This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File:                     8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier:          NmKcjzygImlRcCvPJC4/ZNISWf/OCthx/0gGJweIuxc=
Subject key identifier:   B3:2C:05:39:FD:C6:A8:CF:ED:2D:B4:F6:FC:1C:4D:7F:1E:5D:DC:4F
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer:       /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial:       019AF12CE66382699CE04A776DE74389B678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number:          020B
Signing time:             Sat 06 Dec 2025 01:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:42 +0000
Files and hashes:         1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: +3keST+Lc08EvN5M4hV8LL07COEj6jbnkpBzjJgxB68=)
                          2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
                          3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:e6:63:82:69:9c:e0:4a:77:6d:e7:43:89:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
        Validity
            Not Before: Dec  6 01:00:42 2025 GMT
            Not After : Dec  7 01:00:42 2025 GMT
        Subject: CN=b32c0539fdc6a8cfed2db4f6fc1c4d7f1e5ddc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:47:d6:1f:6b:b5:e8:65:0d:36:d5:36:43:
                    62:e7:f0:f7:0e:84:9a:69:8d:97:90:a8:58:48:60:
                    46:2d:3f:40:90:8b:53:c1:92:c3:58:cf:f9:ee:d1:
                    07:a3:1d:0d:d4:b9:51:19:d8:4f:94:30:2f:47:4e:
                    9d:8d:3b:28:e6:5d:11:7c:0a:3a:27:c4:20:ab:ff:
                    69:81:f2:83:ac:ed:a7:ec:2f:50:d1:1d:d0:c0:3b:
                    b3:e2:ae:09:61:d0:e2:c3:4c:5c:9b:df:6b:d6:df:
                    72:83:15:c9:a6:20:90:09:85:ad:b5:3a:6a:ae:5c:
                    e3:1c:70:60:29:f2:00:ea:3e:bc:f0:64:65:a0:fe:
                    10:11:88:ee:c4:13:c4:65:fa:a2:3d:5c:1c:65:44:
                    c2:f2:48:75:17:d9:a2:a1:4a:32:37:6f:6c:ec:c6:
                    c7:e5:9f:09:5f:2b:cb:75:be:12:e8:80:f2:18:25:
                    2a:df:65:6f:57:47:8c:4b:92:88:98:9b:94:f2:64:
                    de:e3:3e:1a:fc:0d:d5:a5:4e:29:c8:8f:c6:2f:4a:
                    99:75:92:16:8d:c2:33:fe:89:70:02:12:10:7a:18:
                    4d:f9:0e:ca:7d:5d:43:16:c4:1d:b8:d1:4b:b0:38:
                    99:8e:4d:06:58:bc:21:fb:e8:a1:66:43:45:30:b7:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:05:39:FD:C6:A8:CF:ED:2D:B4:F6:FC:1C:4D:7F:1E:5D:DC:4F
            X509v3 Authority Key Identifier:
                keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:5b:29:08:97:d0:a9:36:a5:89:0a:14:b7:b5:14:7b:fe:
         d7:da:ab:3e:ec:20:7f:74:bc:a8:f0:5c:c8:0e:b6:9f:d2:50:
         ba:88:7c:b2:28:21:5d:83:1a:04:bf:69:0c:1c:b9:e4:90:b7:
         e0:05:2d:95:35:75:09:5e:6e:d4:88:97:a1:46:aa:94:ba:8b:
         6c:df:32:e5:bc:1f:a1:09:d3:f2:be:e4:60:b7:25:69:7e:be:
         e1:75:89:36:f1:30:e9:d5:c9:97:28:53:85:a6:ea:d0:59:e2:
         1d:d6:67:1c:e2:c4:71:d2:6f:df:c4:cb:75:78:ab:01:7a:6e:
         d3:a5:a9:51:45:06:f3:e8:7d:dc:44:6a:b8:af:81:5b:d9:f1:
         ff:9f:9b:06:9b:e3:69:0f:91:6c:42:c8:e9:27:d0:d0:4a:3e:
         95:37:01:c3:75:27:87:df:1e:73:fa:c3:60:56:c5:46:0c:f6:
         71:00:d2:3f:44:36:bc:df:62:82:ab:c4:6b:12:13:0d:8f:7d:
         ba:2e:d9:40:50:3c:39:df:58:fe:95:f2:2e:9a:f4:3e:93:60:
         02:40:63:ba:42:2c:6e:28:a5:60:b4:81:9b:ec:32:6b:5f:1a:
         e3:41:11:9d:56:be:50:55:b3:93:0d:f6:00:4f:29:a3:bd:d0:
         f2:cb:a3:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLOZjgmmc4Ep3bedDibZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD
EyhiMzJjMDUzOWZkYzZhOGNmZWQyZGI0ZjZmYzFjNGQ3ZjFlNWRkYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJVH1h9rtehlDTbVNkNi5/D3DoSa
aY2XkKhYSGBGLT9AkItTwZLDWM/57tEHox0N1LlRGdhPlDAvR06djTso5l0RfAo6
J8Qgq/9pgfKDrO2n7C9Q0R3QwDuz4q4JYdDiw0xcm99r1t9ygxXJpiCQCYWttTpq
rlzjHHBgKfIA6j688GRloP4QEYjuxBPEZfqiPVwcZUTC8kh1F9mioUoyN29s7MbH
5Z8JXyvLdb4S6IDyGCUq32VvV0eMS5KImJuU8mTe4z4a/A3VpU4pyI/GL0qZdZIW
jcIz/olwAhIQehhN+Q7KfV1DFsQduNFLsDiZjk0GWLwh++ihZkNFMLei3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMsBTn9xqjP7S209vwcTX8eXdxPMB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffhbKQiX
0Kk2pYkKFLe1FHv+19qrPuwgf3S8qPBcyA62n9JQuoh8sighXYMaBL9pDBy55JC3
4AUtlTV1CV5u1IiXoUaqlLqLbN8y5bwfoQnT8r7kYLclaX6+4XWJNvEw6dXJlyhT
habq0FniHdZnHOLEcdJv38TLdXirAXpu06WpUUUG8+h93ERquK+BW9nx/5+bBpvj
aQ+RbELI6SfQ0Eo+lTcBw3Unh98ec/rDYFbFRgz2cQDSP0Q2vN9igqvEaxITDY99
ui7ZQFA8Od9Y/pXyLpr0PpNgAkBjukIsbiilYLSBm+wya18a40ERnVa+UFWzkw32
AE8po73Q8sujSw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:10 2025 by rpki-client