This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
File:                     v4F9yFUt82EP_EVEGz-BRk5Incg.mft (raw, json)
Hash identifier:          ePpxtR8PUOXZjMvVUt8OWFehMR5J7hZI2eCg+6FVzOA=
Subject key identifier:   05:9B:52:93:87:E9:9A:66:07:6B:31:58:CF:7A:C8:4A:28:CB:B2:AD
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Certificate issuer:       /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial:       019AF12DC43765BE79C3C5B10F192023FE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
Manifest number:          0931
Signing time:             Sat 06 Dec 2025 01:01:39 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:39 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:39 +0000
Files and hashes:         1: 36ETTT31Rv9Wj7u6PqyJTy0CjDw.roa (hash: tx94g3vqrXkgyvU4ElzQ7jsADUb8XlCc6Q0poIVPLl8=)
                          2: v4F9yFUt82EP_EVEGz-BRk5Incg.crl (hash: H2eNX3dm/fYMat2Y27eeoUB3Cxw1eORVdXii71Yf/yo=)
                          3: w6CIFsXhe3gJ8pF9EHg-adXDS5c.roa (hash: G5Kk3492Lln+8yGKEbYcF38b0XZXBFYUAf9aIet6yWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:c4:37:65:be:79:c3:c5:b1:0f:19:20:23:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
        Validity
            Not Before: Dec  6 01:01:39 2025 GMT
            Not After : Dec  7 01:01:39 2025 GMT
        Subject: CN=059b529387e99a66076b3158cf7ac84a28cbb2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:79:85:bc:55:64:34:b1:b3:4a:05:b8:8c:
                    1c:d6:50:3d:25:71:13:4a:1c:c5:41:eb:8a:86:0f:
                    c0:c3:f3:59:9b:db:3f:e2:a6:1e:46:90:3e:5e:80:
                    f0:34:38:dc:88:64:48:9e:41:e4:bb:8a:34:74:36:
                    2b:8d:1e:3f:8f:c6:1f:8f:4a:0c:90:df:ae:77:98:
                    ff:77:e6:41:5b:15:d2:2b:c4:94:db:47:7f:4d:98:
                    4a:46:48:84:db:9e:6c:24:26:24:75:74:75:2f:87:
                    49:32:ea:d8:1e:88:31:88:ac:32:34:56:30:67:d2:
                    ab:12:25:7d:af:75:d7:02:a7:e2:89:f6:85:3f:8d:
                    ad:9f:f6:63:f1:5c:23:c1:b8:ae:99:b8:65:f7:b7:
                    0f:1c:d9:11:8c:2c:54:25:40:b9:4f:64:72:ad:d0:
                    15:3c:05:61:8b:c9:d8:eb:e5:3f:d6:a6:04:4a:ab:
                    b3:8a:38:7b:d8:ea:71:96:ad:70:f8:8f:9a:99:0f:
                    e2:e3:c8:df:af:f1:96:3a:e7:97:1c:f2:3f:34:b2:
                    1f:ab:49:d8:52:00:47:60:c2:73:44:fe:67:7d:b3:
                    d9:24:f7:56:dd:33:e4:53:15:1a:3f:95:b7:a0:d2:
                    99:6b:06:55:1b:e7:01:14:e9:22:ce:ed:18:0f:03:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:52:93:87:E9:9A:66:07:6B:31:58:CF:7A:C8:4A:28:CB:B2:AD
            X509v3 Authority Key Identifier:
                keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:31:40:f8:a9:98:55:c3:27:ce:da:75:01:51:cd:09:0b:
         33:f9:c4:b6:e3:e8:e6:dd:0b:4d:d3:c6:4d:2c:64:b2:b1:08:
         1d:e6:29:c3:31:82:fc:be:70:cb:c9:2e:90:fd:56:09:67:5c:
         83:fa:e5:7e:e0:25:4f:e7:73:b7:0d:35:a6:a1:c6:a1:2e:73:
         0a:51:aa:e8:35:ad:27:64:1e:01:5d:4a:e3:8c:ab:ce:84:cc:
         f5:93:15:ed:82:2f:45:66:0f:9a:f6:7d:fb:fc:82:20:18:8c:
         e8:f8:43:4d:c5:f5:77:7d:db:e6:59:16:62:42:45:f8:69:2a:
         ed:6f:fa:d2:06:31:96:55:3c:08:fa:5c:5e:bc:8f:24:81:99:
         b4:c9:79:d0:16:28:3d:55:6c:4d:ba:e2:f5:f8:c4:22:28:7f:
         d3:c5:3d:b9:fe:b7:60:15:44:e3:19:e6:5f:fa:da:33:f9:b0:
         3d:6c:07:3b:81:42:e1:75:a2:39:55:1a:1f:50:a6:bb:fc:b6:
         10:68:70:eb:22:a9:07:ee:e1:18:d9:c3:32:f8:64:65:47:a9:
         24:b0:64:5a:f6:57:24:e0:cc:38:cb:90:4e:ac:d7:f8:84:21:
         7d:bc:4d:29:cf:4e:8a:28:c4:d0:d0:74:89:c9:62:83:19:4c:
         7f:13:a8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLcQ3Zb55w8WxDxkgI/45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODE3ZGM4NTUyZGYzNjEwZmZjNDU0NDFiM2Y4MTQ2NGU0
ODlkYzgwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD
EygwNTliNTI5Mzg3ZTk5YTY2MDc2YjMxNThjZjdhYzg0YTI4Y2JiMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hp5hbxVZDSxs0oFuIwc1lA9JXET
ShzFQeuKhg/Aw/NZm9s/4qYeRpA+XoDwNDjciGRInkHku4o0dDYrjR4/j8Yfj0oM
kN+ud5j/d+ZBWxXSK8SU20d/TZhKRkiE255sJCYkdXR1L4dJMurYHogxiKwyNFYw
Z9KrEiV9r3XXAqfiifaFP42tn/Zj8Vwjwbiumbhl97cPHNkRjCxUJUC5T2RyrdAV
PAVhi8nY6+U/1qYESquzijh72Opxlq1w+I+amQ/i48jfr/GWOueXHPI/NLIfq0nY
UgBHYMJzRP5nfbPZJPdW3TPkUxUaP5W3oNKZawZVG+cBFOkizu0YDwM0ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWbUpOH6ZpmB2sxWM96yEooy7KtMB8GA1UdIwQY
MBaAFL+BfchVLfNhD/xFRBs/gUZOSJ3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTkt
MTk1Mzg5MzMwZWRmLzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTktMTk1Mzg5MzMwZWRm
LzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx8xQPip
mFXDJ87adQFRzQkLM/nEtuPo5t0LTdPGTSxksrEIHeYpwzGC/L5wy8kukP1WCWdc
g/rlfuAlT+dztw01pqHGoS5zClGq6DWtJ2QeAV1K44yrzoTM9ZMV7YIvRWYPmvZ9
+/yCIBiM6PhDTcX1d33b5lkWYkJF+Gkq7W/60gYxllU8CPpcXryPJIGZtMl50BYo
PVVsTbri9fjEIih/08U9uf63YBVE4xnmX/raM/mwPWwHO4FC4XWiOVUaH1Cmu/y2
EGhw6yKpB+7hGNnDMvhkZUepJLBkWvZXJODMOMuQTqzX+IQhfbxNKc9OiijE0NB0
icligxlMfxOoTg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:45 2025 by rpki-client