This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File:                     MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier:          d0S4r39rO8yy1VT4Ezw2VpKobFZR9IvOHdb5pCwvFpI=
Subject key identifier:   9E:58:04:1A:BD:8F:6C:46:8B:37:02:5F:D6:57:C7:B8:48:D5:C0:85
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer:       /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial:       019AF12E66DE0EDCA35CF0FF22E6B5E63EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number:          05B5
Signing time:             Sat 06 Dec 2025 01:02:21 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:21 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:21 +0000
Files and hashes:         1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: hIo2bQZOCM/aULckPlPR9ght7VcFkWCq3QJXMdeJvfQ=)
                          2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
                          3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:66:de:0e:dc:a3:5c:f0:ff:22:e6:b5:e6:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
        Validity
            Not Before: Dec  6 01:02:21 2025 GMT
            Not After : Dec  7 01:02:21 2025 GMT
        Subject: CN=9e58041abd8f6c468b37025fd657c7b848d5c085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:3c:da:39:a8:be:bf:90:9d:8a:b9:5d:bf:
                    8e:06:ce:fb:41:f2:25:a7:81:85:7f:e1:3a:40:7f:
                    4d:0a:15:13:8b:dc:61:77:fd:f2:3b:3e:19:16:18:
                    06:f9:46:f8:16:a7:bb:c8:46:79:eb:29:9e:73:d3:
                    5a:14:53:53:51:46:03:b2:e9:de:91:68:30:16:79:
                    9a:5a:dd:ba:79:07:9a:ce:5d:91:d6:6b:f6:e6:8d:
                    77:10:ae:de:6c:a2:5e:16:7b:0d:cb:50:09:46:e8:
                    8a:d0:f7:93:79:fb:6a:49:ac:b5:07:8b:b7:bf:2f:
                    43:2e:ef:b5:48:11:09:12:b4:59:6c:b0:a4:25:91:
                    57:e5:29:a5:9a:e8:c8:f2:f6:4d:4a:d9:9b:d1:5b:
                    c9:93:0e:2b:3e:27:48:b9:f0:21:9b:c0:08:40:2d:
                    cd:9b:ce:9c:d9:65:5e:5e:1f:f0:50:4b:0f:41:9f:
                    34:1c:b6:63:12:e1:19:cc:fa:21:58:06:72:e0:48:
                    11:c0:42:71:eb:0d:ba:b7:30:3d:c3:bd:53:cd:20:
                    37:6a:a6:ff:ff:2a:d4:3a:27:76:c2:15:a3:c1:6d:
                    b1:83:58:cb:40:48:5f:6f:08:0f:5a:ef:e1:83:ab:
                    36:15:d6:91:f4:97:8b:26:36:9d:e5:f9:fa:98:56:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:04:1A:BD:8F:6C:46:8B:37:02:5F:D6:57:C7:B8:48:D5:C0:85
            X509v3 Authority Key Identifier:
                keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:08:3e:d0:04:c8:64:f4:cc:85:ac:94:91:b2:fe:6f:b1:
         b9:02:b2:fb:35:5d:00:00:1d:d0:7b:ca:95:93:82:bc:20:b2:
         96:64:e3:3b:0d:d5:87:ab:9e:2b:da:57:15:81:0b:3b:61:1a:
         3b:02:80:83:5c:a6:31:f1:cb:39:9b:41:22:f8:df:49:f6:27:
         38:eb:28:90:f8:67:ca:04:a1:66:51:57:9a:97:fa:71:bb:bd:
         3c:b2:8f:85:60:7a:68:ee:36:82:a5:0d:00:7d:5e:a8:8d:e8:
         de:85:f8:39:64:75:d8:d9:9d:e8:f1:72:4c:6f:15:5d:29:dd:
         26:03:b4:82:7e:5f:4e:8b:da:3b:d9:1f:f6:45:eb:9b:d6:81:
         94:7c:9c:4b:37:3f:53:ae:ab:6d:27:60:98:59:4e:92:4f:9a:
         7b:e9:e8:a7:50:4d:ec:a5:cc:87:71:37:7e:6c:ff:99:39:c8:
         2e:01:50:7b:3a:f0:57:0c:3f:2f:f0:17:4d:82:28:1b:31:50:
         a2:30:69:7e:bb:3f:4e:b9:2d:cc:b9:8d:53:44:60:dd:42:f9:
         e3:cb:47:37:6c:be:ae:0e:4e:69:c5:25:72:6d:bb:5b:1e:87:
         b9:aa:9c:8a:62:1e:da:10:cd:da:23:05:fb:ee:10:17:f3:c0:
         ff:38:a0:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLmbeDtyjXPD/Iua15j7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk
ODgyZWIwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD
Eyg5ZTU4MDQxYWJkOGY2YzQ2OGIzNzAyNWZkNjU3YzdiODQ4ZDVjMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9482jmovr+QnYq5Xb+OBs77QfIl
p4GFf+E6QH9NChUTi9xhd/3yOz4ZFhgG+Ub4Fqe7yEZ56ymec9NaFFNTUUYDsune
kWgwFnmaWt26eQeazl2R1mv25o13EK7ebKJeFnsNy1AJRuiK0PeTeftqSay1B4u3
vy9DLu+1SBEJErRZbLCkJZFX5SmlmujI8vZNStmb0VvJkw4rPidIufAhm8AIQC3N
m86c2WVeXh/wUEsPQZ80HLZjEuEZzPohWAZy4EgRwEJx6w26tzA9w71TzSA3aqb/
/yrUOid2whWjwW2xg1jLQEhfbwgPWu/hg6s2FdaR9JeLJjad5fn6mFYB8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5YBBq9j2xGizcCX9ZXx7hI1cCFMB8GA1UdIwQY
MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt
MjIyZmUzNDgyNjhhLzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh
LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwoIPtAE
yGT0zIWslJGy/m+xuQKy+zVdAAAd0HvKlZOCvCCylmTjOw3Vh6ueK9pXFYELO2Ea
OwKAg1ymMfHLOZtBIvjfSfYnOOsokPhnygShZlFXmpf6cbu9PLKPhWB6aO42gqUN
AH1eqI3o3oX4OWR12Nmd6PFyTG8VXSndJgO0gn5fTovaO9kf9kXrm9aBlHycSzc/
U66rbSdgmFlOkk+ae+nop1BN7KXMh3E3fmz/mTnILgFQezrwVww/L/AXTYIoGzFQ
ojBpfrs/TrktzLmNU0Rg3UL548tHN2y+rg5OacUlcm27Wx6HuaqcimIe2hDN2iMF
++4QF/PA/zigCw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:36 2025 by rpki-client