This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.mft
File:                     V6yxpBd_w_wpkLQnq5iYvFe5cQg.mft (raw, json)
Hash identifier:          oI0dtV4p2NVvryreRIdmAUcAhUw+KUD/+QKAaGaBoUc=
Subject key identifier:   24:DC:86:22:1B:23:D9:33:03:41:FC:11:D1:74:E3:35:42:6D:3F:3E
Authority key identifier: 57:AC:B1:A4:17:7F:C3:FC:29:90:B4:27:AB:98:98:BC:57:B9:71:08
Certificate issuer:       /CN=57acb1a4177fc3fc2990b427ab9898bc57b97108
Certificate serial:       019AF31C29476EE54DB2BE57DEADBA154261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V6yxpBd_w_wpkLQnq5iYvFe5cQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.mft
Manifest number:          030C
Signing time:             Sat 06 Dec 2025 10:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:40 +0000
Files and hashes:         1: V6yxpBd_w_wpkLQnq5iYvFe5cQg.crl (hash: GG3Ed9mrmfO786WBnRZJZ/ykN32u0eXE9QLFATA0Rso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V6yxpBd_w_wpkLQnq5iYvFe5cQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:29:47:6e:e5:4d:b2:be:57:de:ad:ba:15:42:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57acb1a4177fc3fc2990b427ab9898bc57b97108
        Validity
            Not Before: Dec  6 10:01:40 2025 GMT
            Not After : Dec  7 10:01:40 2025 GMT
        Subject: CN=24dc86221b23d9330341fc11d174e335426d3f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:91:df:7a:1c:eb:7b:08:4f:b7:39:37:45:
                    a0:2c:54:78:14:e2:c5:50:11:6b:6b:62:25:b7:59:
                    c6:59:aa:c2:31:5c:e3:e0:ab:8c:84:41:34:f2:53:
                    a1:bc:7d:bd:15:b5:1d:0e:88:f3:c3:5d:f9:c1:a1:
                    1a:bf:c3:83:09:dd:be:93:4b:78:4b:7e:9b:b4:34:
                    c5:36:bc:7d:12:f2:13:75:f4:61:46:de:41:79:d0:
                    62:af:0f:37:03:b5:6a:fb:e4:70:80:41:ae:a8:60:
                    d2:8b:3c:93:5d:b9:7e:40:fb:22:e5:1b:a5:b2:81:
                    28:76:7f:fd:75:4c:b6:dd:e6:77:02:0a:dd:8c:f5:
                    79:f7:58:bc:c8:65:d0:b8:30:ff:6f:5b:2f:6d:5f:
                    ac:d5:7b:30:c1:7e:5d:2f:0d:f8:b3:e5:0c:85:06:
                    05:b9:c4:5d:2d:54:68:2b:bb:82:56:01:83:96:31:
                    2c:bb:c0:00:bf:16:0a:00:ba:26:7b:94:2f:8b:ae:
                    19:e8:d0:29:c0:bb:39:d4:c8:21:23:b0:f9:b0:c1:
                    a7:46:23:2d:e2:66:74:c2:82:97:ee:20:e4:94:aa:
                    58:bd:0b:f8:38:60:0c:f5:2c:e5:08:26:5f:1f:c8:
                    a9:f8:e6:13:7d:7f:47:46:ed:0a:e3:86:0d:75:f6:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:86:22:1B:23:D9:33:03:41:FC:11:D1:74:E3:35:42:6D:3F:3E
            X509v3 Authority Key Identifier:
