This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File:                     9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier:          0VeTv+qyOsVg6XIQYCuKKLIauOwS6968/26wlPqcU8I=
Subject key identifier:   8B:56:85:DB:0E:72:00:78:84:8D:50:72:BC:FF:90:5A:99:1A:58:FE
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer:       /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial:       019B337AF5C7D2B75AA4B12CF048077232D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number:          05B1
Signing time:             Thu 18 Dec 2025 22:00:54 +0000
Manifest this update:     Thu 18 Dec 2025 22:00:54 +0000
Manifest next update:     Fri 19 Dec 2025 22:00:54 +0000
Files and hashes:         1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: Ij2HAbaub2km9VG4DJ/JIs9VoarXzIjEe9y2bIBMhDo=)
                          2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:7a:f5:c7:d2:b7:5a:a4:b1:2c:f0:48:07:72:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
        Validity
            Not Before: Dec 18 22:00:54 2025 GMT
            Not After : Dec 19 22:00:54 2025 GMT
        Subject: CN=8b5685db0e720078848d5072bcff905a991a58fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:96:5a:79:84:1e:3e:5b:d2:a7:79:da:41:
                    4c:89:98:07:0d:1c:c6:df:3f:8f:ef:81:3f:04:c9:
                    8a:e0:38:85:ef:a5:cb:db:32:fe:af:a7:14:81:3c:
                    f3:7e:36:ca:de:4c:6a:87:b3:2b:3f:43:49:04:3c:
                    0d:d3:02:ee:50:27:76:01:07:88:0e:56:c7:65:fa:
                    02:3e:37:96:d1:51:7f:16:26:cd:75:c5:6a:59:31:
                    d8:c6:1f:0d:1f:24:17:f6:c8:46:04:da:1e:7b:44:
                    dc:fe:5a:76:55:2c:ad:ea:60:3b:13:79:ed:d9:d0:
                    e9:80:e8:4b:93:02:27:19:9b:7c:c8:84:3f:8e:45:
                    b6:e1:46:6a:d3:78:2a:38:a0:f2:bf:1d:63:82:cd:
                    87:3e:53:f5:f4:d6:21:45:74:fd:cc:4f:91:7e:dd:
                    23:df:26:a5:af:09:63:b2:b8:22:40:37:ce:45:45:
                    3e:a6:96:ab:3f:e3:01:bb:9d:3c:eb:18:b1:c1:3b:
                    38:1d:7b:06:24:29:cf:bb:be:42:e6:a4:03:09:61:
                    74:0d:43:14:b3:b7:16:77:6c:e9:bf:54:74:7c:ac:
                    f5:1a:7c:06:e2:ec:84:26:c1:57:28:0e:3b:c8:7f:
                    33:a1:8b:7e:66:19:bd:b0:ea:0d:96:3b:80:32:93:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:56:85:DB:0E:72:00:78:84:8D:50:72:BC:FF:90:5A:99:1A:58:FE
            X509v3 Authority Key Identifier:
                keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:e1:60:8a:b0:ce:8b:b1:6c:d5:54:c6:45:0f:a6:1e:6b:
         c7:38:a0:e5:28:66:bd:06:fd:dd:0c:56:13:66:27:f3:58:30:
         6c:51:b7:19:93:9c:51:c6:c4:63:3e:48:9b:e1:1f:82:ac:5c:
         2d:c8:ae:6e:d6:d2:f7:52:3f:2a:f6:3e:de:43:2f:d3:6c:db:
         41:02:33:02:e1:8a:9c:00:27:0f:bd:38:e2:e7:be:2c:f6:06:
         03:ab:cf:ed:6d:39:a0:b3:e6:97:59:8f:5a:12:c1:55:2b:c2:
         d9:b6:fa:da:f2:c6:36:47:77:ba:07:8c:86:29:e5:78:8d:a8:
         be:1b:9a:54:85:70:af:c3:54:30:15:13:87:26:f2:8f:5f:8b:
         9e:25:4f:fe:6b:c6:f4:4f:df:43:e5:10:88:38:23:52:f0:7a:
         59:5a:0a:22:9f:ee:89:55:ca:e3:da:23:9a:9a:45:25:41:02:
         28:3a:85:43:d9:58:58:0e:0b:30:33:45:09:64:0a:04:41:e1:
         22:c3:b4:9f:cb:76:e6:26:4f:da:6d:fd:ac:1b:5a:76:5c:18:
         50:94:24:95:2d:c1:e6:69:1a:7e:e5:ba:3e:6f:4d:a3:27:80:
         1e:df:46:e3:60:84:3b:74:5d:52:4b:32:57:ad:8a:fb:0e:e4:
         f1:7a:6e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZszevXH0rdapLEs8EgHcjLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MjMyZWU4MDVmNzhlNTkyZWZmMmNjYTYxNTM5MTA5ZTVh
MzQ2N2QwHhcNMjUxMjE4MjIwMDU0WhcNMjUxMjE5MjIwMDU0WjAzMTEwLwYDVQQD
Eyg4YjU2ODVkYjBlNzIwMDc4ODQ4ZDUwNzJiY2ZmOTA1YTk5MWE1OGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5+WWnmEHj5b0qd52kFMiZgHDRzG
3z+P74E/BMmK4DiF76XL2zL+r6cUgTzzfjbK3kxqh7MrP0NJBDwN0wLuUCd2AQeI
DlbHZfoCPjeW0VF/FibNdcVqWTHYxh8NHyQX9shGBNoee0Tc/lp2VSyt6mA7E3nt
2dDpgOhLkwInGZt8yIQ/jkW24UZq03gqOKDyvx1jgs2HPlP19NYhRXT9zE+Rft0j
3yalrwljsrgiQDfORUU+pparP+MBu5086xixwTs4HXsGJCnPu75C5qQDCWF0DUMU
s7cWd2zpv1R0fKz1GnwG4uyEJsFXKA47yH8zoYt+Zhm9sOoNljuAMpNaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItWhdsOcgB4hI1Qcrz/kFqZGlj+MB8GA1UdIwQY
MBaAFPUjLugF945ZLv8symFTkQnlo0Z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEt
N2RiNTNjNjU3YzI5LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEtN2RiNTNjNjU3YzI5
LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxPhYIqw
zouxbNVUxkUPph5rxzig5ShmvQb93QxWE2Yn81gwbFG3GZOcUcbEYz5Im+Efgqxc
LciubtbS91I/KvY+3kMv02zbQQIzAuGKnAAnD7044ue+LPYGA6vP7W05oLPml1mP
WhLBVSvC2bb62vLGNkd3ugeMhinleI2ovhuaVIVwr8NUMBUThybyj1+LniVP/mvG
9E/fQ+UQiDgjUvB6WVoKIp/uiVXK49ojmppFJUECKDqFQ9lYWA4LMDNFCWQKBEHh
IsO0n8t25iZP2m39rBtadlwYUJQklS3B5mkafuW6Pm9NoyeAHt9G42CEO3RdUksy
V62K+w7k8XpuHQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:24:25 2025 by rpki-client