This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File:                     iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier:          HAXGxLa37Gb+zdH2NvhU43Tqh6sEISNzS4KuyKMjaW8=
Subject key identifier:   FA:A6:5E:DD:DE:DE:F2:19:F3:C6:59:8B:65:25:8E:92:1C:88:0E:81
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019AF2E451DB3478B7CA8BE68859644DDDD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number:          9E
Signing time:             Sat 06 Dec 2025 09:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:40 +0000
Files and hashes:         1: 0i9rX2feVpxn00o6Ok1LCwfKG9s.roa (hash: CXVbkTnTW3iOhYJS4A/hhGnO0DbUsClXOzGNTAyAP1Q=)
                          2: 77XyLnOM4h6CwzrBG4ucoSVGePA.roa (hash: HxsQHY/E7WzSPsizViseQ8rpr9eoehLFghJp8dXuWjE=)
                          3: c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa (hash: lqsnU4EmNQIM3Y5xNVwQm+caTK96utnXByFl0/Rrp80=)
                          4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: TIiAasvorWlaKQDOqPQ6fx+7ZC3PYuVhmO+Oi4CZDas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:51:db:34:78:b7:ca:8b:e6:88:59:64:4d:dd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Dec  6 09:00:40 2025 GMT
            Not After : Dec  7 09:00:40 2025 GMT
        Subject: CN=faa65edddedef219f3c6598b65258e921c880e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:62:57:bb:7b:45:6f:64:11:8f:ce:fe:d4:
                    c9:ab:51:fa:70:c6:8a:1e:48:a4:47:42:02:ed:22:
                    88:28:65:90:ec:54:ef:d6:ad:19:cd:85:36:f4:c6:
                    e3:79:ba:e4:0c:7c:b4:42:35:d5:c5:a0:41:8d:5f:
                    e0:af:62:fc:22:f8:75:9a:3e:e5:b9:41:82:4a:83:
                    f8:8f:c1:50:8a:47:7d:0c:d0:a4:df:5b:96:22:1c:
                    d7:be:b1:09:e5:32:9a:60:52:d1:f1:7e:53:6c:c6:
                    dc:99:c9:67:10:24:a2:11:61:66:74:a7:7c:fa:b9:
                    b8:b5:0f:76:f7:ef:1c:72:4b:12:51:63:fb:2a:ef:
                    d6:58:b3:2b:cf:bb:56:1b:e1:54:ea:f5:3f:d4:1b:
                    dc:88:57:a7:ea:52:8a:22:bc:8e:cc:83:64:4d:d2:
                    87:3f:aa:fa:39:34:5f:9f:5b:aa:d3:95:ac:ad:e1:
                    b4:51:32:e0:e2:ee:82:2c:dd:27:dc:47:76:ab:6c:
                    ca:b2:6e:1a:2b:68:97:f1:4c:e7:76:f8:f4:ba:17:
                    89:80:5a:ad:4f:05:79:16:26:70:09:f3:17:f1:1f:
                    d8:aa:5b:85:fc:2c:8f:80:a5:05:a7:4f:42:e4:3f:
                    a7:45:b2:86:3a:25:29:56:aa:91:a4:54:3e:ed:a9:
                    e1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:5E:DD:DE:DE:F2:19:F3:C6:59:8B:65:25:8E:92:1C:88:0E:81
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:df:91:7a:ac:6d:a1:70:12:db:2e:eb:66:3e:38:d1:f2:17:
         b4:cd:2f:4c:46:05:5d:ae:49:ed:61:8a:f2:27:c1:17:32:b3:
         db:e8:8e:33:3b:00:85:a8:5d:71:03:bd:e4:b7:ae:c3:af:46:
         78:39:af:c8:9d:29:c4:57:1c:dd:04:c5:92:80:23:48:3b:16:
         cf:07:47:d0:31:02:cb:8b:53:fb:92:8f:d0:a0:29:3d:a1:17:
         39:3f:20:45:41:dd:63:aa:49:8a:dc:5d:22:e3:5e:d9:31:c1:
         41:09:5c:1e:85:8e:98:ae:a2:0a:81:b2:b5:c9:10:27:87:b8:
         25:42:f6:fe:5d:63:44:75:66:17:b5:6f:87:86:92:0f:a0:91:
         57:d8:a7:6a:d0:43:47:42:ee:bb:96:ed:16:f9:fd:fe:79:7e:
         8d:de:83:37:46:df:23:43:f4:8f:db:c5:ac:e6:4d:d9:6b:2b:
         5a:9d:13:b5:69:f3:b4:e2:9c:0a:63:9f:28:56:20:d4:94:82:
         53:fd:43:34:06:cd:97:53:8d:cb:30:31:01:a7:60:57:2a:64:
         50:72:da:91:09:49:99:47:56:3e:39:68:6c:ff:63:3d:5e:be:
         8a:b9:8d:f8:7d:ad:2f:44:a4:9a:b2:d2:75:25:ee:20:28:0a:
         29:76:ab:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5FHbNHi3yovmiFlkTd3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD
EyhmYWE2NWVkZGRlZGVmMjE5ZjNjNjU5OGI2NTI1OGU5MjFjODgwZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02diV7t7RW9kEY/O/tTJq1H6cMaK
HkikR0IC7SKIKGWQ7FTv1q0ZzYU29MbjebrkDHy0QjXVxaBBjV/gr2L8Ivh1mj7l
uUGCSoP4j8FQikd9DNCk31uWIhzXvrEJ5TKaYFLR8X5TbMbcmclnECSiEWFmdKd8
+rm4tQ929+8ccksSUWP7Ku/WWLMrz7tWG+FU6vU/1BvciFen6lKKIryOzINkTdKH
P6r6OTRfn1uq05WsreG0UTLg4u6CLN0n3Ed2q2zKsm4aK2iX8Uzndvj0uheJgFqt
TwV5FiZwCfMX8R/YqluF/CyPgKUFp09C5D+nRbKGOiUpVqqRpFQ+7anh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqmXt3e3vIZ88ZZi2UljpIciA6BMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9+Reqxt
oXAS2y7rZj440fIXtM0vTEYFXa5J7WGK8ifBFzKz2+iOMzsAhahdcQO95Leuw69G
eDmvyJ0pxFcc3QTFkoAjSDsWzwdH0DECy4tT+5KP0KApPaEXOT8gRUHdY6pJitxd
IuNe2THBQQlcHoWOmK6iCoGytckQJ4e4JUL2/l1jRHVmF7Vvh4aSD6CRV9inatBD
R0Luu5btFvn9/nl+jd6DN0bfI0P0j9vFrOZN2WsrWp0TtWnztOKcCmOfKFYg1JSC
U/1DNAbNl1ONyzAxAadgVypkUHLakQlJmUdWPjlobP9jPV6+irmN+H2tL0SkmrLS
dSXuICgKKXarIA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:38:10 2025 by rpki-client