This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
File:                     plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft (raw, json)
Hash identifier:          DxSC6k9Z3crBfnTa0lIgiKrt+0BtNWfWhr4NIvQUBuA=
Subject key identifier:   A1:03:FB:09:D2:17:F4:A8:C3:BA:CE:DF:8B:4F:93:B3:F2:AE:09:7F
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       019AF0511AE1E2177B3CA67EB795A0DCC8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
Manifest number:          1771
Signing time:             Fri 05 Dec 2025 21:00:38 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:38 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:38 +0000
Files and hashes:         1: FAJgXHKouxn1NIiI1ev8JXSE61Q.roa (hash: 8t7YcNGHmBNdk3Ehp7fmi3HGBZDTLV33VOOXqYdX/R0=)
                          2: FCLA8M032EwPVSliWKDu0fDlnPE.roa (hash: mxbROZOE42PzUqwm62cDGMgZG6BYzZ2DWS8LB2fyuxA=)
                          3: FzCE_2CmXVI87QCBjmMqmhPqvI4.roa (hash: xnBYv3l8pbmO/yFa4pavqkCSVOI2MUIexKvv0cmsLEo=)
                          4: QXuReFuFnm4r5YfXqKS-RkBXarA.roa (hash: pUUucPhRyENqlrukVYu+Ay5+vKGTKkXyK3KLmXDcylU=)
                          5: cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa (hash: Ayfnf+ERuqktIc5tO5+JoNswSsuneeuJ+BLm8Zge0cQ=)
                          6: plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl (hash: V6UDwoJuhkN+vpnyfSCMFpf54wMqEwfNY39Q24eLbG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:1a:e1:e2:17:7b:3c:a6:7e:b7:95:a0:dc:c8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Dec  5 21:00:38 2025 GMT
            Not After : Dec  6 21:00:38 2025 GMT
        Subject: CN=a103fb09d217f4a8c3bacedf8b4f93b3f2ae097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:20:d6:12:dd:ee:d8:10:52:54:92:c4:3c:
                    9e:93:7b:4f:e2:38:98:c5:9c:0f:a8:47:df:ec:31:
                    e8:f1:2a:93:2d:62:f4:3a:8e:3c:d6:8c:76:c0:17:
                    f4:47:86:dd:77:2e:c8:c7:c3:51:29:68:a8:ef:1e:
                    79:79:47:a4:a3:67:2c:15:d7:84:8f:6a:5c:34:10:
                    d1:d3:8f:84:71:34:1a:5e:6b:f0:19:20:5b:fa:f8:
                    d7:c8:38:f5:ee:5c:0b:5e:6f:9a:ba:44:8a:cb:d0:
                    10:77:a4:43:1e:e9:a5:92:28:ba:2d:68:b0:17:11:
                    8f:12:6a:45:dc:1e:d8:f3:01:68:64:a8:04:dc:ed:
                    70:f5:a8:4b:73:c3:a9:f0:2f:64:30:70:51:ad:c1:
                    01:05:c4:96:0f:a3:d3:20:8d:cc:98:63:08:dd:1a:
                    6a:04:a7:57:d4:f5:d7:d8:0e:f4:62:e7:ed:b2:57:
                    51:3d:4e:2b:5a:56:c6:57:47:07:83:ea:d9:32:ff:
                    e3:a0:c3:ba:2d:cc:01:47:76:2c:ff:64:6f:bd:3c:
                    40:21:68:d8:cc:e0:de:db:10:e6:33:17:e6:b2:2e:
