This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
File:                     B1lFaGGImKn7cgrgm-0O0b5PhX4.mft (raw, json)
Hash identifier:          xbBmOZlw+ZNv1RXS4UMIGUA2+BNcHXcEAhZCHi5rBLQ=
Subject key identifier:   70:8B:DD:5D:D9:30:76:87:F1:55:C6:82:5D:8D:68:42:70:FE:80:BC
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Certificate issuer:       /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial:       019AF42E5B97BDA5DD6031E7754E4AEB2362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
Manifest number:          114D
Signing time:             Sat 06 Dec 2025 15:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:09 +0000
Files and hashes:         1: B1lFaGGImKn7cgrgm-0O0b5PhX4.crl (hash: a0lGvkXx2UkXk/TRsKSMqVhK1fSKzBb3koGXqmKht6Y=)
                          2: WkNO-IeulMbn4ZJvUgtpWPeUHMA.roa (hash: jPFVdHVWjo+CbaX7r8T+q+wkvMyetEyIe+LzWcBGU+g=)
                          3: lYXFJBiFIo7GF8qx1TduAJu4mZk.roa (hash: EFfOawY/LhITRuUSXF2uybmDfyRYV8O+uOvPFUBho9Y=)
                          4: wAhroXPNvLdteZoxcXWVyonpn3o.roa (hash: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:5b:97:bd:a5:dd:60:31:e7:75:4e:4a:eb:23:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
        Validity
            Not Before: Dec  6 15:01:09 2025 GMT
            Not After : Dec  7 15:01:09 2025 GMT
        Subject: CN=708bdd5dd9307687f155c6825d8d684270fe80bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:85:6b:de:b9:e6:73:f6:71:86:b6:6a:5c:
                    c9:2b:ee:03:ba:4c:c4:07:ea:07:db:82:a4:41:84:
                    af:09:37:d1:4f:ed:01:cb:93:85:9f:5c:72:d2:e1:
                    94:30:cc:28:ad:93:18:56:1b:8d:96:3a:3c:84:71:
                    a3:90:33:ea:a6:18:09:0e:a1:4d:5e:a1:92:de:04:
                    e5:f9:d2:df:60:5d:fa:5c:e3:b8:cb:7c:95:b2:25:
                    79:b3:2e:ff:9d:45:36:01:9a:b3:57:db:ca:cd:b9:
                    aa:ee:9c:f1:0c:02:9a:dd:61:6c:af:1b:62:e1:6b:
                    3d:bc:e2:9a:0c:e9:ee:fc:79:a0:86:78:67:ab:de:
                    36:69:4d:60:c4:5f:8e:86:cb:87:1e:52:6c:51:fe:
                    85:5c:42:f1:fe:d9:57:73:10:5a:fd:39:d4:1c:a2:
                    30:b1:aa:31:c1:f6:00:41:e3:ca:b0:df:b3:68:9a:
                    71:ce:c8:31:35:98:1c:20:6e:d3:3a:3e:16:4a:7b:
                    0d:d5:df:50:68:6c:8a:10:87:b3:6c:bd:9a:ec:9a:
                    08:e5:4b:09:08:20:bd:aa:04:e1:a0:cb:78:54:4b:
                    57:44:7b:ac:e6:c7:de:e6:a4:a1:e3:33:93:04:17:
                    7d:16:20:7c:e3:b7:23:c1:c4:41:5e:f3:23:62:7b:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:DD:5D:D9:30:76:87:F1:55:C6:82:5D:8D:68:42:70:FE:80:BC
