This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          kooEOpPRs4wuUtIuz8U1RAyLTwv1ukCAz3aLI19MvXQ=
Subject key identifier:   CE:46:5D:54:67:C5:4D:62:7D:50:C3:49:3A:54:DC:69:1F:DA:B7:18
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019AF352767346003D1CAA0D23798C684670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          05F8
Signing time:             Sat 06 Dec 2025 11:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:58 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: NHJjgDuLYfTAfbnNZkBdbOBv67t6BYLK8O+f+Q1FNqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:76:73:46:00:3d:1c:aa:0d:23:79:8c:68:46:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Dec  6 11:00:58 2025 GMT
            Not After : Dec  7 11:00:58 2025 GMT
        Subject: CN=ce465d5467c54d627d50c3493a54dc691fdab718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:9f:ec:19:c0:ab:9b:5d:74:b9:15:72:3e:
                    c4:00:08:c5:40:2d:52:a3:6a:d3:a6:54:94:ce:9b:
                    b6:9f:7d:fe:4b:da:1b:8a:e2:79:08:cf:70:2c:ae:
                    68:12:d2:10:34:0e:1f:82:df:46:91:83:9e:c9:0e:
                    91:eb:5c:82:a1:bf:5e:01:2c:71:49:d2:41:94:63:
                    3e:ae:f8:ca:00:93:39:69:fc:e8:0d:3e:32:8f:79:
                    05:72:e1:bf:fa:1a:6f:a6:a5:cc:48:be:3a:d0:78:
                    f9:42:2a:89:93:47:a8:2c:f8:41:f1:e0:c8:1a:ae:
                    77:ab:ef:10:18:ec:1f:d7:4f:b7:40:ce:5b:21:52:
                    08:18:cc:74:85:38:20:65:00:b2:cd:af:ae:b7:02:
                    ad:22:ab:da:88:dd:52:92:f0:26:43:98:2e:a0:0a:
                    7e:34:34:27:67:54:74:3c:54:f9:e5:71:33:58:86:
                    42:12:6c:77:c8:de:ce:32:1b:be:95:ac:b1:ed:6c:
                    43:8f:56:82:5c:2b:ea:49:c0:d9:d3:3e:a4:54:2c:
                    a9:a8:25:a5:3d:a9:85:ba:54:d8:01:9d:d7:77:9f:
                    ed:d9:ce:f5:ff:23:21:ef:e9:e5:16:eb:07:1e:cf:
                    d5:b6:48:23:95:b9:9a:4a:7e:ce:56:f3:54:41:6f:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:5D:54:67:C5:4D:62:7D:50:C3:49:3A:54:DC:69:1F:DA:B7:18
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:17:ca:31:3b:4a:fc:75:d2:49:90:ea:6b:72:82:66:2e:
         5b:d3:d3:42:03:c6:28:3d:b1:89:ee:90:fa:ac:91:98:02:4c:
         3f:51:b8:4d:de:0b:0c:27:a2:1e:ed:31:b3:cf:81:51:e5:f2:
         f8:da:0e:c9:6b:8c:14:73:7c:d8:3a:e6:e9:3c:fd:a7:3a:38:
         f0:62:e4:a0:85:f6:14:11:26:46:52:4c:bc:8b:2e:2d:d8:26:
         fa:f3:3b:bd:87:0d:46:4a:44:bb:b5:da:6a:c9:c9:87:42:97:
         01:17:c1:1c:d8:4f:77:c5:76:2e:60:73:88:fd:18:54:cf:3f:
         c3:24:de:64:08:b0:aa:b0:28:65:30:1a:10:8f:9b:bd:50:09:
         85:ad:3e:e0:71:4f:9f:fa:ee:33:ab:86:12:94:ad:bf:5e:34:
         ab:70:aa:d4:98:26:9c:60:e1:80:24:9e:72:07:c3:0e:d6:fe:
         0a:67:cb:a1:68:5c:68:65:6d:ed:08:ed:6a:a0:20:02:23:b3:
         5c:8c:c6:d7:2e:31:73:75:d6:3b:15:8e:cd:38:0c:57:53:59:
         cf:92:6c:f7:04:46:c6:8e:00:19:da:b4:e7:4c:2c:77:29:ed:
         a6:34:9e:35:f2:a1:78:2e:35:8c:d4:04:1d:45:9b:2f:0b:6d:
         24:cd:21:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUnZzRgA9HKoNI3mMaEZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjUxMjA2MTEwMDU4WhcNMjUxMjA3MTEwMDU4WjAzMTEwLwYDVQQD
EyhjZTQ2NWQ1NDY3YzU0ZDYyN2Q1MGMzNDkzYTU0ZGM2OTFmZGFiNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZKf7BnAq5tddLkVcj7EAAjFQC1S
o2rTplSUzpu2n33+S9obiuJ5CM9wLK5oEtIQNA4fgt9GkYOeyQ6R61yCob9eASxx
SdJBlGM+rvjKAJM5afzoDT4yj3kFcuG/+hpvpqXMSL460Hj5QiqJk0eoLPhB8eDI
Gq53q+8QGOwf10+3QM5bIVIIGMx0hTggZQCyza+utwKtIqvaiN1SkvAmQ5guoAp+
NDQnZ1R0PFT55XEzWIZCEmx3yN7OMhu+layx7WxDj1aCXCvqScDZ0z6kVCypqCWl
PamFulTYAZ3Xd5/t2c71/yMh7+nlFusHHs/VtkgjlbmaSn7OVvNUQW+2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5GXVRnxU1ifVDDSTpU3Gkf2rcYMB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7oXyjE7
Svx10kmQ6mtygmYuW9PTQgPGKD2xie6Q+qyRmAJMP1G4Td4LDCeiHu0xs8+BUeXy
+NoOyWuMFHN82Drm6Tz9pzo48GLkoIX2FBEmRlJMvIsuLdgm+vM7vYcNRkpEu7Xa
asnJh0KXARfBHNhPd8V2LmBziP0YVM8/wyTeZAiwqrAoZTAaEI+bvVAJha0+4HFP
n/ruM6uGEpStv140q3Cq1JgmnGDhgCSecgfDDtb+CmfLoWhcaGVt7QjtaqAgAiOz
XIzG1y4xc3XWOxWOzTgMV1NZz5Js9wRGxo4AGdq050wsdyntpjSeNfKheC41jNQE
HUWbLwttJM0hVQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:45:58 2025 by rpki-client