This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          ZCTyPsvQT8UTlHALjDioJwdkqvb7l6OgFBwQFQLXgJc=
Subject key identifier:   21:97:28:67:99:03:F0:88:64:41:5B:DE:C1:E5:07:84:B5:53:1A:88
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019AF61CC40E2FC81AE4576D7DB791CE647D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          1764
Signing time:             Sun 07 Dec 2025 00:01:11 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:11 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:11 +0000
Files and hashes:         1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
                          2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
                          3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: yM5ouKzxLiho5/t8kqOaMrQpFYrjppCMfgPlQ/yqtfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:c4:0e:2f:c8:1a:e4:57:6d:7d:b7:91:ce:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Dec  7 00:01:11 2025 GMT
            Not After : Dec  8 00:01:11 2025 GMT
        Subject: CN=219728679903f08864415bdec1e50784b5531a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:36:4f:f4:03:22:6e:9b:bc:6d:5d:b6:4b:
                    6a:ab:32:fb:4a:be:f3:06:c1:3f:93:c0:52:43:7b:
                    39:5a:2c:29:af:65:32:95:7e:05:07:13:dd:b0:da:
                    5b:42:aa:06:f9:63:87:4b:2c:6b:4c:6b:30:97:28:
                    2b:bc:a0:30:c0:ca:5d:d8:d8:9b:62:66:70:6f:3f:
                    2d:74:c9:4b:90:b0:98:32:24:2d:6f:5e:49:a4:7b:
                    a8:5c:b9:c8:f7:4b:da:4c:63:50:40:01:02:be:72:
                    84:4c:b8:c4:15:3a:eb:d3:10:10:a3:fd:9e:d9:4a:
                    68:d8:e1:0e:c8:88:b7:ab:1a:dc:a7:81:2a:d4:2f:
                    60:89:ef:77:57:dc:03:96:15:d8:28:44:a6:59:30:
                    94:b5:08:e9:69:4f:f7:38:82:92:10:59:ac:25:36:
                    c2:29:f9:a7:49:c7:0d:79:7f:33:bd:57:13:e5:94:
                    52:61:67:09:af:86:db:ae:a3:fa:3a:33:7b:d9:4d:
                    74:0e:d5:35:e7:93:da:18:da:66:13:7e:fd:87:91:
                    c0:2c:7a:91:a5:d7:36:3e:6e:e5:b0:2b:ff:cd:ea:
                    94:dc:06:44:c1:bb:74:d6:23:e0:3a:9b:13:a7:d0:
                    66:0d:9b:93:e9:67:67:69:0b:83:3c:34:c4:a5:6b:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:97:28:67:99:03:F0:88:64:41:5B:DE:C1:E5:07:84:B5:53:1A:88
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:6c:14:cc:c6:95:d7:4e:63:69:99:43:b8:95:d3:04:f0:
         b9:16:3c:85:7f:b9:22:65:e7:fd:c0:40:b8:62:72:3a:7b:91:
         28:88:27:ec:a5:79:22:08:4f:79:09:e1:7e:8b:39:21:93:06:
         55:8f:d2:57:ec:dc:6b:b5:42:ab:ac:bf:19:fc:21:37:e4:e0:
         ba:f8:58:39:76:c2:e7:45:5e:a1:04:0d:08:ad:89:51:b2:d0:
         c8:a5:cd:bc:0b:0c:f6:c0:97:c3:66:5c:f2:e2:21:3c:a6:70:
         44:9c:3b:24:be:68:69:e6:f1:c9:c1:0c:fa:0b:ae:36:b6:c6:
         a4:74:3a:93:c2:f4:96:9f:20:43:ca:53:eb:05:70:b6:40:d6:
         b8:5b:0a:fc:e3:3d:b3:c4:4d:eb:2a:19:2d:d0:5e:29:87:2d:
         9f:3e:b0:57:cf:bc:4f:d4:02:32:18:b5:5d:2b:58:4a:56:e6:
         73:30:1a:ea:4b:23:4e:59:11:08:f6:cd:1e:9a:c6:bc:48:39:
         10:92:dc:6b:27:98:df:4b:b5:3c:cd:0f:e1:a7:f8:2c:80:90:
         ba:3d:bd:55:8e:24:26:73:5d:a6:90:d2:1c:31:79:cb:51:ff:
         50:c4:18:41:8d:a4:b2:90:af:b6:ee:ab:3d:67:2b:ef:9b:79:
         94:d9:25:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HMQOL8ga5FdtfbeRzmR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz
ZDM5MDgwHhcNMjUxMjA3MDAwMTExWhcNMjUxMjA4MDAwMTExWjAzMTEwLwYDVQQD
EygyMTk3Mjg2Nzk5MDNmMDg4NjQ0MTViZGVjMWU1MDc4NGI1NTMxYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP02T/QDIm6bvG1dtktqqzL7Sr7z
BsE/k8BSQ3s5Wiwpr2UylX4FBxPdsNpbQqoG+WOHSyxrTGswlygrvKAwwMpd2Nib
YmZwbz8tdMlLkLCYMiQtb15JpHuoXLnI90vaTGNQQAECvnKETLjEFTrr0xAQo/2e
2Upo2OEOyIi3qxrcp4Eq1C9gie93V9wDlhXYKESmWTCUtQjpaU/3OIKSEFmsJTbC
KfmnSccNeX8zvVcT5ZRSYWcJr4bbrqP6OjN72U10DtU155PaGNpmE379h5HALHqR
pdc2Pm7lsCv/zeqU3AZEwbt01iPgOpsTp9BmDZuT6WdnaQuDPDTEpWvW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGXKGeZA/CIZEFb3sHlB4S1UxqIMB8GA1UdIwQY
MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt
YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl
LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrBsFMzG
lddOY2mZQ7iV0wTwuRY8hX+5ImXn/cBAuGJyOnuRKIgn7KV5IghPeQnhfos5IZMG
VY/SV+zca7VCq6y/GfwhN+TguvhYOXbC50VeoQQNCK2JUbLQyKXNvAsM9sCXw2Zc
8uIhPKZwRJw7JL5oaebxycEM+guuNrbGpHQ6k8L0lp8gQ8pT6wVwtkDWuFsK/OM9
s8RN6yoZLdBeKYctnz6wV8+8T9QCMhi1XStYSlbmczAa6ksjTlkRCPbNHprGvEg5
EJLcayeY30u1PM0P4af4LICQuj29VY4kJnNdppDSHDF5y1H/UMQYQY2kspCvtu6r
PWcr75t5lNklEw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:33:38 2025 by rpki-client