This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          +KPVCabPKVKn2DtOXKZ6YKMzDeSOlzIW972GxzMW0YQ=
Subject key identifier:   7F:05:D6:6C:E1:01:92:95:94:85:C1:1F:2B:E4:03:C2:C6:29:31:21
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019AF23F67BA1C3B019AAEA78127C66E0F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0B2B
Signing time:             Sat 06 Dec 2025 06:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:32 +0000
Files and hashes:         1: L7vo6n9BgY3fZANo6epe7vbZHts.roa (hash: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=)
                          2: Yb9tsCfpQgyQVhV8fqh-Sp_yitA.roa (hash: 2hs56XjZJhM4FFxn6rpMfJzmdBVo5/6HusR5cW2LXtA=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: fmdTXNVsN8xxvrDr7vyAJ59quWTslOd9nDGJWvbGGKk=)
                          4: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (hash: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=)
                          5: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (hash: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:67:ba:1c:3b:01:9a:ae:a7:81:27:c6:6e:0f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Dec  6 06:00:32 2025 GMT
            Not After : Dec  7 06:00:32 2025 GMT
        Subject: CN=7f05d66ce10192959485c11f2be403c2c6293121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:77:2a:a9:c8:d7:ff:46:67:8f:02:29:fd:
                    ca:68:43:40:ed:74:b1:71:43:23:a0:24:a8:95:79:
                    d8:9a:6f:ea:ba:18:df:78:be:33:38:22:20:ef:8a:
                    e8:ce:3b:59:16:ec:19:ff:eb:61:68:fb:30:7b:f7:
                    5e:a4:71:b2:83:1b:00:2c:92:2d:1e:34:5d:4e:69:
                    6f:3b:c4:e9:fc:cb:95:29:ca:4b:ef:6e:c5:f4:7e:
                    d0:85:5e:c7:b9:c5:d1:92:04:d2:fe:0e:9d:b1:99:
                    57:77:b3:d5:3e:22:1b:f4:99:f5:f3:9a:df:93:d2:
                    19:fc:24:a3:fc:43:a9:ee:79:ea:93:ec:13:0c:fb:
                    0e:90:62:9a:df:63:fa:c6:b4:5a:3a:1b:e3:f0:18:
                    30:65:2d:b4:1f:81:da:16:7c:6d:dd:97:f1:44:b4:
                    8d:39:ab:30:67:26:88:04:d3:6e:e4:f5:be:0d:7f:
                    0a:88:ea:75:c7:d3:9f:2f:61:52:e1:eb:8e:d7:4a:
                    08:83:fc:aa:9b:b1:e1:8d:48:f9:9c:74:66:37:4a:
                    97:4e:91:cf:7a:eb:32:24:1f:ac:bd:dd:f0:e6:2c:
                    28:83:ff:db:64:fc:78:1f:de:10:f1:1e:c7:28:5d:
                    cc:bb:49:3f:52:21:3b:d1:62:97:ad:76:3f:fe:64:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:D6:6C:E1:01:92:95:94:85:C1:1F:2B:E4:03:C2:C6:29:31:21
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:46:d4:46:5c:b0:f7:72:27:d7:8b:bb:0b:23:d3:2e:61:
         45:50:3e:1a:3a:1e:3d:bf:91:d5:f7:61:bf:9e:00:3d:5f:94:
         28:86:a1:74:c1:ed:1c:1a:93:b4:0f:b0:e3:0a:df:ff:fe:98:
         06:33:f3:ec:7c:46:0b:ec:53:de:f8:31:f4:e9:bd:ac:5f:b6:
         c8:ba:d2:f1:5a:37:dd:82:09:d8:2e:0e:7b:b2:67:59:80:c6:
         79:a6:ce:6f:2c:9a:ce:02:f6:c8:43:69:04:b9:39:e5:23:d6:
         41:80:ab:69:e5:82:bd:ae:d4:92:17:48:45:4a:14:e2:ac:1b:
         d8:8a:b6:dd:82:a8:23:61:de:8d:75:5d:b3:6e:be:2e:60:46:
         bc:89:99:9b:35:76:57:2b:61:e6:a1:67:59:09:83:39:67:f4:
         76:65:7e:3c:76:d4:a5:72:49:a7:18:1d:ef:21:b7:4a:60:20:
         ae:6f:6f:da:1f:3b:37:f8:12:20:f2:68:5c:8c:88:2d:98:85:
         eb:90:d1:f5:1d:89:a4:c6:69:82:4b:4d:89:6d:d3:07:f2:8e:
         97:6f:7a:25:4e:2b:4a:d1:ea:59:49:9f:a9:8e:4d:70:8f:47:
         5e:74:62:a7:b3:7d:06:7f:07:6d:aa:65:90:3f:b5:02:1f:0f:
         4a:2b:97:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP2e6HDsBmq6ngSfGbg90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3
OTZjMjgwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD
Eyg3ZjA1ZDY2Y2UxMDE5Mjk1OTQ4NWMxMWYyYmU0MDNjMmM2MjkzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw213KqnI1/9GZ48CKf3KaENA7XSx
cUMjoCSolXnYmm/quhjfeL4zOCIg74rozjtZFuwZ/+thaPswe/depHGygxsALJIt
HjRdTmlvO8Tp/MuVKcpL727F9H7QhV7HucXRkgTS/g6dsZlXd7PVPiIb9Jn185rf
k9IZ/CSj/EOp7nnqk+wTDPsOkGKa32P6xrRaOhvj8BgwZS20H4HaFnxt3ZfxRLSN
OaswZyaIBNNu5PW+DX8KiOp1x9OfL2FS4euO10oIg/yqm7HhjUj5nHRmN0qXTpHP
eusyJB+svd3w5iwog//bZPx4H94Q8R7HKF3Mu0k/UiE70WKXrXY//mQl2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8F1mzhAZKVlIXBHyvkA8LGKTEhMB8GA1UdIwQY
MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt
OTg4MGYwNGRiOTRhLzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh
LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu1G1EZc
sPdyJ9eLuwsj0y5hRVA+GjoePb+R1fdhv54APV+UKIahdMHtHBqTtA+w4wrf//6Y
BjPz7HxGC+xT3vgx9Om9rF+2yLrS8Vo33YIJ2C4Oe7JnWYDGeabObyyazgL2yENp
BLk55SPWQYCraeWCva7UkhdIRUoU4qwb2Iq23YKoI2HejXVds26+LmBGvImZmzV2
Vyth5qFnWQmDOWf0dmV+PHbUpXJJpxgd7yG3SmAgrm9v2h87N/gSIPJoXIyILZiF
65DR9R2JpMZpgktNiW3TB/KOl296JU4rStHqWUmfqY5NcI9HXnRip7N9Bn8Hbapl
kD+1Ah8PSiuXcA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:11:37 2025 by rpki-client