This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          9F4HDoX8R+c7D9R+Z0m6hiGqHGUkCclyqdCQAX1EWa4=
Subject key identifier:   FE:EE:97:82:C4:F9:D5:C0:C2:99:AB:8E:5C:FD:BF:90:32:12:50:29
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019AF19AAAE355348CFCE9B89BB9EA69EA6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 03:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:36 +0000
Files and hashes:         1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
                          2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
                          3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
                          4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
                          5: eEjb8DAP9bahq2O5j_HQb2xzlO4.roa (hash: fOyU7lhmD+ZIHBvuQudHEnoFTSwbSNrbIy4UHUxoCs0=)
                          6: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: GJYJ+yDWrweD8zVuZuw8iTMBGiYICZNq5z/jMbj6IMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:aa:e3:55:34:8c:fc:e9:b8:9b:b9:ea:69:ea:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Dec  6 03:00:36 2025 GMT
            Not After : Dec  7 03:00:36 2025 GMT
        Subject: CN=feee9782c4f9d5c0c299ab8e5cfdbf9032125029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:c4:03:32:c7:c3:ea:73:de:7c:c7:b8:93:
                    7f:79:d6:2d:f2:d7:b3:17:2e:70:d4:8a:30:69:48:
                    df:45:ad:62:0f:96:b0:ec:af:c1:08:6f:fc:c7:46:
                    77:22:34:e1:cd:1c:50:62:d2:19:24:a8:09:77:35:
                    04:a2:a7:32:95:cd:63:c9:f8:0b:ed:7f:ca:5d:3b:
                    39:c0:70:9c:ea:e0:11:fd:60:2d:31:55:50:2c:36:
                    0f:49:b0:ab:df:dd:aa:19:19:e8:87:36:99:c7:62:
                    86:f4:26:9d:5e:5b:01:09:34:48:34:72:d2:a9:86:
                    38:53:ea:e8:88:a1:80:f9:70:5d:03:f1:a0:c4:f9:
                    43:9a:1a:fe:68:62:b6:a7:75:5e:35:d8:11:bd:a4:
                    8f:f3:ff:89:d4:ea:f3:06:78:e2:e5:24:ae:cc:17:
                    4a:4d:ed:99:0e:08:d0:ed:78:4c:39:6f:22:af:7a:
                    73:f3:73:47:4f:88:7d:e3:ae:1c:13:40:11:94:62:
                    25:77:5c:a0:db:47:39:6c:3a:3c:17:11:db:81:31:
                    e2:a1:67:42:4c:bf:73:81:d6:c6:a0:91:59:34:e4:
                    64:a0:aa:b0:e8:37:e3:51:79:bc:34:1f:77:59:85:
                    b1:c7:25:7c:be:03:ed:5f:c1:e8:53:3c:fc:99:f5:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:97:82:C4:F9:D5:C0:C2:99:AB:8E:5C:FD:BF:90:32:12:50:29
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:13:fa:44:0e:7e:7c:11:74:76:7b:c1:48:11:0e:a5:5a:1e:
         48:ae:88:2b:ac:b0:ce:b1:e0:45:f8:2f:74:61:f9:d6:97:f3:
         55:76:c5:8c:af:f1:8f:bb:d6:e2:34:51:e4:43:51:b2:b7:d8:
         d4:b0:ef:6b:d8:ba:fb:cc:a0:49:1e:65:5f:f6:6d:e5:ec:de:
         75:2f:3a:46:db:29:75:d0:77:fc:32:b6:1c:10:5b:03:f9:44:
         3d:c7:e0:ae:1e:df:b3:b3:c1:16:6b:82:38:3f:9f:ac:2c:24:
         c0:e3:0e:55:d8:7f:cf:6c:74:a2:00:59:1c:31:00:0e:ef:86:
         b4:86:d3:05:c7:80:35:ab:27:b0:f1:c2:b4:eb:04:c2:07:62:
         fd:a4:5c:cd:15:e4:99:fc:98:02:9b:9c:97:7a:d0:de:e3:eb:
         0a:e0:c0:86:54:c7:6b:67:1e:fe:aa:83:bf:79:0b:d8:d0:e9:
         6d:75:3b:a3:68:41:13:ff:d0:0e:2a:10:2a:84:78:8d:bc:30:
         4c:08:5e:a0:46:28:a0:15:81:0c:bd:97:49:50:85:25:85:85:
         23:78:17:4b:0c:2d:ac:eb:9b:67:72:37:92:d1:a5:76:a2:00:
         70:da:80:de:8c:26:b9:4e:c6:0a:de:37:7d:25:89:ad:15:33:
         38:e9:33:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmqrjVTSM/Om4m7nqaeprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0
MTJlZGYwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD
EyhmZWVlOTc4MmM0ZjlkNWMwYzI5OWFiOGU1Y2ZkYmY5MDMyMTI1MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvEAzLHw+pz3nzHuJN/edYt8tez
Fy5w1IowaUjfRa1iD5aw7K/BCG/8x0Z3IjThzRxQYtIZJKgJdzUEoqcylc1jyfgL
7X/KXTs5wHCc6uAR/WAtMVVQLDYPSbCr392qGRnohzaZx2KG9CadXlsBCTRINHLS
qYY4U+roiKGA+XBdA/GgxPlDmhr+aGK2p3VeNdgRvaSP8/+J1OrzBnji5SSuzBdK
Te2ZDgjQ7XhMOW8ir3pz83NHT4h9464cE0ARlGIld1yg20c5bDo8FxHbgTHioWdC
TL9zgdbGoJFZNORkoKqw6DfjUXm8NB93WYWxxyV8vgPtX8HoUzz8mfUa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7ul4LE+dXAwpmrjlz9v5AyElApMB8GA1UdIwQY
MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt
OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5
LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRP6RA5+
fBF0dnvBSBEOpVoeSK6IK6ywzrHgRfgvdGH51pfzVXbFjK/xj7vW4jRR5ENRsrfY
1LDva9i6+8ygSR5lX/Zt5ezedS86RtspddB3/DK2HBBbA/lEPcfgrh7fs7PBFmuC
OD+frCwkwOMOVdh/z2x0ogBZHDEADu+GtIbTBceANasnsPHCtOsEwgdi/aRczRXk
mfyYApucl3rQ3uPrCuDAhlTHa2ce/qqDv3kL2NDpbXU7o2hBE//QDioQKoR4jbww
TAheoEYooBWBDL2XSVCFJYWFI3gXSwwtrOubZ3I3ktGldqIAcNqA3owmuU7GCt43
fSWJrRUzOOkz9g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:38 2025 by rpki-client