This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          blfNtr+WwcKl3Yvr+A4HwalNy4KCbGewmg49uIDhn6c=
Subject key identifier:   C5:C5:A3:C5:86:57:93:49:66:19:E0:65:07:87:F7:CE:30:25:F7:E9
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019AF509B9196D825CCD7A174E3415FBFD56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0D2C
Signing time:             Sat 06 Dec 2025 19:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:46 +0000
Files and hashes:         1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
                          2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: ymuf9yJtcMXsLiFxQ3Ug77d6nddASKT9GqmfQgrlzT8=)
                          3: BqfUS67NwEGbDUdjYax38K2Njlg.roa (hash: FXBdDnrJbkKIYFCTwLmrjslC3wsmF26/kRrmIGLYDVE=)
                          4: ExI_XUjszL60Ie9A5TinBHd-jBM.roa (hash: Ih+JMM3ki467y9AI2VydiKfnBZRQqt/x3WLry7BgEoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:b9:19:6d:82:5c:cd:7a:17:4e:34:15:fb:fd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Dec  6 19:00:46 2025 GMT
            Not After : Dec  7 19:00:46 2025 GMT
        Subject: CN=c5c5a3c5865793496619e0650787f7ce3025f7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:35:a7:3a:0a:d4:1f:5c:c9:8a:ea:1a:da:
                    15:f5:47:5b:61:ad:6b:1a:4d:bf:c4:98:2d:cb:20:
                    d6:66:d9:e1:6e:c4:5a:3b:10:b0:f3:2f:8d:3e:4e:
                    5e:f6:09:c7:50:4e:cc:59:6d:7c:ee:6a:d9:94:35:
                    9a:32:5e:a7:b6:17:30:b7:fb:72:33:2e:a9:60:05:
                    8f:45:e0:aa:32:c5:e6:3b:6d:ea:df:6f:58:b6:22:
                    a5:14:c1:0e:0a:db:08:56:5b:38:77:50:04:a9:aa:
                    72:b3:bf:84:30:24:72:3a:f9:29:aa:36:4e:8b:43:
                    7b:14:3e:f6:5c:82:c4:ce:b2:b6:95:6f:fe:b3:71:
                    bf:85:60:1e:70:e9:97:1e:a7:95:71:a5:22:bf:06:
                    a1:93:c7:bd:d2:1e:d5:8d:44:90:c7:b0:e8:ef:f3:
                    b6:b4:3d:21:89:ad:b7:7f:cc:f3:5f:50:fa:ae:77:
                    20:ca:3d:11:d5:64:31:d3:1a:bf:c8:dd:30:79:f2:
                    8b:18:25:ed:65:6e:12:d6:e0:35:1b:8c:a0:09:ea:
                    de:41:aa:21:df:ff:65:bc:ec:d1:22:56:5d:cb:ac:
                    c1:a5:b9:d2:08:5f:83:2d:97:65:d0:60:74:8f:60:
                    99:74:1f:b3:f5:f2:ed:9a:f4:ff:06:33:02:dd:9b:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:A3:C5:86:57:93:49:66:19:E0:65:07:87:F7:CE:30:25:F7:E9
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:d8:bf:40:12:86:7f:f8:e1:2e:18:7e:32:eb:bf:32:ea:
         c7:38:6c:80:b8:b9:8d:ed:a5:bf:d2:bb:c9:fe:ef:54:29:fa:
         3d:e7:8b:a3:b3:d3:a1:0a:69:68:08:b7:79:ad:ab:5b:57:a8:
         fb:89:85:1f:3f:33:64:93:ea:1b:46:96:e2:b7:d6:83:f7:64:
         71:20:2c:1a:95:c8:57:3f:e6:47:0c:94:59:b6:4c:5c:aa:d4:
         31:4a:e4:91:dd:bb:b8:82:aa:72:5b:5d:56:df:bf:4b:68:98:
         c0:ac:0f:78:ac:1b:7c:7e:81:3a:3f:2f:d1:cb:bf:af:46:44:
         b5:d1:d8:8e:fb:a4:1f:68:fc:d9:ea:2e:6a:77:b6:48:b5:7a:
         d6:71:13:41:ea:c7:1c:35:fc:ba:7a:47:10:a6:d2:61:1d:69:
         b1:16:27:4f:1a:a2:55:a1:90:c7:6c:11:be:ff:5e:f3:ab:36:
         1e:af:4a:26:27:e0:2f:4e:42:8a:a7:fb:d4:7d:df:ba:df:f4:
         6e:cd:7e:09:54:c5:b9:ad:8f:9a:e3:ed:41:2b:40:d3:c5:ff:
         7c:ef:13:2e:6b:23:48:e0:7f:df:a5:f4:1b:76:48:39:b8:02:
         99:74:fe:89:f3:39:a8:58:f9:1b:db:6d:3c:b1:0e:e6:99:d3:
         88:fb:c1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1CbkZbYJczXoXTjQV+/1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjUxMjA2MTkwMDQ2WhcNMjUxMjA3MTkwMDQ2WjAzMTEwLwYDVQQD
EyhjNWM1YTNjNTg2NTc5MzQ5NjYxOWUwNjUwNzg3ZjdjZTMwMjVmN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb01pzoK1B9cyYrqGtoV9UdbYa1r
Gk2/xJgtyyDWZtnhbsRaOxCw8y+NPk5e9gnHUE7MWW187mrZlDWaMl6nthcwt/ty
My6pYAWPReCqMsXmO23q329YtiKlFMEOCtsIVls4d1AEqapys7+EMCRyOvkpqjZO
i0N7FD72XILEzrK2lW/+s3G/hWAecOmXHqeVcaUivwahk8e90h7VjUSQx7Do7/O2
tD0hia23f8zzX1D6rncgyj0R1WQx0xq/yN0wefKLGCXtZW4S1uA1G4ygCereQaoh
3/9lvOzRIlZdy6zBpbnSCF+DLZdl0GB0j2CZdB+z9fLtmvT/BjMC3ZsZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXFo8WGV5NJZhngZQeH984wJffpMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8zYv0AS
hn/44S4YfjLrvzLqxzhsgLi5je2lv9K7yf7vVCn6PeeLo7PToQppaAi3ea2rW1eo
+4mFHz8zZJPqG0aW4rfWg/dkcSAsGpXIVz/mRwyUWbZMXKrUMUrkkd27uIKqcltd
Vt+/S2iYwKwPeKwbfH6BOj8v0cu/r0ZEtdHYjvukH2j82eouane2SLV61nETQerH
HDX8unpHEKbSYR1psRYnTxqiVaGQx2wRvv9e86s2Hq9KJifgL05Ciqf71H3fut/0
bs1+CVTFua2PmuPtQStA08X/fO8TLmsjSOB/36X0G3ZIObgCmXT+ifM5qFj5G9tt
PLEO5pnTiPvBOg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:14:11 2025 by rpki-client