This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File:                     NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier:          pD6UVPuU/4TORYMqU9dxCKZIqS66V8whsiFOm3914fE=
Subject key identifier:   94:90:3F:10:BA:22:1E:E7:89:76:C5:55:ED:4F:CF:72:F1:59:B7:56
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer:       /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial:       019AF4D2B8F07064BE3EDC7352681976CA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number:          0470
Signing time:             Sat 06 Dec 2025 18:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:41 +0000
Files and hashes:         1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: eToKmygkqP4+egsC1wDrw+YwJ9lTKrfj8uoiI2QNL+g=)
                          2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
                          3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:b8:f0:70:64:be:3e:dc:73:52:68:19:76:ca:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
        Validity
            Not Before: Dec  6 18:00:41 2025 GMT
            Not After : Dec  7 18:00:41 2025 GMT
        Subject: CN=94903f10ba221ee78976c555ed4fcf72f159b756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f9:6d:bd:56:48:47:09:33:8a:fe:59:51:8f:
                    a4:ea:c7:00:d4:01:c9:f6:64:68:a2:5e:d1:04:62:
                    01:32:0a:7f:ee:1c:32:c0:41:36:b1:d4:cf:42:fb:
                    9c:99:6c:cf:df:a8:6c:c1:db:32:0d:51:69:12:8a:
                    43:e8:99:74:c3:6a:24:06:81:78:7c:79:fe:e6:89:
                    c1:f7:ae:9f:52:ca:44:59:2a:19:e7:54:2c:03:ef:
                    a8:2f:be:bc:a3:7a:28:4e:e0:5e:ff:15:d1:db:4d:
                    94:54:6f:6f:12:a1:5a:e4:75:a7:fc:c6:3e:2b:bb:
                    d6:f0:e2:40:68:54:d9:4a:72:09:90:2e:a6:16:4b:
                    0a:01:1e:c5:5b:6e:64:a3:f1:eb:12:39:7e:5c:f9:
                    17:72:c2:83:0f:f8:64:1d:43:ba:5c:52:50:47:28:
                    ab:e5:bc:d4:81:d2:fb:37:71:27:94:7d:66:62:83:
                    d5:79:22:54:87:45:e9:6a:e0:43:5f:1d:67:f3:9c:
                    40:71:8f:a2:37:6d:18:49:f9:24:ab:85:90:b0:62:
                    49:89:63:6e:f5:d9:57:bd:be:23:fd:dc:6d:46:36:
                    fe:41:f3:f1:ff:38:7b:9a:21:aa:60:34:09:f8:60:
                    70:49:7c:e3:16:43:ce:49:e0:6e:0a:2b:58:c8:9b:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:3F:10:BA:22:1E:E7:89:76:C5:55:ED:4F:CF:72:F1:59:B7:56
            X509v3 Authority Key Identifier:
                keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:7c:28:8a:51:eb:2c:91:2f:da:d8:55:e7:ed:ea:96:f1:
         27:04:e6:88:dc:df:51:29:4c:34:42:cc:77:96:e6:96:09:f6:
         4f:eb:8b:a0:ed:e7:81:2c:ef:bd:71:ef:de:0b:d2:5b:43:1d:
         32:9d:71:19:d2:a6:1e:24:88:c7:18:a5:1d:cf:95:7d:24:99:
         87:de:3f:91:d1:6b:79:46:76:aa:fe:f7:56:0b:93:03:fc:a2:
         11:43:c8:e0:85:2b:26:fe:d5:2c:4b:16:22:89:24:20:57:68:
         fa:06:b3:33:a6:94:37:81:c0:14:60:8e:d5:a3:34:1f:77:7c:
         ee:29:db:46:64:d8:55:78:23:26:60:64:b0:eb:e3:67:f3:fb:
         58:32:fb:64:ef:31:8b:e7:79:8a:d4:eb:60:3e:1a:5c:2b:ef:
         4f:3f:bb:51:a7:7b:ad:83:f5:ad:f4:a6:50:40:a1:2a:f1:e3:
         9f:14:b0:6b:38:98:f9:1e:14:d4:04:63:90:9e:97:df:b4:f8:
         7c:59:fb:56:05:96:30:1a:a4:2b:db:e7:c2:e7:60:51:84:2c:
         99:98:2c:92:4f:03:31:d6:10:07:39:8a:8b:0e:b5:bf:fc:c5:
         5a:a4:68:13:d6:12:6d:04:72:7b:55:60:58:d2:42:d0:e6:32:
         f8:5e:ff:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr00rjwcGS+PtxzUmgZdsoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmUwMTAxMTgxYWNhNDI1MWU5ZjI0YThmNjM3MzVlMmY1
ZWJkY2QwHhcNMjUxMjA2MTgwMDQxWhcNMjUxMjA3MTgwMDQxWjAzMTEwLwYDVQQD
Eyg5NDkwM2YxMGJhMjIxZWU3ODk3NmM1NTVlZDRmY2Y3MmYxNTliNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PltvVZIRwkziv5ZUY+k6scA1AHJ
9mRool7RBGIBMgp/7hwywEE2sdTPQvucmWzP36hswdsyDVFpEopD6Jl0w2okBoF4
fHn+5onB966fUspEWSoZ51QsA++oL768o3ooTuBe/xXR202UVG9vEqFa5HWn/MY+
K7vW8OJAaFTZSnIJkC6mFksKAR7FW25ko/HrEjl+XPkXcsKDD/hkHUO6XFJQRyir
5bzUgdL7N3EnlH1mYoPVeSJUh0XpauBDXx1n85xAcY+iN20YSfkkq4WQsGJJiWNu
9dlXvb4j/dxtRjb+QfPx/zh7miGqYDQJ+GBwSXzjFkPOSeBuCitYyJu0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSQPxC6Ih7niXbFVe1Pz3LxWbdWMB8GA1UdIwQY
MBaAFDVuAQEYGspCUenySo9jc14vXr3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMt
OWQ1ZTM0YjAyZTViLzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMtOWQ1ZTM0YjAyZTVi
LzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaB8KIpR
6yyRL9rYVeft6pbxJwTmiNzfUSlMNELMd5bmlgn2T+uLoO3ngSzvvXHv3gvSW0Md
Mp1xGdKmHiSIxxilHc+VfSSZh94/kdFreUZ2qv73VguTA/yiEUPI4IUrJv7VLEsW
IokkIFdo+gazM6aUN4HAFGCO1aM0H3d87inbRmTYVXgjJmBksOvjZ/P7WDL7ZO8x
i+d5itTrYD4aXCvvTz+7Uad7rYP1rfSmUEChKvHjnxSwaziY+R4U1ARjkJ6X37T4
fFn7VgWWMBqkK9vnwudgUYQsmZgskk8DMdYQBzmKiw61v/zFWqRoE9YSbQRye1Vg
WNJC0OYy+F7/Jw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:48:55 2025 by rpki-client