This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          okWbqA1MsVsPelX6axDcHgQZHYrE43/JDi0Ye6hnSh0=
Subject key identifier:   1F:14:58:5A:E6:CD:06:8A:11:2E:28:8F:BB:91:B0:27:97:7E:B3:8B
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       019AF3F7C30AB082F43C7EB70091F9DAB6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 14:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:31 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:31 +0000
Files and hashes:         1: 04pxtS7w1egRSF27QFM1O16OMv8.roa (hash: zo/xXEQHZIy6pzs5KsP7ry+qVYGgePwKJEivqzXLtqg=)
                          2: LwQOFHs6kgQGzeJckqlPRpWEZeE.roa (hash: BOiqAFM8xh37v4p/h8RnYN5W7afQwtMq4mWjCnwuOcc=)
                          3: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: uYSdmUirLkJWK8KHSupOeJt9EjYZJLn6n/ZoRCfHBec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:c3:0a:b0:82:f4:3c:7e:b7:00:91:f9:da:b6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Dec  6 14:01:31 2025 GMT
            Not After : Dec  7 14:01:31 2025 GMT
        Subject: CN=1f14585ae6cd068a112e288fbb91b027977eb38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:25:c8:b4:dd:77:c8:95:a4:a8:7a:a9:58:
                    0b:85:a7:92:c8:02:fd:7c:ff:de:bd:7b:f8:0b:92:
                    ff:0d:73:e8:b8:0d:b8:8a:7d:97:25:4f:a8:7c:5b:
                    20:5e:18:02:86:f9:ac:1e:84:9d:17:69:10:e0:1c:
                    24:ab:51:16:9c:52:1f:f1:59:60:ff:0d:61:78:99:
                    ac:11:bb:73:3a:2e:c3:a6:ed:4b:a0:1e:56:bd:48:
                    f1:99:6d:4d:6e:68:1b:bb:5f:22:6e:9d:89:3d:a9:
                    f8:53:94:f5:af:d1:22:f5:b7:61:ec:5a:62:59:31:
                    e2:3e:2a:fe:00:54:5e:f4:49:0c:fd:47:5e:f5:63:
                    ac:e0:48:ea:74:04:91:e8:3a:39:15:03:76:42:f0:
                    8f:4b:4f:74:1f:f9:16:9c:51:94:61:23:1f:85:60:
                    69:19:56:67:ed:aa:85:da:96:bb:44:02:d9:d8:45:
                    56:5c:66:49:42:d6:e7:1e:54:18:ba:f4:d3:40:66:
                    39:16:82:08:0e:1b:62:de:71:c9:59:8d:05:91:6a:
                    4d:e9:34:04:8c:97:18:30:df:6c:e0:0b:15:f0:ad:
                    08:86:54:d9:00:fa:c0:c4:0a:9e:ef:69:09:08:5b:
                    64:24:6c:7c:1c:29:20:37:15:0d:a1:18:30:83:8c:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:14:58:5A:E6:CD:06:8A:11:2E:28:8F:BB:91:B0:27:97:7E:B3:8B
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:67:39:60:2d:6c:44:9b:45:c6:30:18:23:37:c2:12:be:
         41:01:cc:11:34:ac:c3:1b:e5:cd:e2:ee:72:82:81:e4:d4:2e:
         1a:a6:e8:e0:ee:58:d9:8a:c8:d8:fc:67:ca:af:ca:b9:01:5f:
         90:6b:fe:0e:32:4f:27:cd:a1:75:bd:c6:d3:93:57:13:c5:14:
         1a:03:58:cf:f0:52:ad:35:17:be:96:87:96:8e:f8:99:dc:05:
         81:67:18:a2:dc:38:bd:ea:77:6a:7f:11:21:45:48:4a:36:ad:
         b4:7c:43:8f:3f:36:b7:0c:f5:3f:de:8b:10:27:95:c2:df:23:
         04:42:a5:44:17:05:d2:75:af:9a:b5:50:89:53:cc:37:24:a4:
         ae:16:53:ae:db:49:11:a4:2a:51:ae:bf:60:ab:c4:88:3c:0d:
         14:e2:46:0a:6d:d2:6c:01:a9:88:99:b1:04:45:60:b0:f9:bd:
         d0:82:32:7f:f8:3a:1c:dc:59:63:15:73:72:53:c0:4e:c0:78:
         b3:19:cf:e9:06:4b:0e:c0:6f:54:ea:88:78:a1:3f:10:35:fa:
         3f:2a:aa:ae:04:cd:66:9a:94:4c:61:84:40:a3:b3:7c:3f:91:
         17:7f:8a:b5:e7:d6:83:f4:9e:a3:a7:68:ad:d2:2d:98:70:fd:
         41:48:dd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz98MKsIL0PH63AJH52rbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4
Y2E5NTIwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD
EygxZjE0NTg1YWU2Y2QwNjhhMTEyZTI4OGZiYjkxYjAyNzk3N2ViMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFclyLTdd8iVpKh6qVgLhaeSyAL9
fP/evXv4C5L/DXPouA24in2XJU+ofFsgXhgChvmsHoSdF2kQ4Bwkq1EWnFIf8Vlg
/w1heJmsEbtzOi7Dpu1LoB5WvUjxmW1Nbmgbu18ibp2JPan4U5T1r9Ei9bdh7Fpi
WTHiPir+AFRe9EkM/Ude9WOs4EjqdASR6Do5FQN2QvCPS090H/kWnFGUYSMfhWBp
GVZn7aqF2pa7RALZ2EVWXGZJQtbnHlQYuvTTQGY5FoIIDhti3nHJWY0FkWpN6TQE
jJcYMN9s4AsV8K0IhlTZAPrAxAqe72kJCFtkJGx8HCkgNxUNoRgwg4xilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8UWFrmzQaKES4oj7uRsCeXfrOLMB8GA1UdIwQY
MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt
N2Y3ODZiYjM0MzQ0LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0
LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5lnOWAt
bESbRcYwGCM3whK+QQHMETSswxvlzeLucoKB5NQuGqbo4O5Y2YrI2Pxnyq/KuQFf
kGv+DjJPJ82hdb3G05NXE8UUGgNYz/BSrTUXvpaHlo74mdwFgWcYotw4vep3an8R
IUVISjattHxDjz82twz1P96LECeVwt8jBEKlRBcF0nWvmrVQiVPMNySkrhZTrttJ
EaQqUa6/YKvEiDwNFOJGCm3SbAGpiJmxBEVgsPm90IIyf/g6HNxZYxVzclPATsB4
sxnP6QZLDsBvVOqIeKE/EDX6PyqqrgTNZpqUTGGEQKOzfD+RF3+KtefWg/Seo6do
rdItmHD9QUjddA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:01:51 2025 by rpki-client