This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          S9wOvNXs41bfil+HeLqZ10OoY6/mFvt0PJsEjrqza3E=
Subject key identifier:   A0:07:4C:93:AB:DA:00:5D:35:0D:DD:B1:16:7A:54:6B:63:63:66:4B
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       019AF1642F94203F9A05680A37ECFEE4C1F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 02:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:06 +0000
Files and hashes:         1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
                          2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: V0zgBa5ZAaBp8P8YOzrbdSUnZDyrI9aKjVB0c1KFjjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:2f:94:20:3f:9a:05:68:0a:37:ec:fe:e4:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Dec  6 02:01:06 2025 GMT
            Not After : Dec  7 02:01:06 2025 GMT
        Subject: CN=a0074c93abda005d350dddb1167a546b6363664b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7f:06:a3:59:f4:8a:81:c5:22:3e:7f:cc:0e:
                    35:67:2c:99:14:d1:ed:bd:88:fc:e8:67:6a:fa:f9:
                    81:f2:84:4e:3d:10:c1:4d:10:69:b3:f8:c4:11:81:
                    aa:f9:59:a4:a0:ab:7f:4b:f1:d1:15:e6:a9:ff:90:
                    4d:ce:5c:78:2f:df:64:68:ea:28:ef:e2:e5:e3:22:
                    96:97:b0:56:1b:a4:50:55:e5:15:c6:78:d2:8a:88:
                    48:13:41:2f:e7:fb:29:fd:c1:a7:06:01:b4:f9:7b:
                    f2:c0:d7:95:13:9a:92:01:94:2e:e3:f9:4d:ab:aa:
                    64:a0:a7:96:08:13:2e:71:43:17:22:d7:c3:d4:9f:
                    b5:c3:fe:aa:ab:ad:6d:92:8d:a8:a6:7d:1f:55:13:
                    ee:8c:33:6f:fc:ba:b4:b6:52:75:79:58:30:a3:88:
                    2e:be:eb:60:2c:84:df:3a:81:ab:53:e7:59:3e:57:
                    8a:ea:75:fa:a3:eb:f0:20:d1:1a:22:fd:93:ed:5d:
                    50:92:b8:2b:72:ea:b9:6c:42:ec:81:39:48:e2:10:
                    89:a1:ed:f3:cf:24:25:0b:00:39:68:aa:8a:fc:d4:
                    3e:00:0e:bc:63:77:5f:fb:15:d6:53:4d:bf:ad:bf:
                    3f:97:a2:c7:90:28:44:f3:24:cd:99:f8:23:c1:0f:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:07:4C:93:AB:DA:00:5D:35:0D:DD:B1:16:7A:54:6B:63:63:66:4B
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:05:43:8f:f0:65:0b:b6:dc:39:17:0e:82:4d:59:2b:a5:1e:
         59:78:48:1c:15:66:ee:b0:6f:bb:49:7c:ec:e8:0c:70:e6:cd:
         52:38:72:5a:f2:a2:3b:c5:11:a4:c2:ac:27:19:44:57:5d:71:
         ba:8f:87:83:70:10:58:67:8f:6e:75:54:f7:dc:8b:04:de:7b:
         d0:de:91:d2:57:a3:88:3f:79:81:0c:7c:dc:7a:54:37:48:80:
         fd:11:48:7f:5a:b4:9b:08:dc:aa:03:e3:ec:78:89:de:59:6e:
         a2:25:6d:66:06:b9:06:0a:ad:50:73:4f:0f:e6:2e:e4:52:f9:
         77:83:82:82:09:0d:57:f3:57:89:5f:bb:8d:20:99:d5:05:25:
         3a:83:72:8d:f0:c5:14:f1:5c:c5:cb:7d:7e:e5:7e:34:41:a4:
         cf:34:f1:61:a8:40:6a:b4:c1:e6:52:6b:cf:0a:a4:b7:b6:03:
         50:d4:ef:e6:56:d2:62:89:d4:1e:e1:68:d2:fd:95:c6:47:a5:
         ba:f5:06:64:17:9c:33:72:fe:60:ff:4f:e0:7d:e3:24:0e:0d:
         b9:23:0c:72:1e:69:f8:ef:5f:a1:45:2f:4c:47:e6:25:ce:b0:
         68:a4:36:a9:96:ee:05:8e:d6:06:5f:fb:a3:72:1c:a6:26:36:
         ac:c3:22:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZC+UID+aBWgKN+z+5MH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD
EyhhMDA3NGM5M2FiZGEwMDVkMzUwZGRkYjExNjdhNTQ2YjYzNjM2NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA838Go1n0ioHFIj5/zA41ZyyZFNHt
vYj86Gdq+vmB8oROPRDBTRBps/jEEYGq+VmkoKt/S/HRFeap/5BNzlx4L99kaOoo
7+Ll4yKWl7BWG6RQVeUVxnjSiohIE0Ev5/sp/cGnBgG0+XvywNeVE5qSAZQu4/lN
q6pkoKeWCBMucUMXItfD1J+1w/6qq61tko2opn0fVRPujDNv/Lq0tlJ1eVgwo4gu
vutgLITfOoGrU+dZPleK6nX6o+vwINEaIv2T7V1Qkrgrcuq5bELsgTlI4hCJoe3z
zyQlCwA5aKqK/NQ+AA68Y3df+xXWU02/rb8/l6LHkChE8yTNmfgjwQ+VkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAHTJOr2gBdNQ3dsRZ6VGtjY2ZLMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwVDj/Bl
C7bcORcOgk1ZK6UeWXhIHBVm7rBvu0l87OgMcObNUjhyWvKiO8URpMKsJxlEV11x
uo+Hg3AQWGePbnVU99yLBN570N6R0lejiD95gQx83HpUN0iA/RFIf1q0mwjcqgPj
7HiJ3lluoiVtZga5BgqtUHNPD+Yu5FL5d4OCggkNV/NXiV+7jSCZ1QUlOoNyjfDF
FPFcxct9fuV+NEGkzzTxYahAarTB5lJrzwqkt7YDUNTv5lbSYonUHuFo0v2Vxkel
uvUGZBecM3L+YP9P4H3jJA4NuSMMch5p+O9foUUvTEfmJc6waKQ2qZbuBY7WBl/7
o3IcpiY2rMMi7A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:22:04 2025 by rpki-client