This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File:                     R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier:          005glrcc3Rj17wK7a+8g51MRt+BgSwIenZWvFV0jLic=
Subject key identifier:   B6:88:29:6F:C8:1F:1D:B4:4E:95:D7:C5:20:8F:71:7B:A8:CA:6C:57
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer:       /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial:       019AF6FA0F88A36BC0ADB4D21CC74916529C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number:          1764
Signing time:             Sun 07 Dec 2025 04:02:54 +0000
Manifest this update:     Sun 07 Dec 2025 04:02:54 +0000
Manifest next update:     Mon 08 Dec 2025 04:02:54 +0000
Files and hashes:         1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
                          2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: OXPW7ipg8K64+rSymaNxGrr8rRhxD1Ur52mfcdi4q7Q=)
                          3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:fa:0f:88:a3:6b:c0:ad:b4:d2:1c:c7:49:16:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
        Validity
            Not Before: Dec  7 04:02:54 2025 GMT
            Not After : Dec  8 04:02:54 2025 GMT
        Subject: CN=b688296fc81f1db44e95d7c5208f717ba8ca6c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:ac:62:fc:04:26:a0:81:1f:8a:49:fa:23:
                    12:93:ba:31:16:a3:5b:7d:1e:0b:08:ef:c5:ad:b8:
                    fe:ad:0a:38:0f:2b:86:b5:71:b5:c9:bd:30:70:0d:
                    ce:71:e5:f9:df:27:de:5c:f8:ea:ea:4c:79:74:78:
                    2a:27:b0:96:c6:92:45:c6:37:e5:82:96:02:0b:2e:
                    c1:e5:14:1c:dc:cb:68:e7:2a:9f:ab:ab:6c:e0:10:
                    a4:7e:a9:3b:19:e0:08:08:85:5b:e2:ca:f5:43:05:
                    cf:38:17:96:bf:31:7c:7a:74:a4:8a:7b:91:87:28:
                    c8:f1:47:9a:10:1f:c6:8b:3e:8d:ee:df:4a:37:3d:
                    19:45:d2:a4:8a:de:26:3f:26:14:31:9f:34:fc:4c:
                    de:4a:99:6f:5c:bd:3c:2c:39:90:38:4a:7b:3b:12:
                    ff:88:50:dc:79:64:09:e4:f8:b7:af:73:8b:b8:1d:
                    1f:57:e4:c2:b7:9b:8d:f0:da:1d:6d:35:19:1e:95:
                    d7:57:d2:33:1f:9f:39:7b:9f:ef:42:4c:6f:80:ff:
                    fb:f5:23:8e:2c:67:1b:31:4d:eb:61:e6:7e:89:ea:
                    4c:ad:db:b7:34:05:95:13:98:34:f4:de:3a:49:f0:
                    ea:3a:31:d6:35:e9:8f:6c:81:98:57:9c:c6:a1:ab:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:29:6F:C8:1F:1D:B4:4E:95:D7:C5:20:8F:71:7B:A8:CA:6C:57
            X509v3 Authority Key Identifier:
                keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:e0:b6:64:da:11:c9:6d:04:93:f9:98:33:6e:af:b6:06:
         59:25:86:54:f1:2d:61:12:64:77:27:55:a4:0b:55:bb:5b:0c:
         ba:db:c1:0d:9c:17:d0:99:0a:da:93:6d:b4:0f:64:5d:87:2d:
         7e:90:d8:8c:68:e7:b1:5f:2a:06:4d:bb:47:e2:ae:dd:aa:42:
         19:5a:f3:d7:56:81:3c:f6:13:d2:a8:65:1b:10:2c:63:96:75:
         df:72:58:d5:1e:2b:e4:e2:94:06:b2:fd:98:dc:05:32:66:bf:
         47:de:dc:9c:d8:05:51:81:da:17:24:3d:a5:33:8f:4c:7a:fb:
         99:84:c3:51:24:25:0c:b3:97:23:28:a1:4a:56:f0:9f:22:e1:
         ee:78:ed:c6:20:ec:0c:c5:c9:34:de:3e:92:ee:54:d7:9b:e0:
         12:37:42:34:62:32:f7:de:45:3d:c8:76:30:d3:30:ed:fc:80:
         08:1a:d7:10:cb:66:76:ee:10:f2:1e:4f:38:84:3d:54:e4:3d:
         54:23:12:b3:de:42:64:49:4a:8a:99:05:a9:e3:25:53:73:48:
         ad:90:fb:5a:9d:c4:2f:a2:a0:1e:7e:b7:84:e4:e3:61:71:ae:
         34:ed:e6:5b:c9:08:60:ad:49:a3:63:50:81:87:bb:34:70:17:
         b3:72:3c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2+g+Io2vArbTSHMdJFlKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy
YjAzYzIwHhcNMjUxMjA3MDQwMjU0WhcNMjUxMjA4MDQwMjU0WjAzMTEwLwYDVQQD
EyhiNjg4Mjk2ZmM4MWYxZGI0NGU5NWQ3YzUyMDhmNzE3YmE4Y2E2YzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM+sYvwEJqCBH4pJ+iMSk7oxFqNb
fR4LCO/Frbj+rQo4DyuGtXG1yb0wcA3OceX53yfeXPjq6kx5dHgqJ7CWxpJFxjfl
gpYCCy7B5RQc3Mto5yqfq6ts4BCkfqk7GeAICIVb4sr1QwXPOBeWvzF8enSkinuR
hyjI8UeaEB/Giz6N7t9KNz0ZRdKkit4mPyYUMZ80/EzeSplvXL08LDmQOEp7OxL/
iFDceWQJ5Pi3r3OLuB0fV+TCt5uN8NodbTUZHpXXV9IzH585e5/vQkxvgP/79SOO
LGcbMU3rYeZ+iepMrdu3NAWVE5g09N46SfDqOjHWNemPbIGYV5zGoavmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaIKW/IHx20TpXXxSCPcXuoymxXMB8GA1UdIwQY
MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt
Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx
LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdivgtmTa
EcltBJP5mDNur7YGWSWGVPEtYRJkdydVpAtVu1sMutvBDZwX0JkK2pNttA9kXYct
fpDYjGjnsV8qBk27R+Ku3apCGVrz11aBPPYT0qhlGxAsY5Z133JY1R4r5OKUBrL9
mNwFMma/R97cnNgFUYHaFyQ9pTOPTHr7mYTDUSQlDLOXIyihSlbwnyLh7njtxiDs
DMXJNN4+ku5U15vgEjdCNGIy995FPch2MNMw7fyACBrXEMtmdu4Q8h5POIQ9VOQ9
VCMSs95CZElKipkFqeMlU3NIrZD7Wp3EL6KgHn63hOTjYXGuNO3mW8kIYK1Jo2NQ
gYe7NHAXs3I8vQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:08:03 2025 by rpki-client