t
qfehAdaFzQXjjJ5knf77lbAiKJ80p4lWA7FlzlBta0HfQ0BIe18TcBlUx/3Qc1VF
62XgNIS4CqJduQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 20:30:52 2025 by rpki-client