This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File:                     v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier:          z+X96K80Q8GnkjyP/hxO1a+K6Nc3RCigiyHf1sHihIM=
Subject key identifier:   96:04:43:54:00:5A:40:24:26:C9:E1:53:37:3B:CD:8D:5C:40:C9:8F
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer:       /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial:       019AF23F62FF9A999071B0B7920AAFD28FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number:          051E
Signing time:             Sat 06 Dec 2025 06:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:31 +0000
Files and hashes:         1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: YpmUT/reKI1uRVT9SDdMfBrp0b2Tl6+iXf84IqFzaRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:62:ff:9a:99:90:71:b0:b7:92:0a:af:d2:8f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
        Validity
            Not Before: Dec  6 06:00:31 2025 GMT
            Not After : Dec  7 06:00:31 2025 GMT
        Subject: CN=96044354005a402426c9e153373bcd8d5c40c98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:c7:6d:0a:b5:5d:20:51:02:24:c6:ba:8b:
                    26:a1:5f:2c:9b:fc:71:60:ac:09:60:2a:a9:43:30:
                    d5:e1:46:fb:f9:ef:13:15:c7:26:e2:db:d6:9a:4d:
                    24:ee:65:a0:ce:c2:86:35:a4:cf:b6:d4:24:1d:ec:
                    12:86:b5:09:59:76:29:19:d0:ef:c0:d9:08:31:87:
                    8c:cc:75:5f:0a:8d:aa:70:f1:4f:42:df:4d:86:ec:
                    f1:e2:46:ee:c6:9f:fb:22:d6:3c:ec:6d:51:35:de:
                    8f:ca:c3:07:c3:56:61:01:a9:d7:92:af:95:67:d9:
                    fe:8d:0c:7e:af:a6:d9:e8:2a:b1:f0:26:ad:26:5f:
                    59:1e:4d:e8:ff:ee:4a:60:44:ee:21:d5:81:7f:01:
                    4c:dd:1f:cb:89:bd:59:a8:f4:15:94:c6:45:0c:cd:
                    2d:10:c1:c8:e3:89:92:88:ba:56:fa:e9:da:20:d9:
                    12:5c:92:ec:6a:3c:24:8a:91:17:b4:26:53:5c:e1:
                    ad:ab:ca:6e:08:22:c4:da:27:0a:d8:93:e2:43:15:
                    c2:64:19:22:62:a4:9a:20:25:96:32:6a:7e:02:e4:
                    bf:a9:90:e8:64:f2:30:d4:d0:55:5a:bb:69:2e:d7:
                    b6:d5:f5:59:9d:55:3c:3f:8e:7e:a3:4f:b3:4f:b9:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:04:43:54:00:5A:40:24:26:C9:E1:53:37:3B:CD:8D:5C:40:C9:8F
            X509v3 Authority Key Identifier:
                keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:f0:0d:75:8b:b0:d0:6e:bb:45:c6:a8:b0:14:a3:9a:27:
         bc:d3:0b:20:dd:a8:62:85:02:e7:48:81:2d:b2:7a:9a:67:6f:
         05:d1:66:4a:90:b3:88:cd:75:3b:36:14:2c:72:c5:97:63:c1:
         6b:f5:3f:dd:dc:b4:35:c4:64:64:7f:95:96:93:a1:56:09:7a:
         df:d2:4e:0e:a0:73:06:f6:0f:e6:c7:3c:47:94:21:56:b5:91:
         e8:bd:04:c7:c6:50:8b:a0:4a:08:1b:4e:b0:85:61:84:3d:de:
         39:91:84:18:cc:19:fa:26:af:f5:c0:33:0a:d7:4b:62:1a:de:
         78:68:f8:4b:26:7b:4d:1f:17:12:b3:6b:25:db:82:d3:ec:48:
         5f:0e:50:01:76:8d:51:7e:0e:87:c9:69:b7:50:32:5d:3f:b7:
         0f:10:0d:16:51:a9:32:86:e8:0d:54:48:c2:1c:65:ec:60:41:
         5e:78:d4:fc:ba:2f:73:48:2d:44:3f:cb:3d:7f:60:88:ce:6f:
         cf:fa:3c:ef:6a:52:8f:ff:e7:dc:84:8e:6d:96:96:a8:e7:4c:
         43:76:8f:16:5a:af:96:32:ca:95:0e:ad:96:43:26:57:86:e2:
         28:e2:1e:de:b7:d9:74:bf:83:12:25:50:74:6c:35:c2:5d:a4:
         7b:be:96:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP2L/mpmQcbC3kgqv0o+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOWFmYjgyM2YxZjhhZjg3MmU3OTNmMjdiNjRhZGVmOGNk
NGRjMWIwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD
Eyg5NjA0NDM1NDAwNWE0MDI0MjZjOWUxNTMzNzNiY2Q4ZDVjNDBjOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbHbQq1XSBRAiTGuosmoV8sm/xx
YKwJYCqpQzDV4Ub7+e8TFccm4tvWmk0k7mWgzsKGNaTPttQkHewShrUJWXYpGdDv
wNkIMYeMzHVfCo2qcPFPQt9Nhuzx4kbuxp/7ItY87G1RNd6PysMHw1ZhAanXkq+V
Z9n+jQx+r6bZ6Cqx8CatJl9ZHk3o/+5KYETuIdWBfwFM3R/Lib1ZqPQVlMZFDM0t
EMHI44mSiLpW+unaINkSXJLsajwkipEXtCZTXOGtq8puCCLE2icK2JPiQxXCZBki
YqSaICWWMmp+AuS/qZDoZPIw1NBVWrtpLte21fVZnVU8P45+o0+zT7kI9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYEQ1QAWkAkJsnhUzc7zY1cQMmPMB8GA1UdIwQY
MBaAFL+a+4I/H4r4cueT8ntkre+M1NwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5Zjct
MzY2Mjc4NWJhYWFkLzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5ZjctMzY2Mjc4NWJhYWFk
LzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeDwDXWL
sNBuu0XGqLAUo5onvNMLIN2oYoUC50iBLbJ6mmdvBdFmSpCziM11OzYULHLFl2PB
a/U/3dy0NcRkZH+VlpOhVgl639JODqBzBvYP5sc8R5QhVrWR6L0Ex8ZQi6BKCBtO
sIVhhD3eOZGEGMwZ+iav9cAzCtdLYhreeGj4SyZ7TR8XErNrJduC0+xIXw5QAXaN
UX4Oh8lpt1AyXT+3DxANFlGpMoboDVRIwhxl7GBBXnjU/Lovc0gtRD/LPX9giM5v
z/o872pSj//n3ISObZaWqOdMQ3aPFlqvljLKlQ6tlkMmV4biKOIe3rfZdL+DEiVQ
dGw1wl2ke76WZQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:28:15 2025 by rpki-client