This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          0gWJJyHGfhf+MfaW0LKwdV1MpbnunNnmqvUzSYofRzw=
Subject key identifier:   C5:18:88:64:F8:03:63:48:D3:C6:90:E8:8A:90:88:A8:86:9B:6C:B0
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       019AF19B35075BBCACA32E21C2C114AC6DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          06E8
Signing time:             Sat 06 Dec 2025 03:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:11 +0000
Files and hashes:         1: i5QXiPkXceFCKpymhBdKs-kxqdg.roa (hash: JW9l6XsHQNvt/hO+lQdoU/xk33G+5qgeiTQZTkcdU8Y=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: nJ42Ll+k8qNg4nq7z8bafXditT4XAQnkEjup+pNuMBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:35:07:5b:bc:ac:a3:2e:21:c2:c1:14:ac:6d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Dec  6 03:01:11 2025 GMT
            Not After : Dec  7 03:01:11 2025 GMT
        Subject: CN=c5188864f8036348d3c690e88a9088a8869b6cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:c5:ce:d9:dd:d7:9d:83:9b:ab:fa:b7:b4:
                    43:1a:1c:38:57:5b:9d:1b:4b:07:1b:e3:90:7a:2c:
                    1c:69:e5:0a:d3:9d:f3:39:2f:29:f6:88:1d:58:86:
                    24:93:56:b2:6e:ca:2e:f3:98:66:3a:97:f8:ea:08:
                    1a:33:7c:28:3a:1f:9d:56:13:f8:12:19:4d:5f:bb:
                    06:c7:6d:6b:56:70:db:80:8e:b5:bd:2e:5b:66:d7:
                    af:b1:43:a2:94:47:7b:98:9b:e3:e0:de:38:ab:87:
                    68:f7:ec:e7:32:e4:5f:27:15:dc:a4:c0:5e:9c:01:
                    d6:2f:30:83:67:03:f8:6f:15:33:ee:16:39:57:0f:
                    af:7e:f4:b5:f4:bb:c8:9e:e9:62:a5:0f:cc:8e:ce:
                    61:9f:08:c7:a8:95:b7:90:41:28:f9:8b:9f:b6:e8:
                    a6:66:88:32:42:93:47:60:4a:86:0d:42:b4:aa:71:
                    37:8a:ac:fb:a9:cd:78:0d:43:a9:2d:21:d7:11:08:
                    3c:2a:da:81:b2:02:11:d0:09:29:6e:3d:6c:d2:25:
                    c8:0e:01:0f:69:b1:fa:ee:2c:84:fd:64:f3:3f:da:
                    17:1b:8b:f6:20:6b:87:39:68:ca:3d:a7:5d:f2:4b:
                    b3:a2:46:97:02:ef:b3:88:52:95:3f:54:cd:71:3e:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:18:88:64:F8:03:63:48:D3:C6:90:E8:8A:90:88:A8:86:9B:6C:B0
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:38:e3:1b:c4:f2:04:d9:d5:88:05:cf:88:81:28:6d:a3:94:
         34:f9:98:1c:17:29:22:f2:f0:0f:90:dd:61:d8:db:21:40:4b:
         7e:eb:ca:51:7a:65:12:2c:b5:8f:ce:aa:36:22:9c:f1:26:2d:
         82:b8:ca:5e:94:74:70:4c:10:0e:5c:30:d6:d8:87:57:0e:f4:
         ff:5f:2b:e4:e0:e4:54:94:ee:8a:64:c2:f3:b3:6a:2f:72:0a:
         aa:3f:4e:44:3d:df:0b:94:99:af:f7:f6:50:1e:8d:40:9a:17:
         31:69:a0:d6:45:e7:ad:6a:fd:3b:65:5c:09:4a:a3:93:ce:63:
         ae:06:07:85:9f:f7:15:80:61:52:9d:bf:a7:00:41:26:f6:40:
         20:85:80:46:42:2c:d2:fd:4c:1f:ec:3a:ec:97:ea:12:20:53:
         f2:4d:dc:3f:3b:8d:0b:f6:6c:8e:0e:bb:7f:be:a2:d9:94:64:
         a0:6c:5b:19:4c:95:e1:c1:60:fe:3a:36:5b:fc:dc:23:7f:5a:
         73:fc:b0:fa:69:9b:08:d4:38:35:14:eb:eb:63:d6:fc:31:2c:
         5e:22:06:69:e8:fa:9c:b9:ea:46:52:d7:b6:96:7b:28:13:aa:
         ae:d8:f8:4f:7c:a2:45:35:47:7c:74:09:5e:ac:7f:ba:52:8d:
         90:14:f9:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmzUHW7ysoy4hwsEUrG3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTQ2N2VmYTA5OTRmOGEzMWYzMzQzZGMzMDBiYWE0OTM2
YTgyZGMwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD
EyhjNTE4ODg2NGY4MDM2MzQ4ZDNjNjkwZTg4YTkwODhhODg2OWI2Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtXFztnd152Dm6v6t7RDGhw4V1ud
G0sHG+OQeiwcaeUK053zOS8p9ogdWIYkk1aybsou85hmOpf46ggaM3woOh+dVhP4
EhlNX7sGx21rVnDbgI61vS5bZtevsUOilEd7mJvj4N44q4do9+znMuRfJxXcpMBe
nAHWLzCDZwP4bxUz7hY5Vw+vfvS19LvInulipQ/Mjs5hnwjHqJW3kEEo+Yuftuim
ZogyQpNHYEqGDUK0qnE3iqz7qc14DUOpLSHXEQg8KtqBsgIR0Akpbj1s0iXIDgEP
abH67iyE/WTzP9oXG4v2IGuHOWjKPadd8kuzokaXAu+ziFKVP1TNcT7ZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUYiGT4A2NI08aQ6IqQiKiGm2ywMB8GA1UdIwQY
MBaAFJ+UZ++gmU+KMfM0PcMAuqSTaoLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMmQyNzQtYTk1MS00Mzk3LWI5OWQt
YzMwYzdiNTVjMmJjLzEvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMmQyNzQtYTk1MS00Mzk3LWI5OWQtYzMwYzdiNTVjMmJj
LzEvbjVSbjc2Q1pUNG94OHpROXd3QzZwSk5xZ3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjjjG8Ty
BNnViAXPiIEobaOUNPmYHBcpIvLwD5DdYdjbIUBLfuvKUXplEiy1j86qNiKc8SYt
grjKXpR0cEwQDlww1tiHVw70/18r5ODkVJTuimTC87NqL3IKqj9ORD3fC5SZr/f2
UB6NQJoXMWmg1kXnrWr9O2VcCUqjk85jrgYHhZ/3FYBhUp2/pwBBJvZAIIWARkIs
0v1MH+w67JfqEiBT8k3cPzuNC/Zsjg67f76i2ZRkoGxbGUyV4cFg/jo2W/zcI39a
c/yw+mmbCNQ4NRTr62PW/DEsXiIGaej6nLnqRlLXtpZ7KBOqrtj4T3yiRTVHfHQJ
Xqx/ulKNkBT5Pg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:39 2025 by rpki-client