This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          s+OuPu5hERNsyfJ033ej0E4TtqwPti53aoVkj9JeG1c=
Subject key identifier:   F0:99:72:DA:D2:62:5F:E7:6D:DC:63:48:BB:D7:4F:8E:68:EC:6F:E5
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019AF16483BE87253B12B71849B5E0BDF702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          06CE
Signing time:             Sat 06 Dec 2025 02:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:27 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: jA8drSWqwzU1fmAlUnGm6m1OOLY5O4QLEBt4kwohLDg=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa (hash: Db1fgaGn7etJ5E1mwpRZEwGFqG7OR6Nk/1MVMZkhMcg=)
                          5: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          6: IR62xMFiyoq3T26S7rC2t-vsg1Q.roa (hash: 4JHweAbKcSwcD4ukqyEXy7b32Dk2067OV6viHWo+wV4=)
                          7: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          8: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          9: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          10: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          11: SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa (hash: pSWkwwdJuITOogB9fYE7WeRIrWunvXKbsDF9fkGUQdM=)
                          12: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          13: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          14: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (hash: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=)
                          15: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          16: ezVBIWCV2NbeTOyJYOy4-t6gwIY.roa (hash: +ueIW+Hcjx/ythkrLfV2yuXJCVgHvZl6MauyDWOPYoE=)
                          17: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          18: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          19: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          20: nwWuECVg9JQAYn8jLwCeC3bTdbo.roa (hash: yNlc9hnJI63Z5bMFLpkARqr7N3n25vphcwDSS9RWssA=)
                          21: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          22: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          23: uu7x8ws28T4QdM70FvKBJCd6ke0.roa (hash: mYpdS0B5YDMrQaeH22PB2fPiErznb3n7AJTmk2e5j1U=)
                          24: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          25: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:83:be:87:25:3b:12:b7:18:49:b5:e0:bd:f7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Dec  6 02:01:27 2025 GMT
            Not After : Dec  7 02:01:27 2025 GMT
        Subject: CN=f09972dad2625fe76ddc6348bbd74f8e68ec6fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:91:12:2f:e8:1d:4c:bf:f2:ee:b7:1f:82:
                    62:d7:d6:36:bd:e5:2c:b0:2e:97:33:c6:9f:7b:06:
                    ce:98:03:86:8c:a6:b1:fa:57:29:09:a0:44:b0:39:
                    c5:e2:33:b4:87:d2:ea:a2:06:ba:c3:3f:29:c1:d9:
                    e1:c9:7d:4b:89:fa:12:a1:99:3c:a0:0f:72:74:3c:
                    21:53:95:9f:74:b6:95:f7:79:20:1a:46:3d:a0:97:
                    5d:f4:bc:64:a6:c8:6b:b9:d4:47:c9:f0:45:14:ec:
                    c1:d3:ea:87:e6:8b:ee:7a:fa:68:ba:ab:ae:ab:96:
                    5b:ca:91:b2:a5:cc:98:f9:20:76:ce:40:30:7d:4d:
                    a7:ab:31:3b:49:f3:89:a2:6a:55:42:b3:d0:00:3a:
                    ac:b0:f3:20:da:04:f8:29:b9:c6:7d:9c:ea:83:b8:
                    12:21:0d:a1:3d:1b:fe:42:85:82:c1:91:9c:ae:60:
                    2f:1d:e5:c2:a7:7c:39:b2:4c:92:f7:13:1d:bd:b6:
                    91:04:bd:16:12:b8:43:3d:b9:d3:19:ae:aa:6d:30:
                    ae:28:c4:e0:77:6f:0f:c0:ff:0a:95:c8:70:8b:a3:
                    ed:78:52:77:aa:e9:8e:bb:d2:03:97:fc:d6:76:c3:
                    92:f9:d2:05:f8:a7:7e:59:10:54:d9:cc:b6:7c:e1:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:72:DA:D2:62:5F:E7:6D:DC:63:48:BB:D7:4F:8E:68:EC:6F:E5
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9b:66:5b:e1:d8:9a:d3:d5:f9:d4:fb:73:7a:7a:14:d1:55:
         e4:ff:b3:d3:bf:12:8f:26:08:dc:36:c4:b0:36:6f:4f:22:7b:
         24:a8:52:a4:cd:23:d8:9d:03:07:e9:42:a8:58:9c:d7:e6:8e:
         1e:00:73:89:57:0a:91:1c:49:6e:09:c1:75:1c:ab:e1:30:ea:
         1b:e0:12:95:9d:0e:6a:2e:18:8a:4c:8a:94:bd:ff:ef:d0:fe:
         53:a4:54:22:fb:10:8a:9e:bc:9b:30:25:c7:5e:f8:e6:cf:1e:
         1d:24:e1:c7:d8:ea:ea:f6:25:5d:8e:47:3c:31:79:1d:37:62:
         a7:73:6a:7d:d0:41:e1:2d:56:b3:2d:a5:46:2b:04:f9:ee:20:
         f7:d3:2b:81:e0:47:33:49:49:88:76:70:78:00:67:6b:07:d9:
         22:52:8b:b6:5c:fd:72:29:03:c3:a1:09:54:68:ac:0f:d3:0a:
         da:1b:ff:77:60:92:54:73:90:80:c1:57:63:d3:d0:ca:7d:c7:
         e0:e0:3b:36:ec:d0:3d:4a:70:02:54:e3:23:79:b0:bf:db:07:
         f4:ef:69:ef:18:3b:42:92:04:c8:c2:4b:d6:74:75:0b:61:f8:
         c5:0b:3c:b9:ea:91:81:15:f3:c1:67:8e:2e:a9:61:56:35:e4:
         1b:11:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:42:24 2025 by rpki-client