This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File:                     TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier:          1SR/l4pOLIM0d/EzqpLuu0QL6U0qR2qOPGEhv3Pihew=
Subject key identifier:   46:5B:5B:19:2E:53:27:EC:1D:06:F5:03:EF:DA:1A:91:EC:1D:1E:E7
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer:       /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial:       019AF2AD8C14B4B83E03C9E324D50853FB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number:          16FD
Signing time:             Sat 06 Dec 2025 08:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:51 +0000
Files and hashes:         1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 6EPVfogVv3GQiexNKRxLOfg0+V/tO7cfYq1MCAcVZhA=)
                          2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
                          3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:8c:14:b4:b8:3e:03:c9:e3:24:d5:08:53:fb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
        Validity
            Not Before: Dec  6 08:00:51 2025 GMT
            Not After : Dec  7 08:00:51 2025 GMT
        Subject: CN=465b5b192e5327ec1d06f503efda1a91ec1d1ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:14:90:3a:ce:9b:63:02:27:e5:25:08:b0:
                    e4:15:60:ed:57:e7:ef:d5:54:50:7b:4c:59:06:d6:
                    f1:29:59:7d:62:e7:0d:b0:cf:4a:bb:a6:67:6b:e3:
                    00:b7:2e:3e:07:e0:d0:ae:7c:9c:3a:e2:71:b7:0d:
                    94:25:f2:61:65:f1:bb:49:d4:c5:bf:38:43:be:59:
                    59:0e:20:75:2b:fc:23:37:cf:96:de:34:ef:eb:64:
                    e4:6d:04:f9:da:e7:e3:85:13:25:09:e7:8a:cc:30:
                    93:26:98:4b:9d:3c:5a:dd:e7:50:d7:76:c4:85:28:
                    f3:0e:84:3b:6b:c6:dc:db:3c:0f:e3:03:6a:48:a6:
                    10:4a:45:c1:0e:df:c4:e6:32:c6:b4:bf:36:77:70:
                    18:a0:4d:d8:8a:14:35:64:4d:c8:27:3a:da:5b:79:
                    1a:59:b0:93:5f:71:d5:96:d7:72:dc:a0:e9:f7:56:
                    b4:42:25:4a:b4:a2:34:02:65:e6:05:00:82:6b:c5:
                    bc:11:d4:f5:55:fe:87:13:8e:e1:44:d0:80:2c:e7:
                    4a:53:42:32:30:94:fd:09:d1:53:d6:ca:b2:63:17:
                    b5:0f:ff:d2:c1:43:b0:cf:68:67:16:3a:78:da:fd:
                    ae:88:2b:b2:65:41:ad:9a:81:53:33:1c:88:14:69:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:5B:19:2E:53:27:EC:1D:06:F5:03:EF:DA:1A:91:EC:1D:1E:E7
            X509v3 Authority Key Identifier:
                keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e4:50:79:ba:fb:10:d8:c1:ad:72:33:09:ee:71:78:84:be:
         e5:75:5f:23:ab:6d:e4:27:02:26:70:c1:c1:84:0f:91:57:f4:
         9b:21:52:4e:93:ff:1c:c5:10:b0:bf:0e:9f:b1:48:da:b7:9f:
         0c:c9:f0:6d:ba:65:38:de:ad:75:42:05:a4:0f:1a:85:df:36:
         19:dc:05:55:cc:0c:cd:ea:65:d9:a2:23:f4:47:84:4d:27:b2:
         8b:01:eb:23:5d:ed:df:95:5a:f8:9c:76:7c:e4:8e:c9:87:35:
         95:14:1c:d3:20:4a:0b:79:f0:ba:4a:ed:19:ca:d7:fb:e8:aa:
         26:7f:73:4f:05:46:71:9d:af:de:57:2c:9f:75:1a:23:6a:bc:
         53:a9:72:eb:42:85:05:f4:87:60:77:1e:2a:af:14:1e:0e:c1:
         a5:c4:b1:d7:42:64:f9:d1:61:99:ab:e1:fa:e3:e1:86:8b:f8:
         c2:e5:be:87:4d:3e:d2:2a:8b:8c:2e:d4:5f:f9:32:f8:f4:9e:
         88:8b:4a:bb:1b:ff:e0:b4:40:91:cb:46:fc:1c:a3:a0:3c:cd:
         10:c4:7b:a5:a4:b6:25:38:ac:2e:c9:7e:16:d5:2c:9d:ff:27:
         e3:ae:71:88:29:ac:0b:a7:2c:d0:5e:be:1a:aa:9b:ee:b8:28:
         b3:fc:8f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrYwUtLg+A8njJNUIU/uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD
Eyg0NjViNWIxOTJlNTMyN2VjMWQwNmY1MDNlZmRhMWE5MWVjMWQxZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl28UkDrOm2MCJ+UlCLDkFWDtV+fv
1VRQe0xZBtbxKVl9YucNsM9Ku6Zna+MAty4+B+DQrnycOuJxtw2UJfJhZfG7SdTF
vzhDvllZDiB1K/wjN8+W3jTv62TkbQT52ufjhRMlCeeKzDCTJphLnTxa3edQ13bE
hSjzDoQ7a8bc2zwP4wNqSKYQSkXBDt/E5jLGtL82d3AYoE3YihQ1ZE3IJzraW3ka
WbCTX3HVltdy3KDp91a0QiVKtKI0AmXmBQCCa8W8EdT1Vf6HE47hRNCALOdKU0Iy
MJT9CdFT1sqyYxe1D//SwUOwz2hnFjp42v2uiCuyZUGtmoFTMxyIFGmTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZbWxkuUyfsHQb1A+/aGpHsHR7nMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuRQebr7
ENjBrXIzCe5xeIS+5XVfI6tt5CcCJnDBwYQPkVf0myFSTpP/HMUQsL8On7FI2ref
DMnwbbplON6tdUIFpA8ahd82GdwFVcwMzepl2aIj9EeETSeyiwHrI13t35Va+Jx2
fOSOyYc1lRQc0yBKC3nwukrtGcrX++iqJn9zTwVGcZ2v3lcsn3UaI2q8U6ly60KF
BfSHYHceKq8UHg7BpcSx10Jk+dFhmavh+uPhhov4wuW+h00+0iqLjC7UX/ky+PSe
iItKuxv/4LRAkctG/ByjoDzNEMR7paS2JTisLsl+FtUsnf8n465xiCmsC6cs0F6+
Gqqb7rgos/yP3g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:47:31 2025 by rpki-client