This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          FVzSIe0TdFC7QQCi18rh4BF1C+H+KCKGoNtSkPdKfRc=
Subject key identifier:   06:2A:A1:03:31:47:ED:A1:63:D7:66:AD:48:E5:80:D0:31:71:46:55
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       019AF1D21DF4F1763364230767A098B1630B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          0FF9
Signing time:             Sat 06 Dec 2025 04:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:10 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: pGJ1q2/kcLYxgI/JoB1Tw5mkQLCrn2vSQj3JqPS97dg=)
                          2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:1d:f4:f1:76:33:64:23:07:67:a0:98:b1:63:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Dec  6 04:01:10 2025 GMT
            Not After : Dec  7 04:01:10 2025 GMT
        Subject: CN=062aa1033147eda163d766ad48e580d031714655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:ff:23:ac:74:ae:8c:55:d8:5e:48:db:11:
                    33:0d:60:5e:3f:ea:4c:08:2f:27:5c:17:16:49:66:
                    1c:2e:04:e6:81:f7:43:7f:5b:1f:cd:31:51:ef:6c:
                    f0:fc:d5:6b:c0:15:8d:34:d5:63:48:ed:76:a0:17:
                    34:68:34:31:c6:f5:63:be:3d:70:ab:56:94:6d:eb:
                    0b:c9:0d:cd:60:08:06:2c:f5:f1:90:58:e2:c9:f4:
                    71:9a:d6:0b:f0:ac:7a:e7:a8:ad:f2:09:19:9f:be:
                    93:e5:53:22:74:eb:86:fb:bb:61:68:4d:a0:b3:d7:
                    27:04:c0:81:57:75:4e:35:7f:d4:fd:de:b2:02:55:
                    e7:40:69:f8:62:ee:ea:02:3b:9d:d3:97:7e:b5:89:
                    0b:74:d4:e8:5b:6c:ee:21:0a:b2:81:89:8c:cf:5b:
                    1e:29:42:c0:55:05:49:1c:fa:a9:e9:ec:8c:99:9c:
                    08:92:d1:d9:57:e9:64:8c:35:82:36:86:ac:38:ce:
                    ec:d1:96:f9:15:d3:4b:76:16:1f:8f:ca:ec:c0:39:
                    08:98:5f:b1:7e:bd:2a:83:63:47:89:41:f0:00:a2:
                    6a:77:13:4f:00:e6:79:a4:b6:7f:e9:cd:45:f7:26:
                    5c:b9:bb:14:b3:93:ce:58:07:df:98:ea:af:8a:66:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:A1:03:31:47:ED:A1:63:D7:66:AD:48:E5:80:D0:31:71:46:55
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:54:62:90:f7:46:79:c5:74:0f:85:8b:4f:d3:06:b5:d3:c6:
         db:be:63:3d:68:60:2d:ed:0f:4f:11:fa:f1:ac:10:15:45:4f:
         d4:34:14:60:78:c5:e9:93:67:1f:e2:94:d0:a6:7f:d0:31:82:
         9a:2f:6f:e5:78:09:be:10:ab:3d:18:c9:7e:96:db:ed:4e:7c:
         41:e0:da:cb:53:2a:16:5e:77:93:7d:db:d6:fc:8c:d4:8a:f7:
         76:cf:ab:55:99:5b:48:5f:73:ba:c8:ce:d9:12:ea:30:b5:13:
         2e:b1:01:ba:9c:b9:44:18:20:1a:c4:1b:dc:79:57:c0:ad:b1:
         4f:8d:cb:ee:85:85:7a:4d:32:2f:44:19:b9:f4:7e:e3:59:89:
         5f:43:52:2a:7b:0f:bc:22:87:3c:3e:7b:37:fb:0e:36:ce:00:
         f9:37:93:c6:0d:e3:1a:b7:fc:cb:55:43:f7:66:99:76:e3:15:
         de:5b:1f:1c:36:79:1e:a8:5d:d9:de:c0:0b:0d:af:05:bf:a3:
         a3:e7:d8:4b:6d:cf:5e:a4:03:1b:3e:e7:2b:83:9e:2b:31:49:
         0a:4a:e4:2d:df:9d:b5:c4:e9:f9:92:0c:ef:a6:b2:76:7f:7d:
         48:40:ce:06:67:4a:49:83:59:38:5a:2a:a6:7b:ae:4c:54:4f:
         1a:56:0a:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZrx0h308XYzZCMHZ6CYsWMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3
YzMwNmUwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD
EygwNjJhYTEwMzMxNDdlZGExNjNkNzY2YWQ0OGU1ODBkMDMxNzE0NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPr/I6x0roxV2F5I2xEzDWBeP+pM
CC8nXBcWSWYcLgTmgfdDf1sfzTFR72zw/NVrwBWNNNVjSO12oBc0aDQxxvVjvj1w
q1aUbesLyQ3NYAgGLPXxkFjiyfRxmtYL8Kx656it8gkZn76T5VMidOuG+7thaE2g
s9cnBMCBV3VONX/U/d6yAlXnQGn4Yu7qAjud05d+tYkLdNToW2zuIQqygYmMz1se
KULAVQVJHPqp6eyMmZwIktHZV+lkjDWCNoasOM7s0Zb5FdNLdhYfj8rswDkImF+x
fr0qg2NHiUHwAKJqdxNPAOZ5pLZ/6c1F9yZcubsUs5POWAffmOqvimY0HwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAYqoQMxR+2hY9dmrUjlgNAxcUZVMB8GA1UdIwQY
MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw
LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy
OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFRi
kPdGecV0D4WLT9MGtdPG275jPWhgLe0PTxH68awQFUVP1DQUYHjF6ZNnH+KU0KZ/
0DGCmi9v5XgJvhCrPRjJfpbb7U58QeDay1MqFl53k33b1vyM1Ir3ds+rVZlbSF9z
usjO2RLqMLUTLrEBupy5RBggGsQb3HlXwK2xT43L7oWFek0yL0QZufR+41mJX0NS
KnsPvCKHPD57N/sONs4A+TeTxg3jGrf8y1VD92aZduMV3lsfHDZ5Hqhd2d7ACw2v
Bb+jo+fYS23PXqQDGz7nK4OeKzFJCkrkLd+dtcTp+ZIM76aydn99SEDOBmdKSYNZ
OFoqpnuuTFRPGlYKKg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:13 2025 by rpki-client