This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File:                     IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier:          OjdZw2U2RBS+Fw+OI9bUGZ+YO5WwhKeza6KSWx/76Ck=
Subject key identifier:   6D:79:75:DE:F2:2E:CD:C0:C1:5D:D1:27:2F:04:D4:56:31:E0:D6:15
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer:       /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial:       019AF42E4A8BB6B933A4ED74778719AFF635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number:          058B
Signing time:             Sat 06 Dec 2025 15:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:05 +0000
Files and hashes:         1: 4qvZpbHlQrEVGaculmgT9y6fbp0.roa (hash: tCJqK90XfNlOzC+CJIY2YiVu1YRsdGe0qc+sYvxZZ4k=)
                          2: GCeJWQXp53i0_T9Els2HFdD580c.roa (hash: F4jM2A6o7cg7dalyRSsXPRHMxAUn8dJXwNlkzBZKjRk=)
                          3: Gx7WZJ-NdyF04pUk4gdMYoHuQzk.roa (hash: t6M0KFjILBRmG74F5TahE0UmVDYYLhcbj+iOGjxmViM=)
                          4: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: RiEF5mnkuIm1NCX26ZY8+UPWcRWGad+7cKJmKayTwKI=)
                          5: P8uTVptxd-UGzkymXhOkvbitcEU.roa (hash: 61AnrtiCoFhbr8PK6p0Fhr8c0CNn0nd06ZAGuQwz1l8=)
                          6: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (hash: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:4a:8b:b6:b9:33:a4:ed:74:77:87:19:af:f6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
        Validity
            Not Before: Dec  6 15:01:05 2025 GMT
            Not After : Dec  7 15:01:05 2025 GMT
        Subject: CN=6d7975def22ecdc0c15dd1272f04d45631e0d615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:0d:7c:e0:0f:dd:5e:f8:6b:b5:37:e9:6c:
                    ab:72:d7:b0:fb:61:c5:44:0c:70:06:dc:22:be:6c:
                    0c:73:a8:47:27:9f:b1:0e:af:b0:4a:ec:5a:b3:5f:
                    9c:e1:bc:53:0d:45:7a:04:d8:69:c6:d1:8e:b9:45:
                    b3:67:3d:53:78:b6:46:af:dd:df:c1:a5:2d:44:9b:
                    04:01:f5:1e:06:fa:1c:a3:8d:0f:6c:9a:c7:2f:f0:
                    60:7e:39:bb:aa:cb:fe:06:de:6a:d1:5b:65:73:3b:
                    b8:f2:d8:7c:c5:97:36:ea:74:f4:24:61:a7:17:fd:
                    9c:f7:80:a5:f1:ea:73:62:9d:b6:d7:8e:22:6c:d5:
                    7f:87:63:dc:25:a8:12:34:b9:4b:08:fd:1a:ec:20:
                    3a:db:b7:d9:45:ce:59:f9:c5:e1:ad:74:79:5a:54:
                    f0:59:4f:24:96:23:5c:12:7f:b5:cc:67:70:2a:fa:
                    b7:15:42:5e:65:fd:d4:e8:73:ce:34:a3:72:6f:c0:
                    94:f5:af:0c:be:2b:15:80:41:5e:26:f4:aa:bf:92:
                    ad:93:bf:2f:2f:8e:6d:84:13:1f:8b:3d:90:c7:53:
                    da:8b:f7:c3:9f:34:88:b1:b3:01:bb:2f:7e:9e:c4:
                    98:4f:68:8a:7b:54:b1:ae:72:b4:a1:74:1b:f6:92:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:75:DE:F2:2E:CD:C0:C1:5D:D1:27:2F:04:D4:56:31:E0:D6:15
            X509v3 Authority Key Identifier:
                keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a1:61:36:79:87:18:df:ff:b8:ff:cf:30:c5:d9:fa:22:56:
         1c:27:2c:35:28:22:d7:50:90:14:b1:31:38:f7:be:14:73:ce:
         d0:e0:21:aa:21:e5:cb:12:5d:9c:46:c2:88:3f:5e:b7:97:75:
         0a:3f:b3:35:bd:de:df:7c:78:09:40:68:02:17:9f:8b:d1:35:
         de:40:6f:19:ce:60:ed:c9:5a:8b:21:39:40:40:7b:6a:76:ec:
         e5:d4:a4:63:fd:8b:ce:f5:76:eb:39:f0:6c:d1:bc:8a:71:de:
         dd:1a:52:51:1a:f5:89:4f:e0:9e:37:2c:bd:d7:16:85:be:d2:
         80:94:8a:28:cb:db:57:ed:9a:9e:6b:82:37:b5:f9:64:91:7b:
         2b:ee:24:ef:82:14:d6:36:b5:18:ef:8c:68:ca:c9:24:ed:2f:
         2a:54:bc:b1:ef:85:9b:ae:c8:6b:b3:0e:62:35:dd:e2:ca:65:
         fb:a1:c1:00:c1:73:c1:d9:fd:69:cd:13:77:dc:31:2b:c5:5c:
         b6:0d:f4:ea:a7:ef:ef:da:b9:b7:6e:e2:91:74:4d:4e:18:8c:
         89:3e:54:01:80:fd:69:d3:1d:0f:e4:ac:65:c3:46:37:4c:5a:
         8c:b8:74:a5:9b:fa:47:45:30:ad:18:08:32:ca:86:0e:3d:3f:
         2c:5d:6a:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LkqLtrkzpO10d4cZr/Y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5
NDg2MjcwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD
Eyg2ZDc5NzVkZWYyMmVjZGMwYzE1ZGQxMjcyZjA0ZDQ1NjMxZTBkNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme8NfOAP3V74a7U36Wyrctew+2HF
RAxwBtwivmwMc6hHJ5+xDq+wSuxas1+c4bxTDUV6BNhpxtGOuUWzZz1TeLZGr93f
waUtRJsEAfUeBvoco40PbJrHL/Bgfjm7qsv+Bt5q0Vtlczu48th8xZc26nT0JGGn
F/2c94Cl8epzYp22144ibNV/h2PcJagSNLlLCP0a7CA627fZRc5Z+cXhrXR5WlTw
WU8kliNcEn+1zGdwKvq3FUJeZf3U6HPONKNyb8CU9a8MvisVgEFeJvSqv5Ktk78v
L45thBMfiz2Qx1Pai/fDnzSIsbMBuy9+nsSYT2iKe1SxrnK0oXQb9pJZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG15dd7yLs3AwV3RJy8E1FYx4NYVMB8GA1UdIwQY
MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt
NTkzM2EwOWY3MmQxLzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx
LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKFhNnmH
GN//uP/PMMXZ+iJWHCcsNSgi11CQFLExOPe+FHPO0OAhqiHlyxJdnEbCiD9et5d1
Cj+zNb3e33x4CUBoAhefi9E13kBvGc5g7claiyE5QEB7anbs5dSkY/2LzvV26znw
bNG8inHe3RpSURr1iU/gnjcsvdcWhb7SgJSKKMvbV+2anmuCN7X5ZJF7K+4k74IU
1ja1GO+MaMrJJO0vKlS8se+Fm67Ia7MOYjXd4spl+6HBAMFzwdn9ac0Td9wxK8Vc
tg306qfv79q5t27ikXRNThiMiT5UAYD9adMdD+SsZcNGN0xajLh0pZv6R0UwrRgI
MsqGDj0/LF1q5Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:27 2025 by rpki-client