This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          Kr4LEpPg7OXEOFN+ZSxqJoYOhofSbAg82CnHpyDlUSo=
Subject key identifier:   EE:04:79:82:C5:2F:EB:63:F1:84:18:36:A3:47:A5:91:AA:E5:46:2D
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       019AF208A313168144D12CD7922596D77775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0EB3
Signing time:             Sat 06 Dec 2025 05:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:43 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: 9R32Kd/oovi88I0IOqCQBhOwRqUgAXr7I3bjDuT07gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:a3:13:16:81:44:d1:2c:d7:92:25:96:d7:77:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Dec  6 05:00:43 2025 GMT
            Not After : Dec  7 05:00:43 2025 GMT
        Subject: CN=ee047982c52feb63f1841836a347a591aae5462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:78:93:a8:08:a0:14:ac:48:4b:bb:69:f3:
                    4d:31:fd:24:9a:d2:46:99:6c:bd:df:07:06:9b:c7:
                    4b:18:4b:4c:4d:6f:03:87:32:9f:f3:ae:5d:7b:79:
                    f1:ae:a9:f8:89:4a:a6:7c:86:2f:22:39:96:e9:68:
                    dc:5c:14:40:2a:6e:28:8e:ca:4f:7b:67:60:97:0d:
                    cd:72:aa:ca:1e:69:60:a9:99:d9:22:45:fc:1a:6f:
                    76:5f:55:d8:24:55:01:76:4a:66:e6:74:f8:eb:b2:
                    ec:cb:10:39:5c:ac:3e:ec:30:d0:c4:29:86:40:57:
                    a5:27:87:4d:e0:12:96:e1:0d:9d:49:0e:4e:03:d4:
                    06:a8:1a:b8:2d:b0:ab:f7:00:04:2d:db:0e:86:1f:
                    8b:9e:e9:f3:cc:83:66:90:4c:54:e3:8e:fe:4b:03:
                    e4:04:cc:85:60:81:0f:71:6e:1d:be:54:c6:13:f5:
                    f0:c1:31:97:26:df:7e:b1:b0:05:c8:0b:b0:0f:fa:
                    6b:75:0d:bf:59:31:92:3d:88:9e:c2:30:b4:16:d3:
                    a8:51:65:1f:15:ca:f7:bf:db:54:ee:43:16:66:04:
                    ca:58:f5:c9:6a:2d:e8:04:37:d7:08:b7:db:d0:a4:
                    00:95:76:2a:ec:bf:89:e9:34:bc:ee:0b:fb:dc:33:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:79:82:C5:2F:EB:63:F1:84:18:36:A3:47:A5:91:AA:E5:46:2D
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:97:0e:53:87:df:6e:6f:9b:32:a8:f2:20:6f:49:43:c4:
         a2:ae:11:cc:3f:90:aa:45:b4:d6:89:fc:ee:54:81:17:76:16:
         77:05:82:9c:29:fd:01:07:1f:7d:1e:27:3f:83:c4:e2:ca:41:
         f9:e5:01:54:ae:91:a6:58:82:62:84:02:d0:6d:60:44:3a:7e:
         10:d9:45:4a:6d:c5:e4:f0:42:6c:f3:f1:ae:80:79:79:f7:65:
         a3:f7:bc:b7:c2:67:75:6f:18:49:4d:a6:f0:4c:86:c5:fe:b3:
         0c:2f:05:6e:99:39:6c:81:ce:9b:ee:c4:fb:c0:bf:35:fb:f0:
         2d:7b:82:98:ec:97:3e:5d:11:4d:b9:91:fc:99:ec:6e:60:f5:
         e0:b1:2c:63:fe:b1:11:2d:81:dc:a8:b2:41:d0:a0:b6:bf:0b:
         48:81:84:5d:64:c0:51:11:72:d0:01:45:f6:7c:13:a8:81:97:
         1f:1f:ee:e2:85:b6:f8:98:fe:94:f8:46:80:81:3c:9d:a5:08:
         58:10:b5:07:75:5f:54:5f:56:3e:95:5a:7f:50:0d:14:d6:a8:
         7b:16:8f:1c:47:ed:7e:66:a5:ca:5c:95:38:57:ab:29:62:fa:
         45:f8:ad:37:79:b5:1d:46:55:e2:04:b9:63:03:7e:5e:c4:b6:
         ca:51:73:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCKMTFoFE0SzXkiWW13d1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1
MTA5NzIwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD
EyhlZTA0Nzk4MmM1MmZlYjYzZjE4NDE4MzZhMzQ3YTU5MWFhZTU0NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAift4k6gIoBSsSEu7afNNMf0kmtJG
mWy93wcGm8dLGEtMTW8DhzKf865de3nxrqn4iUqmfIYvIjmW6WjcXBRAKm4ojspP
e2dglw3NcqrKHmlgqZnZIkX8Gm92X1XYJFUBdkpm5nT467LsyxA5XKw+7DDQxCmG
QFelJ4dN4BKW4Q2dSQ5OA9QGqBq4LbCr9wAELdsOhh+LnunzzINmkExU447+SwPk
BMyFYIEPcW4dvlTGE/XwwTGXJt9+sbAFyAuwD/prdQ2/WTGSPYiewjC0FtOoUWUf
Fcr3v9tU7kMWZgTKWPXJai3oBDfXCLfb0KQAlXYq7L+J6TS87gv73DMR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4EeYLFL+tj8YQYNqNHpZGq5UYtMB8GA1UdIwQY
MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt
ZDNjNTVkNGZkYTlkLzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk
LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvKXDlOH
325vmzKo8iBvSUPEoq4RzD+QqkW01on87lSBF3YWdwWCnCn9AQcffR4nP4PE4spB
+eUBVK6RpliCYoQC0G1gRDp+ENlFSm3F5PBCbPPxroB5efdlo/e8t8JndW8YSU2m
8EyGxf6zDC8Fbpk5bIHOm+7E+8C/NfvwLXuCmOyXPl0RTbmR/JnsbmD14LEsY/6x
ES2B3KiyQdCgtr8LSIGEXWTAURFy0AFF9nwTqIGXHx/u4oW2+Jj+lPhGgIE8naUI
WBC1B3VfVF9WPpVaf1ANFNaoexaPHEftfmalylyVOFerKWL6RfitN3m1HUZV4gS5
YwN+XsS2ylFzRA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:17 2025 by rpki-client