This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File:                     htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier:          XqBbNzdhx+UqoGSsV46PN9B9iKIS0NtDDo3qI7qbUv0=
Subject key identifier:   BE:7C:BA:DF:4E:E4:52:3A:32:8A:8A:51:15:30:7B:4E:8E:DB:4D:F8
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer:       /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial:       019AF50A76EE84890AB1393F7875683BD06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number:          8C
Signing time:             Sat 06 Dec 2025 19:01:34 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:34 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:34 +0000
Files and hashes:         1: 8jP_y3ejZgoctYO3RIyWsm1WwTY.roa (hash: ecd4E/hh4r+6kZxHuFwVi+mLNAKKO0mfpn1+ByWy+90=)
                          2: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (hash: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=)
                          3: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: WI7RmG1orCOGpIVClCCsI0TIxMzGRg6dL4OWfKmaQ5A=)
                          4: kcL34WnZYMdN4SVhN2PeVdwWvgo.roa (hash: hEzKI9j+KADlA8KNZpHMbM3OEdQSPR+S9HcqTPPWTXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:76:ee:84:89:0a:b1:39:3f:78:75:68:3b:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d963844f8205d1369434531c998600c15781a1
        Validity
            Not Before: Dec  6 19:01:34 2025 GMT
            Not After : Dec  7 19:01:34 2025 GMT
        Subject: CN=be7cbadf4ee4523a328a8a5115307b4e8edb4df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:ad:52:48:20:6c:a8:69:60:36:20:46:ec:
                    18:9e:07:e0:4d:32:97:17:e8:69:06:d4:de:06:a3:
                    91:65:f0:b9:2c:a2:d6:b2:9f:f7:22:de:d1:f9:a0:
                    3b:46:66:0e:e1:70:e1:7a:74:53:aa:fa:90:9e:f0:
                    e6:29:1f:45:ab:0e:37:b5:ec:6b:ee:89:72:1b:6a:
                    35:98:5d:06:5f:97:16:93:7a:27:ad:5b:86:f4:ab:
                    b7:cc:50:58:90:16:5a:41:8e:8b:a7:51:3a:c0:5f:
                    23:7f:98:ae:53:31:99:94:41:19:73:9c:84:85:78:
                    e5:2e:22:c2:e8:62:f3:98:44:15:bc:68:49:c8:e1:
                    dc:94:8b:73:e7:ef:ce:8b:b3:8e:65:85:6b:65:1a:
                    f4:0f:7c:3e:1f:ba:e4:bb:97:8a:0b:b9:a7:14:9b:
                    04:b5:69:b9:2e:ad:a6:42:05:61:12:3c:0e:10:5d:
                    7f:55:46:e3:1d:ad:ea:cb:e6:71:a3:b5:0b:c9:76:
                    05:be:f2:ba:f8:18:cd:bb:87:ac:fa:67:18:b0:e5:
                    e8:d1:85:1e:57:15:1f:50:31:34:1a:76:68:c0:ec:
                    f1:4d:cd:2b:83:55:59:d9:2b:5c:b8:3c:5d:f3:1a:
                    da:ca:e5:e3:40:65:a9:b8:6e:4b:2c:ff:cb:7b:75:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7C:BA:DF:4E:E4:52:3A:32:8A:8A:51:15:30:7B:4E:8E:DB:4D:F8
            X509v3 Authority Key Identifier:
                keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:18:f5:d6:3e:67:0a:c3:dc:80:8a:9c:cc:99:39:e8:ff:
         fe:c2:13:7f:e7:d0:d6:bf:f5:73:49:60:c8:49:7b:75:65:02:
         a5:76:54:d0:f1:e7:9b:73:db:07:43:8a:0c:18:2c:8e:b3:60:
         ad:79:41:0f:19:14:52:4d:a6:78:bb:c5:c5:ea:c2:15:30:3c:
         98:24:f1:2e:f0:61:10:f5:6f:af:0d:90:cc:7b:e4:15:5d:49:
         d3:cd:2d:2a:ca:f8:94:c6:8c:88:89:1b:9f:62:eb:51:38:0a:
         d9:37:b6:fe:40:7e:8b:23:02:0e:86:37:0d:92:a7:60:85:77:
         43:d5:a6:06:d3:cb:3e:61:03:7b:38:73:64:15:3c:8b:58:00:
         d0:df:95:02:36:04:b1:6d:39:16:7f:55:ad:3b:21:15:f5:ec:
         e7:fd:9d:4f:8b:f1:be:20:ab:9e:20:ee:30:02:84:a9:08:b8:
         cc:c5:8e:a3:67:33:a2:e2:e9:c9:0a:16:c4:0b:6b:0f:87:89:
         67:c8:72:c7:ed:99:2a:20:1f:41:18:9e:f6:96:d2:40:66:74:
         eb:99:ec:d2:1a:58:cf:3e:1f:62:5e:0f:51:2b:36:9d:1e:c2:
         81:d2:9f:f5:f4:33:06:d7:3e:0b:c4:43:2f:6a:92:02:51:d8:
         e6:9a:23:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1CnbuhIkKsTk/eHVoO9BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDk2Mzg0NGY4MjA1ZDEzNjk0MzQ1MzFjOTk4NjAwYzE1
NzgxYTEwHhcNMjUxMjA2MTkwMTM0WhcNMjUxMjA3MTkwMTM0WjAzMTEwLwYDVQQD
EyhiZTdjYmFkZjRlZTQ1MjNhMzI4YThhNTExNTMwN2I0ZThlZGI0ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDmtUkggbKhpYDYgRuwYngfgTTKX
F+hpBtTeBqORZfC5LKLWsp/3It7R+aA7RmYO4XDhenRTqvqQnvDmKR9Fqw43texr
7olyG2o1mF0GX5cWk3onrVuG9Ku3zFBYkBZaQY6Lp1E6wF8jf5iuUzGZlEEZc5yE
hXjlLiLC6GLzmEQVvGhJyOHclItz5+/Oi7OOZYVrZRr0D3w+H7rku5eKC7mnFJsE
tWm5Lq2mQgVhEjwOEF1/VUbjHa3qy+Zxo7ULyXYFvvK6+BjNu4es+mcYsOXo0YUe
VxUfUDE0GnZowOzxTc0rg1VZ2StcuDxd8xrayuXjQGWpuG5LLP/Le3XzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL58ut9O5FI6MoqKURUwe06O2034MB8GA1UdIwQY
MBaAFIbZY4RPggXRNpQ0UxyZhgDBV4GhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2Yt
NzgxODlkMDE1Mjg2LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2YtNzgxODlkMDE1Mjg2
LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFIY9dY+
ZwrD3ICKnMyZOej//sITf+fQ1r/1c0lgyEl7dWUCpXZU0PHnm3PbB0OKDBgsjrNg
rXlBDxkUUk2meLvFxerCFTA8mCTxLvBhEPVvrw2QzHvkFV1J080tKsr4lMaMiIkb
n2LrUTgK2Te2/kB+iyMCDoY3DZKnYIV3Q9WmBtPLPmEDezhzZBU8i1gA0N+VAjYE
sW05Fn9VrTshFfXs5/2dT4vxviCrniDuMAKEqQi4zMWOo2czouLpyQoWxAtrD4eJ
Z8hyx+2ZKiAfQRie9pbSQGZ065ns0hpYzz4fYl4PUSs2nR7CgdKf9fQzBtc+C8RD
L2qSAlHY5pojcw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:32 2025 by rpki-client