            X509v3 Authority Key Identifier:
                keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:10:32:31:d0:61:35:84:75:0f:a5:ae:a6:93:cb:ad:ba:
         c6:8a:d0:42:8d:b7:55:23:5a:4d:3a:30:89:10:da:5e:02:99:
         20:52:9e:b4:a5:b5:82:0e:15:93:2c:c5:6f:e7:b2:43:8a:c0:
         b1:64:b5:a5:98:45:2b:bd:a0:b5:1d:47:09:b5:78:dc:ab:eb:
         f1:95:70:c6:92:d4:fe:91:8a:b0:3d:db:6d:95:5e:c4:4a:d5:
         89:c1:ac:d8:25:69:49:06:36:af:9a:15:39:42:32:84:46:63:
         e4:01:41:55:33:6b:57:e7:56:2e:90:8d:ab:e3:d2:ce:19:61:
         4e:e3:84:9e:c3:0f:f6:61:78:ad:8e:e4:91:32:72:80:83:87:
         dc:6c:c4:07:b1:a6:a1:8f:27:9d:fe:58:e6:4e:0e:da:be:4e:
         b9:62:30:25:6c:a6:c6:79:44:87:f1:fc:62:ed:84:16:67:47:
         61:ac:4d:a8:63:02:2f:0f:f2:d9:35:2d:e2:0e:e5:07:69:94:
         d6:94:55:ae:f2:b8:06:8f:a6:a9:f8:7b:3f:d9:c4:50:59:ee:
         44:81:be:a9:eb:36:e0:cc:ff:9a:da:46:d4:e6:89:e0:b3:45:
         25:5f:cd:f4:61:bc:e7:df:c1:4f:97:53:0c:ef:c3:96:12:54:
         d6:63:79:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LluXvaXdYDHndU5K6yNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTk0NTY4NjE4ODk4YTlmYjcyMGFlMDliZWQwZWQxYmU0
Zjg1N2UwHhcNMjUxMjA2MTUwMTA5WhcNMjUxMjA3MTUwMTA5WjAzMTEwLwYDVQQD
Eyg3MDhiZGQ1ZGQ5MzA3Njg3ZjE1NWM2ODI1ZDhkNjg0MjcwZmU4MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2Fa9655nP2cYa2alzJK+4DukzE
B+oH24KkQYSvCTfRT+0By5OFn1xy0uGUMMworZMYVhuNljo8hHGjkDPqphgJDqFN
XqGS3gTl+dLfYF36XOO4y3yVsiV5sy7/nUU2AZqzV9vKzbmq7pzxDAKa3WFsrxti
4Ws9vOKaDOnu/Hmghnhnq942aU1gxF+OhsuHHlJsUf6FXELx/tlXcxBa/TnUHKIw
saoxwfYAQePKsN+zaJpxzsgxNZgcIG7TOj4WSnsN1d9QaGyKEIezbL2a7JoI5UsJ
CCC9qgThoMt4VEtXRHus5sfe5qSh4zOTBBd9FiB847cjwcRBXvMjYnsrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCL3V3ZMHaH8VXGgl2NaEJw/oC8MB8GA1UdIwQY
MBaAFAdZRWhhiJip+3IK4JvtDtG+T4V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgt
MWVjY2JlNjdjNjYxLzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85ZmFkYTEtNjBmOS00ZWY3LTgxZDgtMWVjY2JlNjdjNjYx
LzEvQjFsRmFHR0ltS243Y2dyZ20tME8wYjVQaFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/kQMjHQ
YTWEdQ+lrqaTy626xorQQo23VSNaTTowiRDaXgKZIFKetKW1gg4VkyzFb+eyQ4rA
sWS1pZhFK72gtR1HCbV43Kvr8ZVwxpLU/pGKsD3bbZVexErVicGs2CVpSQY2r5oV
OUIyhEZj5AFBVTNrV+dWLpCNq+PSzhlhTuOEnsMP9mF4rY7kkTJygIOH3GzEB7Gm
oY8nnf5Y5k4O2r5OuWIwJWymxnlEh/H8Yu2EFmdHYaxNqGMCLw/y2TUt4g7lB2mU
1pRVrvK4Bo+mqfh7P9nEUFnuRIG+qes24Mz/mtpG1OaJ4LNFJV/N9GG859/BT5dT
DO/DlhJU1mN5kQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:17 2025 by rpki-client