                    73:64:8e:ba:dc:89:bf:b7:c0:36:60:a3:ff:83:bb:
                    fb:28:94:90:c8:7c:cf:f2:16:a3:ae:33:ae:93:6a:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:FB:09:D2:17:F4:A8:C3:BA:CE:DF:8B:4F:93:B3:F2:AE:09:7F
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:dc:d4:70:a6:32:a7:6b:54:70:b2:d0:c4:43:a5:6e:f2:
         24:c7:2c:5f:e1:8d:3a:ca:8e:c9:4d:f6:1d:5b:ae:a7:84:73:
         b7:47:98:b5:7e:31:84:cd:7a:62:31:0a:a2:23:c3:3c:c7:68:
         e1:63:48:e5:5c:2f:0b:42:ac:88:cf:a3:bb:de:82:d6:14:19:
         13:fa:48:8d:0a:e8:47:bb:4c:c4:e5:b8:9d:55:20:ee:81:a0:
         84:be:f0:56:53:d1:5f:a6:35:e0:3c:f8:c9:0e:2c:81:ee:0e:
         bc:92:eb:2b:e7:53:6e:ac:fd:f4:05:5b:fe:b0:a9:78:bb:5c:
         0f:d5:5a:1e:51:01:4e:31:6d:53:8a:ec:55:ba:a1:12:0a:8f:
         92:d7:d6:a7:8b:90:9b:1a:bf:86:3c:21:04:7a:2e:d6:b5:88:
         50:18:e9:b2:8c:68:ef:c9:ba:b5:57:f4:e3:49:b8:92:40:97:
         e5:24:24:5c:2e:a1:00:fd:35:2e:72:2d:30:cf:26:7d:80:74:
         a1:94:73:85:55:2b:35:d9:5c:ed:b9:63:42:1c:d2:e1:28:cc:
         f3:59:2c:e3:1d:01:e4:4e:84:94:dc:60:54:0b:bb:ec:ff:45:
         35:fd:8f:58:e8:ef:eb:2b:c5:2e:65:9a:b5:8b:12:61:5e:bf:
         2e:d6:3e:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwURrh4hd7PKZ+t5Wg3MjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTYyZDA4Njk0ODBkYzExYjc0YTU1MmNkMTY3YjZmNjMz
OWM4YmEwHhcNMjUxMjA1MjEwMDM4WhcNMjUxMjA2MjEwMDM4WjAzMTEwLwYDVQQD
EyhhMTAzZmIwOWQyMTdmNGE4YzNiYWNlZGY4YjRmOTNiM2YyYWUwOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgUg1hLd7tgQUlSSxDyek3tP4jiY
xZwPqEff7DHo8SqTLWL0Oo481ox2wBf0R4bddy7Ix8NRKWio7x55eUeko2csFdeE
j2pcNBDR04+EcTQaXmvwGSBb+vjXyDj17lwLXm+aukSKy9AQd6RDHumlkii6LWiw
FxGPEmpF3B7Y8wFoZKgE3O1w9ahLc8Op8C9kMHBRrcEBBcSWD6PTII3MmGMI3Rpq
BKdX1PXX2A70YuftsldRPU4rWlbGV0cHg+rZMv/joMO6LcwBR3Ys/2RvvTxAIWjY
zODe2xDmMxfmsi5zZI663Im/t8A2YKP/g7v7KJSQyHzP8hajrjOuk2qExwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKED+wnSF/Sow7rO34tPk7Pyrgl/MB8GA1UdIwQY
MBaAFKZWLQhpSA3BG3SlUs0We29jOci6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEt
NDVhOGZlZDNhMmE1LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEtNDVhOGZlZDNhMmE1
LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6fc1HCm
MqdrVHCy0MRDpW7yJMcsX+GNOsqOyU32HVuup4Rzt0eYtX4xhM16YjEKoiPDPMdo
4WNI5VwvC0KsiM+ju96C1hQZE/pIjQroR7tMxOW4nVUg7oGghL7wVlPRX6Y14Dz4
yQ4sge4OvJLrK+dTbqz99AVb/rCpeLtcD9VaHlEBTjFtU4rsVbqhEgqPktfWp4uQ
mxq/hjwhBHou1rWIUBjpsoxo78m6tVf040m4kkCX5SQkXC6hAP01LnItMM8mfYB0
oZRzhVUrNdlc7bljQhzS4SjM81ks4x0B5E6ElNxgVAu77P9FNf2PWOjv6yvFLmWa
tYsSYV6/LtY+iQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:49:16 2025 by rpki-client