This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File:                     m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier:          vyR980LFqDIOBR1eE/ncncHe6yODjlQeFyb9KYzjsTE=
Subject key identifier:   B8:ED:4B:A3:1E:E2:84:D5:01:DB:C9:2E:6F:61:74:86:11:AA:79:B5
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer:       /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial:       019AF2772A64715A741A50CD36C3D6559ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 07:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:27 +0000
Files and hashes:         1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
                          2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
                          3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: ARch5GHG/BswVozUwYordZ9pAB4OllKLSh5N9LS+UN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:2a:64:71:5a:74:1a:50:cd:36:c3:d6:55:9a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
        Validity
            Not Before: Dec  6 07:01:27 2025 GMT
            Not After : Dec  7 07:01:27 2025 GMT
        Subject: CN=b8ed4ba31ee284d501dbc92e6f61748611aa79b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:66:df:e7:e0:52:f0:8f:58:a4:e6:24:d2:
                    f4:c8:1c:cb:6e:52:1d:07:bc:13:32:72:80:c6:54:
                    64:64:81:56:75:28:6a:5a:8c:09:be:e0:f6:40:5c:
                    55:99:3e:96:cd:d5:d9:13:43:64:b1:f4:f7:77:73:
                    ab:67:e7:ea:ff:96:d9:d5:ba:e7:46:4f:df:4e:d8:
                    c6:d6:64:9a:29:07:3b:70:48:6b:19:14:31:86:fb:
                    1f:0f:0e:ec:87:f0:1d:b9:97:14:cf:7e:76:7a:cd:
                    30:f8:7d:78:0f:53:0a:2a:93:0d:b5:5e:f7:41:77:
                    0c:fc:61:a8:77:0e:58:9d:3f:a5:61:17:b2:de:e2:
                    2e:e7:e2:b7:dc:9e:e3:30:41:b1:97:3c:ee:ae:74:
                    db:5f:32:73:b5:c1:e2:2d:25:9e:7c:1b:af:70:12:
                    ff:2a:27:62:51:3a:48:f6:7b:9d:f0:6a:26:de:5e:
                    b1:70:c8:d0:9e:63:7b:fb:ac:d5:33:de:d1:9a:5c:
                    d9:03:1e:18:c7:0d:a1:31:53:f3:a7:3d:e9:70:d4:
                    ea:f4:15:f9:02:c1:f2:3c:97:bc:42:6b:6c:42:de:
                    3f:98:19:c6:61:46:a3:dc:f6:44:a3:0e:48:d7:93:
                    c9:38:55:b4:85:11:a2:b2:7c:9f:6d:52:39:df:73:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:4B:A3:1E:E2:84:D5:01:DB:C9:2E:6F:61:74:86:11:AA:79:B5
            X509v3 Authority Key Identifier:
                keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5c:21:e3:64:7e:e1:60:72:e6:bc:50:a3:2d:ec:2e:8a:8f:
         52:84:a3:d8:4c:e1:31:65:f3:18:17:57:da:a5:05:0f:4a:c4:
         8c:64:e9:32:55:77:5e:1d:2a:cd:99:3e:85:20:16:36:d0:a6:
         12:18:6d:e8:1a:e2:45:76:2c:53:57:05:2e:b8:e9:98:95:ae:
         f4:0f:62:39:64:bd:77:67:22:ab:10:af:7f:d7:2c:08:49:37:
         26:49:0d:dd:93:71:37:4d:18:d4:33:f9:e9:de:2e:1c:b1:8f:
         10:c8:48:44:a9:68:c9:78:d5:90:e3:63:eb:bc:04:a8:0c:d1:
         5e:d4:29:55:7d:6b:6c:6c:28:a7:72:b4:e5:88:c7:5b:30:33:
         55:3f:7a:a5:b8:84:02:d5:72:d4:23:c7:35:38:24:0f:44:4c:
         ea:f9:e0:1e:99:fa:4a:0f:4e:84:6a:23:f0:de:31:11:0a:42:
         55:84:14:5c:ef:e0:a6:f0:6f:09:53:1d:ca:99:08:3c:e0:80:
         72:d1:b8:fc:19:16:ef:07:64:7e:47:e9:4a:a4:24:a1:32:a2:
         f5:e6:4e:4c:8d:cb:57:4a:ee:d7:1a:bb:5a:53:2d:19:7b:a4:
         07:5b:8b:cd:7c:bc:67:f4:d1:68:be:46:1c:ad:35:9e:78:a6:
         f3:03:a2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydypkcVp0GlDNNsPWVZq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3
Njc1NTMwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD
EyhiOGVkNGJhMzFlZTI4NGQ1MDFkYmM5MmU2ZjYxNzQ4NjExYWE3OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxm3+fgUvCPWKTmJNL0yBzLblId
B7wTMnKAxlRkZIFWdShqWowJvuD2QFxVmT6WzdXZE0NksfT3d3OrZ+fq/5bZ1brn
Rk/fTtjG1mSaKQc7cEhrGRQxhvsfDw7sh/AduZcUz352es0w+H14D1MKKpMNtV73
QXcM/GGodw5YnT+lYRey3uIu5+K33J7jMEGxlzzurnTbXzJztcHiLSWefBuvcBL/
KidiUTpI9nud8Gom3l6xcMjQnmN7+6zVM97RmlzZAx4Yxw2hMVPzpz3pcNTq9BX5
AsHyPJe8QmtsQt4/mBnGYUaj3PZEow5I15PJOFW0hRGisnyfbVI533NVtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjtS6Me4oTVAdvJLm9hdIYRqnm1MB8GA1UdIwQY
MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt
YzgxNzQzYjJjYWU2LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2
LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFwh42R+
4WBy5rxQoy3sLoqPUoSj2EzhMWXzGBdX2qUFD0rEjGTpMlV3Xh0qzZk+hSAWNtCm
Ehht6BriRXYsU1cFLrjpmJWu9A9iOWS9d2ciqxCvf9csCEk3JkkN3ZNxN00Y1DP5
6d4uHLGPEMhIRKloyXjVkONj67wEqAzRXtQpVX1rbGwop3K05YjHWzAzVT96pbiE
AtVy1CPHNTgkD0RM6vngHpn6Sg9OhGoj8N4xEQpCVYQUXO/gpvBvCVMdypkIPOCA
ctG4/BkW7wdkfkfpSqQkoTKi9eZOTI3LV0ru1xq7WlMtGXukB1uLzXy8Z/TRaL5G
HK01nnim8wOiYg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:43:32 2025 by rpki-client