                keyid:57:AC:B1:A4:17:7F:C3:FC:29:90:B4:27:AB:98:98:BC:57:B9:71:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V6yxpBd_w_wpkLQnq5iYvFe5cQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32ec99-22b0-430a-b00d-59f89f6e6976/1/V6yxpBd_w_wpkLQnq5iYvFe5cQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:2b:6e:28:ab:38:4e:9e:5b:f2:d3:07:b0:1c:01:55:37:
         3b:06:cb:8e:c3:a7:b1:f8:a0:57:74:6d:f8:17:c1:f8:60:17:
         5f:28:51:04:01:a7:91:de:e3:86:57:5c:2f:3a:df:cb:94:e5:
         7f:8d:b6:82:82:7a:2d:19:59:a1:ce:a6:64:8d:2a:48:6a:23:
         aa:b6:6d:4a:9d:e7:8a:b1:d8:53:ce:26:c8:0a:3d:8f:79:d5:
         f0:45:f8:1a:1a:16:85:87:16:e9:e1:68:1f:9a:9e:16:27:9d:
         fe:3f:33:24:3b:29:ce:94:43:60:45:2d:8f:da:93:09:e8:c3:
         b9:53:1f:c3:99:48:0a:08:de:5f:23:42:83:1f:31:55:a3:03:
         82:34:42:8a:32:39:7b:f9:ef:61:b3:9f:f0:4f:f8:7e:6b:48:
         a8:2f:88:74:fb:40:71:ee:f5:4d:7b:aa:93:fb:49:ac:08:c8:
         45:9c:4c:c5:2a:0e:2a:a5:b5:71:f4:47:92:6d:26:1a:3b:79:
         19:06:d3:96:f7:9b:21:7c:ed:ef:f3:9f:d1:a1:d4:5c:d7:a9:
         a1:2b:de:5e:3a:ae:62:11:ba:de:3a:a9:bd:a8:66:89:45:6b:
         88:f7:7f:94:f1:b5:b5:bb:9b:44:e1:35:96:7c:25:5a:9b:cb:
         ea:52:6f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHClHbuVNsr5X3q26FUJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YWNiMWE0MTc3ZmMzZmMyOTkwYjQyN2FiOTg5OGJjNTdi
OTcxMDgwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD
EygyNGRjODYyMjFiMjNkOTMzMDM0MWZjMTFkMTc0ZTMzNTQyNmQzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fKR33oc63sIT7c5N0WgLFR4FOLF
UBFra2Ilt1nGWarCMVzj4KuMhEE08lOhvH29FbUdDojzw135waEav8ODCd2+k0t4
S36btDTFNrx9EvITdfRhRt5BedBirw83A7Vq++RwgEGuqGDSizyTXbl+QPsi5Rul
soEodn/9dUy23eZ3AgrdjPV591i8yGXQuDD/b1svbV+s1XswwX5dLw34s+UMhQYF
ucRdLVRoK7uCVgGDljEsu8AAvxYKALome5Qvi64Z6NApwLs51MghI7D5sMGnRiMt
4mZ0woKX7iDklKpYvQv4OGAM9SzlCCZfH8ip+OYTfX9HRu0K44YNdfZOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTchiIbI9kzA0H8EdF04zVCbT8+MB8GA1UdIwQY
MBaAFFessaQXf8P8KZC0J6uYmLxXuXEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjZ5eHBCZF93X3dwa0xRbnE1aVl2RmU1Y1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmVjOTktMjJiMC00MzBhLWIwMGQt
NTlmODlmNmU2OTc2LzEvVjZ5eHBCZF93X3dwa0xRbnE1aVl2RmU1Y1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmVjOTktMjJiMC00MzBhLWIwMGQtNTlmODlmNmU2OTc2
LzEvVjZ5eHBCZF93X3dwa0xRbnE1aVl2RmU1Y1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgwrbiir
OE6eW/LTB7AcAVU3OwbLjsOnsfigV3Rt+BfB+GAXXyhRBAGnkd7jhldcLzrfy5Tl
f422goJ6LRlZoc6mZI0qSGojqrZtSp3nirHYU84myAo9j3nV8EX4GhoWhYcW6eFo
H5qeFied/j8zJDspzpRDYEUtj9qTCejDuVMfw5lICgjeXyNCgx8xVaMDgjRCijI5
e/nvYbOf8E/4fmtIqC+IdPtAce71TXuqk/tJrAjIRZxMxSoOKqW1cfRHkm0mGjt5
GQbTlvebIXzt7/Of0aHUXNepoSveXjquYhG63jqpvahmiUVriPd/lPG1tbubROE1
lnwlWpvL6lJv1g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:00:40 2025 by rpki-client