This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File:                     BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier:          zlE9ZEKuTHSoYWMd/UxciXIhMYV+aUtM7SA9BRn/9JQ=
Subject key identifier:   D8:7B:94:46:4A:DC:E6:1E:D5:85:D9:91:88:84:B0:06:30:48:7F:8D
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       019B3D90EE1AE2CF543529708246F245B6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number:          0A5F
Signing time:             Sat 20 Dec 2025 21:01:06 +0000
Manifest this update:     Sat 20 Dec 2025 21:01:06 +0000
Manifest next update:     Sun 21 Dec 2025 21:01:06 +0000
Files and hashes:         1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=)
                          2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=)
                          3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=)
                          4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: O/J5VvGZcRpqLBzz5Svo1uHDC4Fp1v2pQhQGL7rY4mo=)
                          5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=)
                          6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=)
                          7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=)
                          8: ZuApx1lJ6PZTaa1PSofxEZnETW8.roa (hash: i6ZjtL8jp8h1GWVt1Wew7Qku5Nc6QBUB0tBwDCSGXU8=)
                          9: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=)
                          10: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=)
                          11: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=)
                          12: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=)
                          13: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=)
                          14: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=)
                          15: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:ee:1a:e2:cf:54:35:29:70:82:46:f2:45:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Dec 20 21:01:06 2025 GMT
            Not After : Dec 21 21:01:06 2025 GMT
        Subject: CN=d87b94464adce61ed585d9918884b00630487f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:b7:16:38:cc:ff:b6:cc:e3:d2:3c:2e:b2:
                    6a:88:19:6e:48:12:6d:3d:31:02:bf:56:c7:2b:c9:
                    a0:67:54:5e:f9:c8:f0:e6:77:3c:88:08:c2:43:1b:
                    39:2b:2d:d9:45:41:3e:10:26:de:bd:13:c0:c0:01:
                    c6:c3:6a:16:08:27:dc:aa:17:11:28:0b:15:3a:53:
                    4a:09:1b:a0:cf:11:77:ed:88:fa:e6:20:2b:1d:de:
                    8f:e4:25:65:2b:5f:5b:db:11:13:e5:d2:ea:6b:53:
                    e0:d4:72:44:30:b6:9e:72:a3:a8:f3:98:1b:4b:f6:
                    37:47:11:d2:0a:3d:41:a7:6d:ad:02:5d:31:e1:84:
                    fc:d4:33:41:68:30:4e:ae:6e:cd:e1:f2:70:bc:28:
                    05:3d:39:27:fb:cf:f1:e1:6c:da:4b:47:45:36:09:
                    05:3e:6b:ed:df:81:f7:57:fe:1b:4c:a7:99:c1:21:
                    87:cd:ae:34:26:c2:dd:d5:8a:4c:4c:10:80:56:b9:
                    4b:52:46:7b:7f:6c:1f:32:12:29:37:9d:0c:a4:8a:
                    ad:80:f2:4f:eb:56:49:96:8d:55:a6:57:49:ea:53:
                    1f:30:6a:25:62:d1:f2:b3:c7:f8:7c:23:26:09:ec:
                    63:9e:dc:ea:a8:0e:9d:9f:a5:97:63:9c:78:94:2d:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:94:46:4A:DC:E6:1E:D5:85:D9:91:88:84:B0:06:30:48:7F:8D
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:22:75:d3:1b:bd:a6:b5:f0:19:bd:4e:1b:05:96:db:07:
         66:bf:0e:ea:1e:6a:97:12:a6:2e:a7:98:eb:ef:1a:53:84:6a:
         06:e4:92:6e:b1:7c:5c:1e:cb:ca:cc:48:bf:80:04:1a:1c:ff:
         d7:40:a6:3c:49:60:69:8e:bd:0f:2c:2f:b4:e2:b1:66:bf:7f:
         6a:d6:63:0e:8f:3d:7b:3e:b4:1d:7d:e4:5c:ba:bf:6a:b2:e1:
         4b:c6:e3:53:b4:2e:85:13:8f:93:72:3b:c6:61:e4:f0:21:6a:
         cb:6f:26:7b:f2:ea:5a:7e:6e:78:33:0a:26:5b:bf:d2:32:2b:
         bf:45:42:4e:93:14:32:5b:81:e4:ed:4e:2c:f7:71:e8:92:1f:
         14:03:47:96:03:ef:2d:7f:62:1d:b2:96:5c:a2:a6:41:b4:7f:
         d3:68:ed:70:e5:26:b1:da:28:74:c9:02:08:57:b1:60:9d:e2:
         aa:a8:3e:af:5a:ef:fd:a7:e8:75:e5:5a:95:f9:24:61:fb:58:
         f6:22:69:bf:c0:ab:4a:b3:31:e2:e2:4d:3c:1b:16:fc:24:d4:
         3d:61:f7:f0:8c:1b:80:ab:a3:44:ff:71:be:98:91:c5:2f:13:
         96:01:8b:0b:f7:9c:52:9c:2c:4e:00:7b:27:72:2c:00:b3:1a:
         ed:13:61:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9kO4a4s9UNSlwgkbyRbb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjUxMjIwMjEwMTA2WhcNMjUxMjIxMjEwMTA2WjAzMTEwLwYDVQQD
EyhkODdiOTQ0NjRhZGNlNjFlZDU4NWQ5OTE4ODg0YjAwNjMwNDg3ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ23FjjM/7bM49I8LrJqiBluSBJt
PTECv1bHK8mgZ1Re+cjw5nc8iAjCQxs5Ky3ZRUE+ECbevRPAwAHGw2oWCCfcqhcR
KAsVOlNKCRugzxF37Yj65iArHd6P5CVlK19b2xET5dLqa1Pg1HJEMLaecqOo85gb
S/Y3RxHSCj1Bp22tAl0x4YT81DNBaDBOrm7N4fJwvCgFPTkn+8/x4WzaS0dFNgkF
Pmvt34H3V/4bTKeZwSGHza40JsLd1YpMTBCAVrlLUkZ7f2wfMhIpN50MpIqtgPJP
61ZJlo1VpldJ6lMfMGolYtHys8f4fCMmCexjntzqqA6dn6WXY5x4lC0a6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh7lEZK3OYe1YXZkYiEsAYwSH+NMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6kiddMb
vaa18Bm9ThsFltsHZr8O6h5qlxKmLqeY6+8aU4RqBuSSbrF8XB7LysxIv4AEGhz/
10CmPElgaY69DywvtOKxZr9/atZjDo89ez60HX3kXLq/arLhS8bjU7QuhROPk3I7
xmHk8CFqy28me/LqWn5ueDMKJlu/0jIrv0VCTpMUMluB5O1OLPdx6JIfFANHlgPv
LX9iHbKWXKKmQbR/02jtcOUmsdoodMkCCFexYJ3iqqg+r1rv/afodeValfkkYftY
9iJpv8CrSrMx4uJNPBsW/CTUPWH38IwbgKujRP9xvpiRxS8TlgGLC/ecUpwsTgB7
J3IsALMa7RNh0g==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:21:56 2025 by rpki-client