This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          tNba1tVuPdJGHV30FSM9cSE6CKzIMjM4O4BvDanHvPA=
Subject key identifier:   68:94:CA:1E:9A:29:D3:91:A3:AB:C9:38:4D:A6:70:53:0D:88:26:B7
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019AF68AB9064D8573823C965B683A29528A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          08AC
Signing time:             Sun 07 Dec 2025 02:01:17 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:17 +0000
Manifest next update:     Mon 08 Dec 2025 02:01:17 +0000
Files and hashes:         1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
                          2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
                          3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: TvpaRnXXSOg66CP76ZDC0BntubdO6JNG9U1OUAyCVOw=)
                          4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:b9:06:4d:85:73:82:3c:96:5b:68:3a:29:52:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Dec  7 02:01:17 2025 GMT
            Not After : Dec  8 02:01:17 2025 GMT
        Subject: CN=6894ca1e9a29d391a3abc9384da670530d8826b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:a9:a0:45:9e:c0:5a:22:49:59:04:67:09:
                    2e:46:d3:c8:8f:61:cc:a2:e7:ee:7d:73:3f:c4:05:
                    76:3c:9d:e4:d9:1c:db:7f:34:2a:07:82:b8:28:f7:
                    cd:14:63:4a:fa:d1:2c:e2:69:ce:a6:6d:98:9f:dc:
                    a1:53:ec:f7:15:cb:57:d5:1b:9b:87:54:ce:3e:53:
                    f6:e0:61:eb:4d:07:0d:b9:80:4f:77:f5:a6:33:1c:
                    4b:82:15:3c:fb:f5:91:3e:27:7c:2b:0a:09:3f:b0:
                    d1:8d:a0:53:2b:63:92:48:fc:c9:81:72:8f:71:5f:
                    07:74:e6:b8:6b:ae:3b:aa:05:4b:2d:a9:6e:b1:2a:
                    a3:1c:f2:47:1c:ac:a7:f9:36:e5:10:5c:3d:04:41:
                    0b:31:98:ea:e6:14:e6:91:d1:d8:8d:8c:20:63:c3:
                    40:47:a3:de:95:dd:7d:64:73:38:13:bc:dc:ea:32:
                    1c:09:dd:27:e1:10:ae:ec:cf:e4:0f:1a:85:59:56:
                    36:84:7d:64:90:66:bb:f3:0e:a6:95:01:57:b2:2c:
                    28:8b:f7:a4:05:6f:9e:c9:32:2d:06:5f:22:c3:23:
                    d3:5f:73:0a:33:43:2d:f6:61:c4:3b:79:b1:4d:08:
                    c5:37:cf:cd:42:f1:f4:a4:91:6b:4b:f0:57:29:15:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:94:CA:1E:9A:29:D3:91:A3:AB:C9:38:4D:A6:70:53:0D:88:26:B7
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:21:4a:23:c7:08:97:9b:5e:8b:fb:f5:16:92:28:49:6b:
         d0:fa:c4:df:03:f6:2d:4c:3e:11:69:24:a9:28:95:57:9d:92:
         34:dc:db:91:73:bc:e1:b1:9a:20:c7:ba:2a:3d:f1:47:31:16:
         54:71:20:b2:b1:f4:87:41:54:f1:ab:06:3d:91:87:a9:ed:77:
         a5:64:9a:c2:fd:5f:25:b9:42:af:41:7a:c1:f2:6d:d5:61:61:
         40:ff:26:3b:cf:15:50:1d:ad:5e:2a:59:99:73:fe:59:8b:4f:
         26:8e:60:b3:71:75:9c:1f:c3:36:f9:8d:be:65:00:79:04:c3:
         6a:57:4f:4c:ce:6d:c3:e1:b1:26:fd:1f:81:de:e2:40:29:67:
         34:af:67:63:df:5b:82:05:e2:d2:36:4c:69:8f:56:f5:2c:f2:
         1a:69:45:d3:25:12:88:99:ae:7e:51:db:a7:81:3a:56:0c:81:
         db:1b:fc:95:20:c5:92:62:9c:d4:ae:6d:4d:0b:32:7f:09:74:
         81:e8:d9:42:cd:8b:e5:7e:c5:6d:62:a1:53:04:50:ec:34:2b:
         8e:f6:b0:bf:de:bb:5c:3a:9f:f0:35:b6:63:03:0a:c1:38:e1:
         a0:b6:ca:65:f1:75:ed:e0:eb:65:31:61:8d:09:b9:ed:8b:55:
         b4:50:44:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2irkGTYVzgjyWW2g6KVKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjUxMjA3MDIwMTE3WhcNMjUxMjA4MDIwMTE3WjAzMTEwLwYDVQQD
Eyg2ODk0Y2ExZTlhMjlkMzkxYTNhYmM5Mzg0ZGE2NzA1MzBkODgyNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qpoEWewFoiSVkEZwkuRtPIj2HM
oufufXM/xAV2PJ3k2RzbfzQqB4K4KPfNFGNK+tEs4mnOpm2Yn9yhU+z3FctX1Rub
h1TOPlP24GHrTQcNuYBPd/WmMxxLghU8+/WRPid8KwoJP7DRjaBTK2OSSPzJgXKP
cV8HdOa4a647qgVLLalusSqjHPJHHKyn+TblEFw9BEELMZjq5hTmkdHYjYwgY8NA
R6Peld19ZHM4E7zc6jIcCd0n4RCu7M/kDxqFWVY2hH1kkGa78w6mlQFXsiwoi/ek
BW+eyTItBl8iwyPTX3MKM0Mt9mHEO3mxTQjFN8/NQvH0pJFrS/BXKRXvTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiUyh6aKdORo6vJOE2mcFMNiCa3MB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwUhSiPH
CJebXov79RaSKElr0PrE3wP2LUw+EWkkqSiVV52SNNzbkXO84bGaIMe6Kj3xRzEW
VHEgsrH0h0FU8asGPZGHqe13pWSawv1fJblCr0F6wfJt1WFhQP8mO88VUB2tXipZ
mXP+WYtPJo5gs3F1nB/DNvmNvmUAeQTDaldPTM5tw+GxJv0fgd7iQClnNK9nY99b
ggXi0jZMaY9W9SzyGmlF0yUSiJmuflHbp4E6VgyB2xv8lSDFkmKc1K5tTQsyfwl0
gejZQs2L5X7FbWKhUwRQ7DQrjvawv967XDqf8DW2YwMKwTjhoLbKZfF17eDrZTFh
jQm57YtVtFBEoQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:41:54 2025 by rpki-client