This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          LpNLlYFuuqN2yrOAcjlyq0qaxK6UXS+pnohcJAhg6xo=
Subject key identifier:   47:22:75:1A:BF:B8:58:E6:6D:A7:C5:02:89:39:3C:1C:8E:59:28:6C
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       019AF6538CF05A49AA94E0FBD069775A6620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          1763
Signing time:             Sun 07 Dec 2025 01:01:01 +0000
Manifest this update:     Sun 07 Dec 2025 01:01:01 +0000
Manifest next update:     Mon 08 Dec 2025 01:01:01 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: lF7BeHYvwv23E0TJptBNus3lAfcDhBbONzZY6fylVOI=)
                          2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
                          3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
                          4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:8c:f0:5a:49:aa:94:e0:fb:d0:69:77:5a:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Dec  7 01:01:01 2025 GMT
            Not After : Dec  8 01:01:01 2025 GMT
        Subject: CN=4722751abfb858e66da7c50289393c1c8e59286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:71:61:a0:3d:b5:5e:3b:e7:5e:c3:28:10:
                    c1:41:12:6e:47:fa:b1:9c:5e:50:36:b7:6f:bc:96:
                    36:4f:06:6e:66:16:9d:35:ea:6c:9c:27:bc:f0:e1:
                    a5:75:77:b0:81:f6:02:67:ff:f1:a3:a7:37:3b:6c:
                    df:d8:42:33:d4:b5:26:28:d3:3f:c4:9a:df:25:c0:
                    9f:c9:62:8c:1b:19:1f:d5:ee:c7:e7:e2:28:65:57:
                    72:50:51:02:cc:12:76:a7:2a:97:0f:37:6f:e9:2a:
                    43:44:ae:75:92:9e:74:bf:02:2d:c0:cf:cc:12:ae:
                    f1:6b:9f:2d:68:60:80:10:c8:26:4e:b7:b9:77:4c:
                    60:dc:61:23:63:91:a5:61:e3:7f:16:d9:6c:f1:1f:
                    7e:13:8a:e8:2f:a1:3f:7a:b4:3b:e5:51:41:50:8f:
                    6a:60:a1:d6:c0:4c:1b:9a:2d:be:cf:e0:63:0c:40:
                    a0:bd:0e:9b:39:e2:0c:4d:bf:fb:f4:db:67:b7:a7:
                    f0:ee:4e:65:bf:e7:ce:d6:65:58:33:0e:79:c2:d9:
                    01:0f:fd:9f:66:5c:15:da:9e:ae:5e:89:d5:db:c4:
                    89:85:d0:5d:a3:0b:ad:7a:30:99:6e:07:8b:95:ee:
                    1a:51:d3:5a:b3:91:2b:de:4e:5b:62:67:00:ca:ae:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:22:75:1A:BF:B8:58:E6:6D:A7:C5:02:89:39:3C:1C:8E:59:28:6C
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:a9:25:d3:ac:06:ab:31:3e:7d:f0:b3:20:8a:9a:42:d1:
         ae:59:41:4e:8d:14:98:52:cf:2d:a3:ec:a1:d1:c6:3b:13:df:
         e6:87:24:dc:99:19:cd:04:af:3d:e8:ec:4a:b8:27:4f:3a:96:
         f0:da:bf:aa:a1:69:87:1b:3e:7e:af:95:c6:e2:0f:64:0e:dd:
         b9:52:71:ef:bc:cf:94:61:69:f0:2e:a1:32:15:ae:f4:75:0e:
         ab:b5:2d:7d:e4:df:97:2b:bf:fb:e4:64:b7:3d:62:60:4c:14:
         9c:2d:b4:d2:b3:6f:bc:fa:a6:8c:db:d6:74:ee:b5:d5:4c:94:
         43:68:14:07:ed:8f:82:1b:1f:1e:3b:6f:35:ad:15:47:50:dd:
         b3:62:5d:e2:fe:84:b2:a1:32:32:30:ca:10:16:02:d9:cd:88:
         65:ab:90:2f:06:14:d9:9b:0b:0d:39:e2:de:7c:65:f9:ca:91:
         e5:df:71:88:12:5f:f9:e3:d1:68:a7:8f:ad:4e:e5:c3:10:28:
         09:55:ea:fb:f8:1a:3b:a5:36:23:26:a7:ee:39:d8:6c:d7:22:
         d2:a9:76:2a:0b:48:ab:76:87:ee:7d:e2:8d:bb:ef:e3:62:5a:
         b1:d3:5f:b6:8b:46:52:6f:29:a3:e4:4e:b5:61:92:f7:31:79:
         e5:54:b4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2U4zwWkmqlOD70Gl3WmYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk
OTNmNjYwHhcNMjUxMjA3MDEwMTAxWhcNMjUxMjA4MDEwMTAxWjAzMTEwLwYDVQQD
Eyg0NzIyNzUxYWJmYjg1OGU2NmRhN2M1MDI4OTM5M2MxYzhlNTkyODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyZxYaA9tV47517DKBDBQRJuR/qx
nF5QNrdvvJY2TwZuZhadNepsnCe88OGldXewgfYCZ//xo6c3O2zf2EIz1LUmKNM/
xJrfJcCfyWKMGxkf1e7H5+IoZVdyUFECzBJ2pyqXDzdv6SpDRK51kp50vwItwM/M
Eq7xa58taGCAEMgmTre5d0xg3GEjY5GlYeN/Ftls8R9+E4roL6E/erQ75VFBUI9q
YKHWwEwbmi2+z+BjDECgvQ6bOeIMTb/79Ntnt6fw7k5lv+fO1mVYMw55wtkBD/2f
ZlwV2p6uXonV28SJhdBdowutejCZbgeLle4aUdNas5Er3k5bYmcAyq49uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcidRq/uFjmbafFAok5PByOWShsMB8GA1UdIwQY
MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt
ZWJkZjM4YjAwOTVjLzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj
LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmapJdOs
BqsxPn3wsyCKmkLRrllBTo0UmFLPLaPsodHGOxPf5ock3JkZzQSvPejsSrgnTzqW
8Nq/qqFphxs+fq+VxuIPZA7duVJx77zPlGFp8C6hMhWu9HUOq7UtfeTflyu/++Rk
tz1iYEwUnC200rNvvPqmjNvWdO611UyUQ2gUB+2PghsfHjtvNa0VR1Dds2Jd4v6E
sqEyMjDKEBYC2c2IZauQLwYU2ZsLDTni3nxl+cqR5d9xiBJf+ePRaKePrU7lwxAo
CVXq+/gaO6U2Iyan7jnYbNci0ql2KgtIq3aH7n3ijbvv42JasdNftotGUm8po+RO
tWGS9zF55VS0BA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:08:02 2025 by rpki-client