This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File:                     rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier:          METJLwfrWAkS4BDZJs6pWcIL3O9Tr1REsSfUyKNd30k=
Subject key identifier:   16:AD:8E:AD:11:2D:51:2F:A9:48:F8:75:34:A6:EE:AD:97:DF:FF:74
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer:       /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial:       019B2965515D0464685E6D1D05BB924ACEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number:          0C29
Signing time:             Tue 16 Dec 2025 23:01:04 +0000
Manifest this update:     Tue 16 Dec 2025 23:01:04 +0000
Manifest next update:     Wed 17 Dec 2025 23:01:04 +0000
Files and hashes:         1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
                          2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: 4iEh1iTanv+9pvXh3btEiwN5hD7LORAWTFkXhEFAgvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:65:51:5d:04:64:68:5e:6d:1d:05:bb:92:4a:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
        Validity
            Not Before: Dec 16 23:01:04 2025 GMT
            Not After : Dec 17 23:01:04 2025 GMT
        Subject: CN=16ad8ead112d512fa948f87534a6eead97dfff74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:70:11:5c:ee:25:f1:dd:27:d1:65:86:fa:
                    14:b7:41:25:16:9e:8c:5d:7e:54:f6:06:07:67:47:
                    8f:fe:25:08:1a:3b:b0:13:d3:0a:4e:10:49:34:a6:
                    67:34:dc:c3:2a:94:81:2f:e3:a5:93:9c:d4:d3:5e:
                    9a:93:09:44:82:b9:92:0a:a8:28:84:ad:5c:d5:e2:
                    c0:8c:43:24:78:73:37:f0:69:f8:80:45:2b:2b:17:
                    bb:65:9a:66:03:32:48:43:a5:f4:5f:0b:61:06:36:
                    14:b1:72:15:d3:88:cb:1f:b4:fa:3b:59:ec:a5:a1:
                    c2:b8:69:1f:89:b6:5d:e7:ba:08:07:ea:d3:d6:33:
                    0a:36:fb:09:bd:9b:6c:a3:f6:3c:a0:22:7a:2d:e9:
                    b9:ab:74:1f:04:2f:7d:fd:7c:5d:0e:bc:5a:d2:50:
                    d7:bb:7f:98:7a:c3:2e:ce:2a:dd:1c:68:96:7d:45:
                    1d:ce:59:f4:07:19:62:7d:14:00:44:07:bc:c1:e7:
                    6d:f5:d9:43:ff:c7:7c:9f:fb:00:78:2d:57:e4:2f:
                    48:9c:0d:c2:26:8c:3e:56:9e:ae:a4:dd:3e:e2:0e:
                    8f:60:00:ad:51:c5:ac:3f:40:f9:1c:8c:35:0b:62:
                    3e:fc:8d:af:a0:2a:0b:7d:69:99:c6:3e:86:3c:2e:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:8E:AD:11:2D:51:2F:A9:48:F8:75:34:A6:EE:AD:97:DF:FF:74
            X509v3 Authority Key Identifier:
                keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:83:f1:64:82:c0:45:7e:28:61:3b:6c:09:0c:b3:e2:55:
         bd:86:79:6a:93:54:41:af:d4:87:db:e3:4d:8a:8c:18:58:46:
         c9:78:7f:70:7f:b6:4d:02:13:07:3b:5f:3f:0a:5d:65:36:35:
         0a:36:8d:19:f2:f9:d4:79:c3:aa:d0:27:64:4a:88:f8:71:a9:
         70:1d:06:49:7e:d8:35:e8:ac:3f:a7:3e:a8:4e:22:d0:f5:3e:
         85:0f:eb:54:bd:e6:15:8d:a7:78:f2:f1:c5:de:38:30:4c:79:
         1d:b1:02:ed:9d:e5:2b:87:39:1f:c3:63:cb:94:75:ae:76:70:
         a9:71:e4:31:70:ff:eb:73:97:7b:6f:97:fd:57:44:fb:83:e6:
         15:54:41:04:18:09:26:85:0d:22:a0:01:5d:6f:f3:1f:99:8a:
         6c:f5:ea:f3:01:f5:e5:1c:d6:45:72:af:12:12:2e:d9:ac:4c:
         9e:71:6e:2f:5f:56:6a:28:1d:e8:ac:b9:f3:94:d4:53:ef:16:
         ce:ff:df:f6:3b:6b:14:5a:c2:ca:02:e6:12:1f:45:39:de:2a:
         1b:03:00:d0:79:79:3a:c4:df:3d:49:1f:61:4c:c9:db:9f:70:
         04:f6:7b:ec:0c:bd:c8:a6:3f:a9:af:53:b0:20:77:cc:61:b5:
         be:d8:3e:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZspZVFdBGRoXm0dBbuSSs6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNGJkZDllOTdmMjEwMzcwY2MzMDEyNTdhYzE1ZmFlYjhm
YTUyNGUwHhcNMjUxMjE2MjMwMTA0WhcNMjUxMjE3MjMwMTA0WjAzMTEwLwYDVQQD
EygxNmFkOGVhZDExMmQ1MTJmYTk0OGY4NzUzNGE2ZWVhZDk3ZGZmZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFlwEVzuJfHdJ9FlhvoUt0ElFp6M
XX5U9gYHZ0eP/iUIGjuwE9MKThBJNKZnNNzDKpSBL+Olk5zU016akwlEgrmSCqgo
hK1c1eLAjEMkeHM38Gn4gEUrKxe7ZZpmAzJIQ6X0XwthBjYUsXIV04jLH7T6O1ns
paHCuGkfibZd57oIB+rT1jMKNvsJvZtso/Y8oCJ6Lem5q3QfBC99/XxdDrxa0lDX
u3+YesMuzirdHGiWfUUdzln0BxlifRQARAe8wedt9dlD/8d8n/sAeC1X5C9InA3C
Jow+Vp6upN0+4g6PYACtUcWsP0D5HIw1C2I+/I2voCoLfWmZxj6GPC6XcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBatjq0RLVEvqUj4dTSm7q2X3/90MB8GA1UdIwQY
MBaAFKxL3Z6X8hA3DMMBJXrBX664+lJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQt
MTRiMGU4YzRlOGU3LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQtMTRiMGU4YzRlOGU3
LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxKD8WSC
wEV+KGE7bAkMs+JVvYZ5apNUQa/Uh9vjTYqMGFhGyXh/cH+2TQITBztfPwpdZTY1
CjaNGfL51HnDqtAnZEqI+HGpcB0GSX7YNeisP6c+qE4i0PU+hQ/rVL3mFY2nePLx
xd44MEx5HbEC7Z3lK4c5H8Njy5R1rnZwqXHkMXD/63OXe2+X/VdE+4PmFVRBBBgJ
JoUNIqABXW/zH5mKbPXq8wH15RzWRXKvEhIu2axMnnFuL19Waigd6Ky585TUU+8W
zv/f9jtrFFrCygLmEh9FOd4qGwMA0Hl5OsTfPUkfYUzJ259wBPZ77Ay9yKY/qa9T
sCB3zGG1vtg+sg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 06:13:12 2025 by rpki-client