This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File:                     RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier:          TBVCeN0Ki+fAcr2ixkeNaZtSAV/h0COjvY2NEs4RcXk=
Subject key identifier:   E1:03:31:EF:F0:92:6E:0C:84:74:A5:34:98:D0:BE:83:27:C6:4C:84
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer:       /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial:       019AF49C1449AB4654464A150F1C8A964831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number:          0BCD
Signing time:             Sat 06 Dec 2025 17:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 17:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 17:01:00 +0000
Files and hashes:         1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
                          2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
                          3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: aK2GNszKewOTbngGaxu8uIAGzh5+1aGQQGgqfUrVWLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9c:14:49:ab:46:54:46:4a:15:0f:1c:8a:96:48:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
        Validity
            Not Before: Dec  6 17:01:00 2025 GMT
            Not After : Dec  7 17:01:00 2025 GMT
        Subject: CN=e10331eff0926e0c8474a53498d0be8327c64c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:15:32:73:8e:25:43:8d:2b:d8:c5:5d:e8:
                    48:d5:b5:b0:c8:bd:3d:ed:cf:f3:39:a0:d0:a3:91:
                    a9:1c:02:a8:2b:85:2b:20:1e:33:f5:fb:44:14:60:
                    90:be:fb:88:83:9b:0b:d8:1a:b7:1a:0f:a4:f6:39:
                    3e:06:db:a0:db:fd:3f:ec:91:27:d6:28:81:bb:d9:
                    f4:c0:b6:72:2f:b5:8d:51:09:e5:65:c9:6f:ff:ea:
                    b0:55:52:31:16:0d:32:67:30:94:3b:27:1b:9e:71:
                    e8:83:23:01:a9:7b:3d:ff:36:7f:fd:61:c7:df:77:
                    b8:b7:1a:22:d2:0e:21:63:d0:e2:74:ae:15:f7:15:
                    bf:fc:ab:69:e9:7a:95:12:f4:82:57:a1:22:a8:c1:
                    24:01:88:53:c2:fa:99:ad:81:41:5d:02:78:c3:8b:
                    1f:96:a9:f3:c4:22:47:db:b9:e9:d5:86:36:5a:5e:
                    41:18:4a:93:02:77:a0:4e:62:23:05:44:af:88:3f:
                    29:a9:86:ba:50:34:12:64:8b:a5:91:fc:d4:09:c6:
                    45:4e:e2:71:9a:26:a0:ee:61:ea:b5:70:33:3d:c5:
                    54:17:35:92:92:b2:e1:2b:ca:e1:6c:18:35:e8:08:
                    68:fe:04:00:20:d8:a3:61:33:1f:ad:4e:f5:c3:12:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:31:EF:F0:92:6E:0C:84:74:A5:34:98:D0:BE:83:27:C6:4C:84
            X509v3 Authority Key Identifier:
                keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:39:b2:01:90:7e:58:6d:a4:3c:3b:7c:5f:bb:af:f0:91:f5:
         45:f7:a1:26:50:8c:ff:60:25:56:36:da:65:2c:e9:17:29:a6:
         bd:e4:ad:86:85:b8:7e:3f:64:af:98:cf:e6:f8:16:57:36:12:
         51:4c:0f:3a:3c:09:35:27:6c:14:c7:04:ff:f6:04:9e:48:cd:
         cf:20:f6:6a:83:d8:c7:69:38:b0:e9:59:ab:ef:88:8b:f3:d8:
         41:43:fb:2f:30:d0:0e:31:82:93:2b:66:4d:37:28:c8:60:4e:
         80:ab:49:e5:86:e0:b2:e3:52:2b:05:3e:50:f6:c1:c3:3d:f5:
         04:e8:7e:54:d2:13:24:be:d2:50:cf:11:ca:d5:c2:b4:3a:6a:
         5d:eb:60:58:0f:af:ff:fc:b9:45:76:9d:21:e9:3a:69:1c:78:
         3a:63:1b:37:94:b4:65:43:1e:80:90:41:bd:de:2f:af:bd:38:
         1b:17:a2:a3:b2:68:ef:04:a2:f7:a8:ff:7d:f5:cc:48:71:c1:
         53:8b:4a:a2:ae:64:7a:a7:bf:3f:3e:4c:a8:0d:fb:23:73:68:
         ee:91:41:91:cf:ab:78:de:e4:9a:de:07:86:41:d9:ae:64:9f:
         07:59:9b:4d:75:d6:5d:0c:fc:f5:40:3d:67:f3:88:9e:87:fd:
         5f:b1:4e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0nBRJq0ZURkoVDxyKlkgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD
EyhlMTAzMzFlZmYwOTI2ZTBjODQ3NGE1MzQ5OGQwYmU4MzI3YzY0Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMkVMnOOJUONK9jFXehI1bWwyL09
7c/zOaDQo5GpHAKoK4UrIB4z9ftEFGCQvvuIg5sL2Bq3Gg+k9jk+Btug2/0/7JEn
1iiBu9n0wLZyL7WNUQnlZclv/+qwVVIxFg0yZzCUOycbnnHogyMBqXs9/zZ//WHH
33e4txoi0g4hY9DidK4V9xW//Ktp6XqVEvSCV6EiqMEkAYhTwvqZrYFBXQJ4w4sf
lqnzxCJH27np1YY2Wl5BGEqTAnegTmIjBUSviD8pqYa6UDQSZIulkfzUCcZFTuJx
miag7mHqtXAzPcVUFzWSkrLhK8rhbBg16Aho/gQAINijYTMfrU71wxJHFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEDMe/wkm4MhHSlNJjQvoMnxkyEMB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjmyAZB+
WG2kPDt8X7uv8JH1RfehJlCM/2AlVjbaZSzpFymmveSthoW4fj9kr5jP5vgWVzYS
UUwPOjwJNSdsFMcE//YEnkjNzyD2aoPYx2k4sOlZq++Ii/PYQUP7LzDQDjGCkytm
TTcoyGBOgKtJ5YbgsuNSKwU+UPbBwz31BOh+VNITJL7SUM8RytXCtDpqXetgWA+v
//y5RXadIek6aRx4OmMbN5S0ZUMegJBBvd4vr704Gxeio7Jo7wSi96j/ffXMSHHB
U4tKoq5keqe/Pz5MqA37I3No7pFBkc+reN7kmt4HhkHZrmSfB1mbTXXWXQz89UA9
Z/OInof9X7FOMg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:32 2025 by rpki-client