This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          hOwdMr5EOuAZrQ8axu7iN1+U1nW1ByMM755v/0FwzUs=
Subject key identifier:   19:6D:63:E9:50:D8:72:67:8B:B8:49:1B:1D:EB:CE:44:94:BA:52:A1
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019AF4D2B82B868C627D3546CA11C710D52A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          134D
Signing time:             Sat 06 Dec 2025 18:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:41 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: 1Nvn33Obgehy3l6I0PcsJEBG7aGJi8ujulb8+V56elE=)
                          2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
                          3: 2JTjCNKMAxBu0WpDBBMJTO7JE08.roa (hash: tj4BSTj23X17OmZWgILj54BaiHHtzK2DS2th4uQEtHw=)
                          4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
                          5: PAWgUkJGkZMMH0B0t_bDMbs7oV8.roa (hash: 4QE+DZNcvEZQ8RmxR+2Kr+4pUxx1nFvP9EyqXOoK9Tw=)
                          6: Y4gwOh1dy9ru89frBgyR0UP929Y.roa (hash: pZTR407dAAaj2WcTPtyQjoDBY8vVKouXvzxyTxJMQdE=)
                          7: j-g4O52bZEUxSu_6zXDvFKIKW-s.roa (hash: /WqdN6gST6znMSNmoYRfF+zJ/x7YCMAZ5DLq6fglCYU=)
                          8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
                          9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:b8:2b:86:8c:62:7d:35:46:ca:11:c7:10:d5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Dec  6 18:00:41 2025 GMT
            Not After : Dec  7 18:00:41 2025 GMT
        Subject: CN=196d63e950d872678bb8491b1debce4494ba52a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:f7:84:8c:24:cb:d6:bc:fc:b8:16:9f:ba:
                    51:71:c7:07:16:63:ae:90:f1:c5:35:f9:44:35:51:
                    2f:65:f2:10:72:7e:1f:c2:15:b7:e6:d9:de:89:a7:
                    13:4a:8e:b0:9c:c0:3d:9c:c7:e5:f2:6d:02:33:11:
                    e7:b3:a9:b0:d4:47:a4:d5:29:13:11:35:28:15:f6:
                    7d:40:73:af:b7:ff:86:0a:6f:5e:86:5b:50:cf:e3:
                    b1:ec:c5:61:f0:90:18:b5:f0:5f:20:8f:da:0a:32:
                    b4:8b:c9:d8:70:34:c0:f5:d2:cb:f1:70:48:74:27:
                    f4:3b:2a:b2:01:76:79:94:71:60:dd:de:7d:78:98:
                    18:54:7a:6d:f5:cf:27:73:02:53:bf:a2:ad:72:f6:
                    18:ed:e4:88:ec:d8:c6:91:a8:af:46:1b:bd:a8:e7:
                    92:78:ea:21:a0:0e:c5:e5:f6:3e:63:8b:70:74:de:
                    d5:17:f2:ec:1d:c8:ca:c8:0f:3b:d4:27:52:48:93:
                    7d:de:72:c1:52:1a:4d:88:4c:0a:73:2b:12:0d:42:
                    e0:54:d8:66:55:da:4a:52:11:a7:0c:db:16:c0:82:
                    f2:7d:e5:2a:12:39:6f:2b:69:54:96:48:9e:9d:e7:
                    89:50:93:26:8d:f1:28:96:17:b4:a7:39:bd:01:ae:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6D:63:E9:50:D8:72:67:8B:B8:49:1B:1D:EB:CE:44:94:BA:52:A1
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:d1:38:99:67:45:d0:e7:5e:a6:dc:0a:27:c1:6a:8e:9e:
         ff:a2:f4:e9:8f:2f:91:68:10:c6:b2:30:d0:b4:a5:c3:24:88:
         22:bd:9f:0b:5e:c6:7d:1d:27:5b:61:7d:e5:b6:f2:5f:a0:a9:
         35:72:8b:e9:ec:bf:87:34:6e:d0:f7:d3:17:55:7b:b3:59:16:
         8e:0e:8b:a9:c3:64:a4:30:a0:3d:9c:65:41:c8:c3:9e:2a:c6:
         e7:b0:6c:d4:36:6e:77:01:e7:e4:85:e3:ba:ff:6b:57:92:71:
         da:8f:84:98:bc:91:a0:45:ce:da:ac:77:eb:38:28:68:d2:f0:
         ad:cd:e8:f2:40:4d:2a:9a:65:49:6e:40:e9:05:55:b4:26:86:
         d4:0a:36:64:60:01:48:35:fe:bc:08:16:26:d9:a6:91:c5:eb:
         07:9a:d9:58:ca:3c:4f:ba:d2:fc:fa:c8:f5:bc:f7:0e:8d:53:
         e9:4a:4d:36:12:c3:96:f1:7a:80:99:46:c2:e9:67:11:8a:c0:
         7a:3d:26:12:63:81:03:7e:8c:83:ff:d6:17:10:db:b2:ed:4a:
         88:99:e4:cd:79:68:41:f3:40:f3:13:4b:5d:5a:81:b0:c0:2a:
         ca:b9:65:d1:8b:66:91:fe:10:b0:2c:b7:44:fd:29:37:a6:e4:
         8e:66:cb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr00rgrhoxifTVGyhHHENUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjUxMjA2MTgwMDQxWhcNMjUxMjA3MTgwMDQxWjAzMTEwLwYDVQQD
EygxOTZkNjNlOTUwZDg3MjY3OGJiODQ5MWIxZGViY2U0NDk0YmE1MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4f3hIwky9a8/LgWn7pRcccHFmOu
kPHFNflENVEvZfIQcn4fwhW35tneiacTSo6wnMA9nMfl8m0CMxHns6mw1Eek1SkT
ETUoFfZ9QHOvt/+GCm9ehltQz+Ox7MVh8JAYtfBfII/aCjK0i8nYcDTA9dLL8XBI
dCf0OyqyAXZ5lHFg3d59eJgYVHpt9c8ncwJTv6KtcvYY7eSI7NjGkaivRhu9qOeS
eOohoA7F5fY+Y4twdN7VF/LsHcjKyA871CdSSJN93nLBUhpNiEwKcysSDULgVNhm
VdpKUhGnDNsWwILyfeUqEjlvK2lUlkieneeJUJMmjfEolhe0pzm9Aa7nzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBltY+lQ2HJni7hJGx3rzkSUulKhMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc7ROJln
RdDnXqbcCifBao6e/6L06Y8vkWgQxrIw0LSlwySIIr2fC17GfR0nW2F95bbyX6Cp
NXKL6ey/hzRu0PfTF1V7s1kWjg6LqcNkpDCgPZxlQcjDnirG57Bs1DZudwHn5IXj
uv9rV5Jx2o+EmLyRoEXO2qx36zgoaNLwrc3o8kBNKpplSW5A6QVVtCaG1Ao2ZGAB
SDX+vAgWJtmmkcXrB5rZWMo8T7rS/PrI9bz3Do1T6UpNNhLDlvF6gJlGwulnEYrA
ej0mEmOBA36Mg//WFxDbsu1KiJnkzXloQfNA8xNLXVqBsMAqyrll0Ytmkf4QsCy3
RP0pN6bkjmbLOg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:12 2025 by rpki-client