This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File:                     CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier:          OH1U1uIADremT3+D/IfSQ1m137BLvki6TtH1a1Bo07Q=
Subject key identifier:   05:8F:3F:60:63:4D:FA:AA:37:B8:31:7B:E4:60:1F:7B:54:3D:66:D6
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer:       /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial:       019AF209A01B44A8F7E3F232EA6CAD135CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number:          16FF
Signing time:             Sat 06 Dec 2025 05:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:48 +0000
Files and hashes:         1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: c7Q9Sw5aJqQlWD9dqROgQ7K+LT/db8bVXsNu14WYL6I=)
                          2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
                          3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:a0:1b:44:a8:f7:e3:f2:32:ea:6c:ad:13:5c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
        Validity
            Not Before: Dec  6 05:01:48 2025 GMT
            Not After : Dec  7 05:01:48 2025 GMT
        Subject: CN=058f3f60634dfaaa37b8317be4601f7b543d66d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:55:0a:a3:19:b5:15:5f:c5:d6:ce:8d:9f:
                    46:13:42:d0:1a:10:52:73:08:ea:ab:f2:33:e0:70:
                    7c:ec:1f:8b:4f:6f:14:50:16:b8:13:c1:a4:34:da:
                    60:f7:8f:34:44:0c:e8:4d:05:b7:5c:a4:7e:0c:7e:
                    13:b4:4e:88:98:30:69:92:55:b8:2f:08:b0:4b:d8:
                    f4:68:46:cb:ae:43:d2:9c:81:f7:23:53:66:5a:e3:
                    36:3a:18:5e:7a:1c:60:66:80:18:a7:e0:22:37:11:
                    a9:f0:d1:f1:25:c4:23:41:75:05:51:16:56:42:cf:
                    6b:07:29:32:66:fb:21:da:47:b1:78:b7:18:11:e1:
                    46:7e:7e:41:8c:cf:09:fc:56:59:4b:80:e7:01:d8:
                    cb:fd:0d:70:df:b3:4c:91:29:ae:4a:58:b6:fe:86:
                    bd:9e:39:42:c2:f0:47:d0:4c:ee:48:85:2a:aa:28:
                    fc:93:28:cd:86:8e:c1:7e:83:75:bb:81:5b:96:50:
                    8a:96:9a:63:e9:e3:69:24:7a:bd:5a:e2:a7:dd:fa:
                    bf:a6:49:b2:98:fd:53:67:06:4e:35:46:53:e9:e7:
                    b9:06:02:f8:fe:ac:5e:d6:2f:26:92:d6:68:c2:cc:
                    c9:de:16:5c:8f:7d:e5:8f:04:98:3c:40:eb:a7:b1:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:3F:60:63:4D:FA:AA:37:B8:31:7B:E4:60:1F:7B:54:3D:66:D6
            X509v3 Authority Key Identifier:
                keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:94:35:ef:82:3a:db:c6:1f:4b:8f:4f:a0:64:df:80:e5:0e:
         0a:e7:d4:a3:c7:a8:39:2b:cc:f8:2c:6f:ec:aa:d1:b8:01:08:
         e3:25:81:e3:f4:a5:01:91:b9:69:3c:98:75:36:49:74:a7:ee:
         5e:4e:cc:4b:c9:12:9d:59:fa:5b:ad:49:e9:91:e9:a8:0c:11:
         ee:1d:ef:d3:03:42:52:9c:e0:f7:72:6d:fb:be:be:70:e1:40:
         95:80:72:09:13:47:c0:53:a0:92:3f:dd:27:58:85:5c:3e:93:
         69:d1:3c:56:eb:bc:3f:c1:3b:94:f8:1b:6f:cf:ea:cd:4f:ea:
         3a:a2:1d:3e:44:3b:18:13:f5:ef:85:c8:25:2c:1f:48:bf:23:
         36:0f:21:88:ce:ba:91:c4:06:9b:da:ea:45:96:24:be:65:85:
         c6:20:61:87:9c:bb:8a:d7:95:b9:f4:61:53:0e:31:50:7d:0c:
         09:a8:d1:2e:2f:b7:b9:43:3a:96:9a:46:a8:70:59:0c:15:8a:
         18:8a:6e:2d:84:d3:57:a2:e5:6b:fb:ed:89:4c:52:c7:9e:35:
         fc:ca:db:8c:f9:f8:2f:f3:29:c1:4a:d4:84:77:74:5f:ba:7d:
         e0:a6:88:dc:12:16:36:47:6f:03:ba:4e:a4:3a:ae:29:ba:57:
         ee:ed:b9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCaAbRKj34/Iy6mytE1zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE4Y2JiMGY5ZDFlNTczNzczZDc5MTEzOGEwMTIyZjI4
YmVjNTYwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD
EygwNThmM2Y2MDYzNGRmYWFhMzdiODMxN2JlNDYwMWY3YjU0M2Q2NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJhVCqMZtRVfxdbOjZ9GE0LQGhBS
cwjqq/Iz4HB87B+LT28UUBa4E8GkNNpg9480RAzoTQW3XKR+DH4TtE6ImDBpklW4
LwiwS9j0aEbLrkPSnIH3I1NmWuM2OhheehxgZoAYp+AiNxGp8NHxJcQjQXUFURZW
Qs9rBykyZvsh2kexeLcYEeFGfn5BjM8J/FZZS4DnAdjL/Q1w37NMkSmuSli2/oa9
njlCwvBH0EzuSIUqqij8kyjNho7BfoN1u4FbllCKlppj6eNpJHq9WuKn3fq/pkmy
mP1TZwZONUZT6ee5BgL4/qxe1i8mktZowszJ3hZcj33ljwSYPEDrp7F7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWPP2BjTfqqN7gxe+RgH3tUPWbWMB8GA1UdIwQY
MBaAFAiBjLsPnR5XN3PXkROKASLyi+xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYt
MzM2ZTg3NGYzZDg3LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYtMzM2ZTg3NGYzZDg3
LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZQ174I6
28YfS49PoGTfgOUOCufUo8eoOSvM+Cxv7KrRuAEI4yWB4/SlAZG5aTyYdTZJdKfu
Xk7MS8kSnVn6W61J6ZHpqAwR7h3v0wNCUpzg93Jt+76+cOFAlYByCRNHwFOgkj/d
J1iFXD6TadE8Vuu8P8E7lPgbb8/qzU/qOqIdPkQ7GBP174XIJSwfSL8jNg8hiM66
kcQGm9rqRZYkvmWFxiBhh5y7iteVufRhUw4xUH0MCajRLi+3uUM6lppGqHBZDBWK
GIpuLYTTV6Lla/vtiUxSx541/MrbjPn4L/MpwUrUhHd0X7p94KaI3BIWNkdvA7pO
pDquKbpX7u25Zg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:15:28 2025 by rpki-client