This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          pHEcyUH0Hqoj2olzwDxDYXKUzzyNaSe/0m9o6XsE/6o=
Subject key identifier:   39:06:E7:8D:1C:0E:10:A9:9C:81:E3:7F:38:93:08:B5:A6:3C:13:D0
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       019AF57837CB9ED4AD0DD8C6A4401F3B01DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          1778
Signing time:             Sat 06 Dec 2025 21:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:27 +0000
Files and hashes:         1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
                          2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
                          3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
                          4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: jMFpEYRtobpNvVBbTBSC/sIJgFSnn0xRxXJoX4qqddY=)
                          5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:37:cb:9e:d4:ad:0d:d8:c6:a4:40:1f:3b:01:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Dec  6 21:01:27 2025 GMT
            Not After : Dec  7 21:01:27 2025 GMT
        Subject: CN=3906e78d1c0e10a99c81e37f389308b5a63c13d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:72:18:01:fa:32:1b:ce:e7:c4:ac:58:5c:
                    e2:34:50:7f:8d:bf:55:1a:3b:ba:e9:69:89:7f:6b:
                    ac:f6:a8:03:6b:d5:5a:ad:62:42:c1:bd:7f:12:90:
                    50:e4:b4:43:3e:2d:f3:db:9c:13:fe:f2:ce:ef:4c:
                    c3:d9:72:27:39:4e:71:4b:3c:39:9a:34:ae:57:33:
                    d2:01:6c:74:b5:3c:bd:f4:2c:ee:f4:39:79:3c:83:
                    28:7b:a8:de:b0:08:c5:48:e3:d9:7d:59:c1:3f:19:
                    3d:4b:7f:cf:45:23:da:46:e7:fe:29:03:f8:5b:72:
                    db:89:64:36:b5:2d:43:5a:9d:7d:42:6e:a0:ed:6a:
                    7c:12:cb:07:5a:d8:4e:8e:ba:b7:71:03:46:d5:0d:
                    30:6c:19:e2:98:6f:dc:b2:a1:b4:15:ac:e0:57:54:
                    0a:2f:6a:ed:a1:a7:8a:d2:c8:6f:1b:c4:79:33:7e:
                    80:95:a9:2f:a7:fe:c1:09:86:3f:e2:e1:7c:c7:8c:
                    ee:b5:b4:c3:31:4a:b9:9e:47:f7:13:1b:e9:4a:6f:
                    6d:f5:b0:13:0a:e5:80:ed:5c:39:08:b1:ca:a7:af:
                    da:ee:dd:47:9e:4e:42:22:b9:97:6c:1d:ae:e9:78:
                    d0:af:9d:c6:56:a8:cd:9c:e3:81:8d:3f:06:0d:c6:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:E7:8D:1C:0E:10:A9:9C:81:E3:7F:38:93:08:B5:A6:3C:13:D0
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:85:58:ef:36:b3:af:10:d8:07:0c:71:3b:34:40:0f:2e:
         4c:0a:d8:10:0d:21:bb:b7:0f:c1:99:ad:72:8c:03:8c:41:54:
         13:d5:5e:3c:6f:7c:4d:05:78:af:41:2e:4e:0a:c2:fe:29:41:
         1c:22:b7:0b:9a:e6:ac:fd:40:0d:0e:17:3e:e0:23:c8:d5:6a:
         ff:f1:06:77:a9:c6:19:e1:89:27:dc:b9:bd:fe:fb:b3:4d:0b:
         8b:dc:de:98:d2:71:68:0d:22:58:f6:28:dd:4d:2c:af:83:51:
         7f:cf:c0:1a:db:06:5f:24:c3:bf:7a:6a:43:46:4d:a7:52:d1:
         19:86:ae:4c:f7:5c:37:85:bd:c9:3d:68:b9:32:92:a3:3a:0f:
         10:23:19:7d:43:75:f7:49:53:c1:e2:a4:48:8e:a6:1a:22:53:
         3a:15:68:19:ef:2b:d4:ad:aa:d4:9b:8c:81:80:ee:0a:6d:0b:
         a1:d7:31:cc:c4:79:ad:46:49:44:b8:c7:8c:68:e2:d2:44:3f:
         31:03:db:48:4c:c3:68:31:3c:0c:2a:53:ef:b8:10:7c:ec:b7:
         d5:37:72:22:33:51:20:3e:61:fa:8f:de:f7:6a:a4:ce:0e:b6:
         b6:d7:58:ad:bc:f9:03:99:a1:e6:13:5a:db:84:d8:c1:8a:fb:
         5f:0f:92:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1eDfLntStDdjGpEAfOwHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk
OWYwMWIwHhcNMjUxMjA2MjEwMTI3WhcNMjUxMjA3MjEwMTI3WjAzMTEwLwYDVQQD
EygzOTA2ZTc4ZDFjMGUxMGE5OWM4MWUzN2YzODkzMDhiNWE2M2MxM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOVyGAH6MhvO58SsWFziNFB/jb9V
Gju66WmJf2us9qgDa9VarWJCwb1/EpBQ5LRDPi3z25wT/vLO70zD2XInOU5xSzw5
mjSuVzPSAWx0tTy99Czu9Dl5PIMoe6jesAjFSOPZfVnBPxk9S3/PRSPaRuf+KQP4
W3LbiWQ2tS1DWp19Qm6g7Wp8EssHWthOjrq3cQNG1Q0wbBnimG/csqG0FazgV1QK
L2rtoaeK0shvG8R5M36Alakvp/7BCYY/4uF8x4zutbTDMUq5nkf3ExvpSm9t9bAT
CuWA7Vw5CLHKp6/a7t1Hnk5CIrmXbB2u6XjQr53GVqjNnOOBjT8GDcbP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkG540cDhCpnIHjfziTCLWmPBPQMB8GA1UdIwQY
MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt
ZjBhNjI0ZDQwOTEyLzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy
LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNSFWO82
s68Q2AcMcTs0QA8uTArYEA0hu7cPwZmtcowDjEFUE9VePG98TQV4r0EuTgrC/ilB
HCK3C5rmrP1ADQ4XPuAjyNVq//EGd6nGGeGJJ9y5vf77s00Li9zemNJxaA0iWPYo
3U0sr4NRf8/AGtsGXyTDv3pqQ0ZNp1LRGYauTPdcN4W9yT1ouTKSozoPECMZfUN1
90lTweKkSI6mGiJTOhVoGe8r1K2q1JuMgYDuCm0LodcxzMR5rUZJRLjHjGji0kQ/
MQPbSEzDaDE8DCpT77gQfOy31TdyIjNRID5h+o/e92qkzg62ttdYrbz5A5mh5hNa
24TYwYr7Xw+Scw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:33 2025 by rpki-client