This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          2YKdKTPwFdn01fqWC6irALZBM+4SSJSl0SUrWFA9YOs=
Subject key identifier:   92:40:6F:2A:80:FB:04:A7:9E:7B:E5:1E:0D:93:64:1D:07:35:07:1B
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       019AF2773092A841FCDC9A982323ED35F6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          0706
Signing time:             Sat 06 Dec 2025 07:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:28 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: UzBjyXrjUV5OHfmQBPtuVar9F0fardCzcUCsdVFI53Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:30:92:a8:41:fc:dc:9a:98:23:23:ed:35:f6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: Dec  6 07:01:28 2025 GMT
            Not After : Dec  7 07:01:28 2025 GMT
        Subject: CN=92406f2a80fb04a79e7be51e0d93641d0735071b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:e6:f8:4e:af:d9:34:a5:04:f8:1a:9f:5c:
                    17:d1:b4:ba:1a:6e:e1:6e:17:91:54:14:4a:b5:a5:
                    70:7f:d7:48:f5:be:24:ce:16:d7:ed:e4:18:20:a5:
                    ea:a2:48:c3:c6:19:66:3c:84:26:df:cb:4b:ed:57:
                    30:0c:e5:9b:11:68:9f:2b:7a:94:d2:4a:df:70:ea:
                    b8:47:4f:a5:08:0d:7e:ab:f9:10:bb:1b:1b:5d:bd:
                    f0:b0:54:a9:05:17:c1:5e:b6:0a:94:16:88:6e:f4:
                    23:c9:69:92:d1:8b:60:ad:49:1b:de:bd:44:23:f5:
                    7c:2a:9f:ad:2b:4e:36:90:30:29:03:71:6f:79:d2:
                    e1:52:dc:a2:60:96:22:f1:a8:1f:f2:89:1d:7a:ef:
                    76:8f:07:65:90:f3:bb:ee:a0:12:ad:93:cd:51:aa:
                    38:57:e3:e4:c9:6a:7c:3d:4a:31:c4:72:10:77:f0:
                    da:5b:d1:22:fb:e9:25:71:9b:d3:53:ba:5f:e7:76:
                    b9:62:df:4a:0f:18:da:9e:37:e3:24:e1:89:74:e0:
                    be:ac:e2:2e:89:f0:f2:1b:3d:c6:ba:fa:0d:03:94:
                    14:be:29:93:c6:28:d9:2a:f6:31:00:ea:9c:1c:07:
                    ed:1d:39:73:ba:5a:b3:d5:ef:bb:89:ec:bb:4d:4f:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:6F:2A:80:FB:04:A7:9E:7B:E5:1E:0D:93:64:1D:07:35:07:1B
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:43:4c:54:22:b0:6d:2c:7b:72:ba:18:c9:3d:4a:5b:8c:2e:
         78:d1:37:dd:93:66:07:16:ed:be:7e:91:1e:3d:13:b8:35:39:
         73:84:97:38:1c:51:33:08:98:59:f1:e4:1a:a9:d9:e8:81:ae:
         df:22:e0:09:bf:26:95:a9:87:d5:24:d2:fa:40:11:d0:ba:ed:
         f6:b5:e6:a8:e5:7f:a8:53:23:e0:68:a2:95:9b:61:d7:da:8c:
         84:ad:1a:03:5a:cb:f3:66:89:ed:cb:3a:1a:f5:ed:e3:69:41:
         ef:c3:d4:34:77:55:2d:62:90:6e:cb:13:62:5d:71:8c:1d:0f:
         17:18:95:3f:90:d7:e5:26:5a:8d:0b:c5:74:74:e2:62:f5:21:
         fa:87:6f:e9:b6:f9:e9:15:3b:3d:3c:7f:b9:3c:b0:f5:2b:c8:
         3c:60:03:27:6c:08:d6:f4:ec:0d:4a:ce:aa:01:eb:14:99:c0:
         c8:9b:42:46:74:e6:bd:60:2b:6e:2e:98:85:17:ea:7c:f6:68:
         c8:bf:d2:bd:12:85:ce:68:b0:f2:04:e8:fb:5e:32:9d:6e:56:
         6f:21:2c:cd:5b:3f:b5:cc:b3:1b:25:7e:1e:b3:d6:c0:90:44:
         ec:f7:ba:10:ba:ad:af:38:7f:4a:ad:c1:1c:4e:25:ea:31:6d:
         45:e6:0b:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydzCSqEH83JqYIyPtNfbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDQ3ODRmYzJmNTZhZGFkZTdkYjc2MjMzZDEzNmVlOWI3
YmViYzcwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD
Eyg5MjQwNmYyYTgwZmIwNGE3OWU3YmU1MWUwZDkzNjQxZDA3MzUwNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWLm+E6v2TSlBPgan1wX0bS6Gm7h
bheRVBRKtaVwf9dI9b4kzhbX7eQYIKXqokjDxhlmPIQm38tL7VcwDOWbEWifK3qU
0krfcOq4R0+lCA1+q/kQuxsbXb3wsFSpBRfBXrYKlBaIbvQjyWmS0YtgrUkb3r1E
I/V8Kp+tK042kDApA3FvedLhUtyiYJYi8agf8okdeu92jwdlkPO77qASrZPNUao4
V+PkyWp8PUoxxHIQd/DaW9Ei++klcZvTU7pf53a5Yt9KDxjanjfjJOGJdOC+rOIu
ifDyGz3GuvoNA5QUvimTxijZKvYxAOqcHAftHTlzulqz1e+7iey7TU84+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJAbyqA+wSnnnvlHg2TZB0HNQcbMB8GA1UdIwQY
MBaAFKVEeE/C9Wra3n23YjPRNu6be+vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDIt
OGNiZWVmYzkyZjlhLzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDItOGNiZWVmYzkyZjlh
LzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskNMVCKw
bSx7croYyT1KW4wueNE33ZNmBxbtvn6RHj0TuDU5c4SXOBxRMwiYWfHkGqnZ6IGu
3yLgCb8mlamH1STS+kAR0Lrt9rXmqOV/qFMj4GiilZth19qMhK0aA1rL82aJ7cs6
GvXt42lB78PUNHdVLWKQbssTYl1xjB0PFxiVP5DX5SZajQvFdHTiYvUh+odv6bb5
6RU7PTx/uTyw9SvIPGADJ2wI1vTsDUrOqgHrFJnAyJtCRnTmvWArbi6YhRfqfPZo
yL/SvRKFzmiw8gTo+14ynW5WbyEszVs/tcyzGyV+HrPWwJBE7Pe6ELqtrzh/Sq3B
HE4l6jFtReYLQA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:14:38 2025 by rpki-client