This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File:                     2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier:          IMRWk0RUYntHzNWRIsNdRUWjLzwidHmD+m1JssyRcRc=
Subject key identifier:   62:31:07:49:21:4B:09:BE:DB:D6:6A:19:1B:9B:DF:D1:46:CC:6F:7C
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer:       /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial:       019AF12CE3094EE08581FAE6A0A89D6F2B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 01:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:42 +0000
Files and hashes:         1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: gYALyIpRTZO7o7vfRemV7DZ7BQnEQeMJFBfR5mZRO9M=)
                          2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
                          3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:e3:09:4e:e0:85:81:fa:e6:a0:a8:9d:6f:2b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
        Validity
            Not Before: Dec  6 01:00:42 2025 GMT
            Not After : Dec  7 01:00:42 2025 GMT
        Subject: CN=62310749214b09bedbd66a191b9bdfd146cc6f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:08:74:12:af:b6:49:a9:7e:cc:70:3d:15:
                    2f:31:15:0c:f9:34:73:6f:43:71:05:59:2b:f0:00:
                    90:b5:49:03:05:ce:22:70:1c:bd:68:f0:4b:9d:b9:
                    0a:0a:29:31:c6:bb:62:89:6f:47:28:d3:3f:67:11:
                    01:25:f4:d0:be:d1:84:5a:2a:2d:a7:57:c7:8b:65:
                    71:8d:93:d2:38:a5:e0:af:61:3b:bf:ef:fe:bf:80:
                    58:13:19:72:78:ce:47:05:93:2c:c0:7d:ea:fe:ca:
                    02:a3:74:3d:f4:8b:8f:07:9c:25:eb:15:05:c7:85:
                    4f:66:9e:62:84:4e:62:c4:f3:51:f2:0b:00:85:07:
                    cf:e0:9a:b0:a7:ba:0c:e4:54:cd:ae:d2:f7:32:d5:
                    03:f3:e1:8f:fe:93:01:18:c1:20:be:87:4e:00:6e:
                    37:69:e7:bc:bc:2c:03:c3:47:5e:41:7e:6e:be:71:
                    d4:6e:9b:a0:fe:45:19:df:a3:65:1a:b6:c0:bd:d7:
                    5d:01:ac:3f:a7:56:70:d5:6b:5e:e3:50:f0:16:21:
                    a5:3b:ee:4a:f1:de:b2:e4:ed:e6:a1:3f:5b:58:61:
                    f9:e9:23:44:d6:38:f7:7d:7f:6a:a9:f8:72:74:82:
                    c2:76:80:11:d4:a9:05:8f:31:ec:44:41:0b:e4:4c:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:31:07:49:21:4B:09:BE:DB:D6:6A:19:1B:9B:DF:D1:46:CC:6F:7C
            X509v3 Authority Key Identifier:
                keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:75:43:50:de:50:12:a1:fe:0d:b0:95:47:47:e8:ef:de:
         7b:72:8b:22:44:53:cc:18:41:04:1b:9f:f6:c8:fd:a6:17:ea:
         f4:a6:89:75:73:81:1d:22:82:69:56:92:ba:72:f0:38:30:df:
         7e:da:95:57:24:f0:9a:3c:3c:e6:19:37:9b:aa:ef:d2:7f:e7:
         de:90:2d:be:2c:8a:c8:d8:29:4e:a5:a4:a4:89:cf:f0:da:99:
         6e:95:23:2a:15:c8:f9:47:c2:e2:3c:c8:4a:87:10:bb:8a:a5:
         06:13:de:4e:c5:36:f2:49:a6:42:46:a1:87:f3:88:63:2c:2a:
         89:61:e6:cf:51:eb:f4:79:60:54:63:07:9b:07:31:ad:09:19:
         fa:db:b9:a1:9f:d8:8d:7b:0e:85:77:1b:d5:91:66:0c:f1:b2:
         96:4c:99:38:4e:54:0f:28:ab:da:fa:1c:81:a2:d5:82:76:ba:
         9c:1f:2a:c7:23:cb:79:af:fc:9e:1d:ba:93:8d:62:8a:39:6c:
         0c:c7:f2:30:65:e1:f3:11:25:26:33:6f:3e:52:17:fb:39:47:
         d2:2c:9f:7b:e1:81:fc:31:bc:a5:9e:33:50:89:3b:d6:28:80:
         a9:0e:bc:17:9b:2d:a1:af:b6:61:97:d3:a7:6c:67:10:f0:6d:
         1f:fb:35:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLOMJTuCFgfrmoKidbys6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD
Eyg2MjMxMDc0OTIxNGIwOWJlZGJkNjZhMTkxYjliZGZkMTQ2Y2M2ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6oIdBKvtkmpfsxwPRUvMRUM+TRz
b0NxBVkr8ACQtUkDBc4icBy9aPBLnbkKCikxxrtiiW9HKNM/ZxEBJfTQvtGEWiot
p1fHi2VxjZPSOKXgr2E7v+/+v4BYExlyeM5HBZMswH3q/soCo3Q99IuPB5wl6xUF
x4VPZp5ihE5ixPNR8gsAhQfP4Jqwp7oM5FTNrtL3MtUD8+GP/pMBGMEgvodOAG43
aee8vCwDw0deQX5uvnHUbpug/kUZ36NlGrbAvdddAaw/p1Zw1Wte41DwFiGlO+5K
8d6y5O3moT9bWGH56SNE1jj3fX9qqfhydILCdoAR1KkFjzHsREEL5ExI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIxB0khSwm+29ZqGRub39FGzG98MB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOJ1Q1De
UBKh/g2wlUdH6O/ee3KLIkRTzBhBBBuf9sj9phfq9KaJdXOBHSKCaVaSunLwODDf
ftqVVyTwmjw85hk3m6rv0n/n3pAtviyKyNgpTqWkpInP8NqZbpUjKhXI+UfC4jzI
SocQu4qlBhPeTsU28kmmQkahh/OIYywqiWHmz1Hr9HlgVGMHmwcxrQkZ+tu5oZ/Y
jXsOhXcb1ZFmDPGylkyZOE5UDyir2vocgaLVgna6nB8qxyPLea/8nh26k41iijls
DMfyMGXh8xElJjNvPlIX+zlH0iyfe+GB/DG8pZ4zUIk71iiAqQ68F5stoa+2YZfT
p2xnEPBtH/s1NA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:57 2025 by rpki-client