This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          BYkLM0L7X9r3Svuxdpv6OjaqpEMT8doC1nSzpOA3wVg=
Subject key identifier:   F2:C0:93:E6:84:F8:C4:D5:E8:05:49:BB:00:CD:31:4A:E9:36:73:4C
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       019AF23FD50CF2C8F499F05D4F64F1D4469A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 06:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:00 +0000
Files and hashes:         1: Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa (hash: 4IG2rPSclxVb9yuX8BnAS143KaJ4+m9FFie+h4KMN4U=)
                          2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: 0mzPY7ADREsTWXocD0JXIzwVFSDFL413ATPayu6xtfA=)
                          3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
                          4: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
                          5: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:d5:0c:f2:c8:f4:99:f0:5d:4f:64:f1:d4:46:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Dec  6 06:01:00 2025 GMT
            Not After : Dec  7 06:01:00 2025 GMT
        Subject: CN=f2c093e684f8c4d5e80549bb00cd314ae936734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:10:2d:6d:32:aa:5e:c0:e0:01:04:ca:fb:
                    e9:71:de:81:04:93:eb:7b:5d:30:fc:94:d3:77:ea:
                    48:18:66:e7:0e:1e:78:9a:9a:4e:3e:ca:5e:69:81:
                    2f:6e:8d:01:01:d5:33:fe:e1:eb:3f:91:53:60:fa:
                    c2:7c:91:80:de:2f:13:70:33:52:1b:1e:d2:8d:4d:
                    72:f7:01:49:0d:ce:cb:3f:5f:b8:60:c5:76:37:e7:
                    16:5d:fe:b5:f2:41:7d:5c:f4:55:81:5a:a6:7b:8d:
                    f8:fd:50:b3:84:0a:76:7a:46:a6:2c:61:50:fc:e0:
                    6f:33:e1:88:1b:2f:8b:d7:94:aa:6c:93:90:b5:ab:
                    8d:40:03:68:80:f9:f9:06:25:ab:e4:4b:08:48:bf:
                    ec:46:f7:98:1c:c5:2a:d5:64:06:29:e3:f8:1d:11:
                    aa:e6:c0:b6:6b:c1:f6:92:68:0c:c8:ef:73:7c:12:
                    93:af:9a:97:f2:d9:cb:3e:a5:d2:f1:2f:77:fb:05:
                    75:41:7e:5a:ea:92:95:bd:9a:0d:6c:b5:df:0f:89:
                    9b:2a:6d:7f:fb:19:cd:ae:4e:18:3a:7e:19:26:c8:
                    f5:20:ea:85:43:80:45:8b:02:d2:11:4f:6b:75:3c:
                    94:7b:48:12:e8:65:b0:6b:0a:da:b9:d0:f0:62:20:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C0:93:E6:84:F8:C4:D5:E8:05:49:BB:00:CD:31:4A:E9:36:73:4C
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:54:70:a4:a5:ae:61:ec:f6:bf:0e:54:e5:07:a6:de:61:
         c7:8f:34:1b:61:fa:08:63:d2:34:2f:6b:a8:7f:fa:24:12:ee:
         0f:f4:91:1b:d4:1e:83:bf:1c:90:a1:11:bf:a6:07:67:ad:62:
         98:91:3d:b8:d4:54:d4:58:5a:a6:c9:2e:52:e2:55:39:80:17:
         b9:a8:53:64:66:14:e7:68:44:2b:b3:0f:61:08:b9:5e:32:41:
         13:8c:8f:c0:aa:a8:62:cd:bb:2c:45:9f:b9:5d:35:c7:44:cc:
         95:d3:cc:b6:02:29:fe:07:ab:75:54:7f:9c:70:ae:ab:cb:f2:
         3b:0e:18:82:a3:f7:0d:ff:52:f6:f5:1a:e4:7b:fc:42:bb:36:
         c7:dc:19:bb:f8:66:99:a5:16:72:08:4b:fe:94:f1:17:c0:1e:
         c4:bd:e8:c4:d0:18:55:64:64:47:8a:37:d8:02:ac:33:06:a7:
         8b:b9:36:0a:05:7e:fd:e1:84:20:c1:ec:8d:0e:ce:0b:22:ea:
         8f:51:e7:39:18:81:bd:a2:d4:46:e3:02:37:17:f4:31:10:47:
         78:c1:e2:f7:82:9b:9e:19:5b:bf:37:3d:b7:b2:53:af:5e:96:
         61:f7:f0:6f:b3:1e:18:14:b9:53:18:7c:40:c7:f7:e5:be:3e:
         e7:15:2c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP9UM8sj0mfBdT2Tx1EaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD
EyhmMmMwOTNlNjg0ZjhjNGQ1ZTgwNTQ5YmIwMGNkMzE0YWU5MzY3MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSMQLW0yql7A4AEEyvvpcd6BBJPr
e10w/JTTd+pIGGbnDh54mppOPspeaYEvbo0BAdUz/uHrP5FTYPrCfJGA3i8TcDNS
Gx7SjU1y9wFJDc7LP1+4YMV2N+cWXf618kF9XPRVgVqme434/VCzhAp2ekamLGFQ
/OBvM+GIGy+L15SqbJOQtauNQANogPn5BiWr5EsISL/sRveYHMUq1WQGKeP4HRGq
5sC2a8H2kmgMyO9zfBKTr5qX8tnLPqXS8S93+wV1QX5a6pKVvZoNbLXfD4mbKm1/
+xnNrk4YOn4ZJsj1IOqFQ4BFiwLSEU9rdTyUe0gS6GWwawraudDwYiA1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLAk+aE+MTV6AVJuwDNMUrpNnNMMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh1UcKSl
rmHs9r8OVOUHpt5hx480G2H6CGPSNC9rqH/6JBLuD/SRG9Qeg78ckKERv6YHZ61i
mJE9uNRU1FhapskuUuJVOYAXuahTZGYU52hEK7MPYQi5XjJBE4yPwKqoYs27LEWf
uV01x0TMldPMtgIp/gerdVR/nHCuq8vyOw4YgqP3Df9S9vUa5Hv8Qrs2x9wZu/hm
maUWcghL/pTxF8AexL3oxNAYVWRkR4o32AKsMwani7k2CgV+/eGEIMHsjQ7OCyLq
j1HnORiBvaLURuMCNxf0MRBHeMHi94Kbnhlbvzc9t7JTr16WYffwb7MeGBS5Uxh8
QMf35b4+5xUspQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:30:10 2025 by rpki-client