This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File:                     TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier:          jKHMS11bRRo4QrjjvxvFebWP2sm1qLSJUmAMjmxhokk=
Subject key identifier:   9C:19:8B:87:7B:49:E8:82:CF:30:83:88:02:29:E4:D4:27:6F:22:18
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer:       /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial:       019AF208C78C1E1342A6852C9AB1D570529F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 05:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:52 +0000
Files and hashes:         1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
                          2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: XQYdE52r5hPVZnJAqDMFPbaW0L2sGUI4A+CiCt/fCzw=)
                          3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c7:8c:1e:13:42:a6:85:2c:9a:b1:d5:70:52:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
        Validity
            Not Before: Dec  6 05:00:52 2025 GMT
            Not After : Dec  7 05:00:52 2025 GMT
        Subject: CN=9c198b877b49e882cf3083880229e4d4276f2218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:ea:9c:48:36:e4:04:74:8c:2a:08:bf:01:
                    1c:d2:6d:df:ca:2d:14:9d:aa:db:60:1d:ab:6f:77:
                    0b:44:a1:12:6a:f7:36:fd:eb:25:44:af:b6:f8:4f:
                    2c:9a:3a:1a:20:f1:8c:8f:50:1d:8d:d8:16:11:26:
                    e9:fc:08:be:53:6d:b7:ca:f4:aa:09:be:40:44:f0:
                    3b:23:fa:72:97:77:82:41:54:dd:0b:3c:cd:a4:74:
                    ce:68:20:01:a2:c2:db:b7:85:58:f9:ef:1c:58:33:
                    8f:a0:92:06:c3:ba:a3:33:08:e0:2b:f0:3f:a6:5b:
                    51:87:33:11:82:09:49:22:83:8b:98:da:d5:48:9f:
                    45:37:a2:fb:09:35:d8:28:3e:45:1c:b5:76:85:08:
                    3f:41:81:ee:3c:43:a6:de:8e:39:59:e1:70:68:80:
                    4f:bb:9d:96:8f:cd:68:3b:93:b8:9a:fc:ff:e8:d0:
                    de:27:97:e5:31:e0:ae:56:7b:ad:95:77:7d:f1:2d:
                    37:d9:3d:95:d7:f3:54:48:d2:06:82:37:36:1f:0e:
                    91:ba:2d:7e:a6:eb:fe:f5:fe:a4:7c:5f:9c:18:3d:
                    47:07:f4:77:ae:ac:04:9f:93:17:89:b3:af:22:52:
                    27:5f:46:bd:4f:10:dc:36:e5:06:6a:8e:b6:d4:f5:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:19:8B:87:7B:49:E8:82:CF:30:83:88:02:29:E4:D4:27:6F:22:18
            X509v3 Authority Key Identifier:
                keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8f:41:ee:99:f3:45:cc:10:27:c5:ed:83:af:3a:69:d4:a6:
         5c:57:a2:ad:a8:f0:d9:93:54:27:3f:7c:7e:5e:13:67:5e:8d:
         9e:20:ff:55:2b:eb:29:5f:d3:c2:20:33:cf:da:91:bc:31:cd:
         96:d2:51:93:68:5a:39:a8:a9:cb:40:7b:46:4c:bc:16:8c:dc:
         de:3c:10:c6:08:2a:1e:06:41:40:66:31:ea:0c:54:95:40:0a:
         26:c0:85:e8:e8:25:e2:28:98:92:7e:cc:63:22:86:6c:b7:d7:
         6e:e5:c3:ab:0f:52:e8:b8:f7:95:fd:4a:4f:fd:24:97:89:97:
         a7:c7:1c:5e:48:37:31:fa:d0:5d:1e:71:c1:75:dd:9a:80:ac:
         83:27:0b:b2:47:69:c5:c5:9f:2d:a8:07:ae:b8:cc:0a:9d:79:
         52:29:ba:6c:8a:91:90:84:7f:77:21:3d:5d:a6:5f:43:6d:6d:
         66:72:0a:3e:20:a6:71:65:77:98:c2:87:7d:a0:1b:03:ae:a2:
         46:21:e9:ca:0f:51:aa:41:4c:c6:ea:47:2d:1c:48:8e:16:62:
         d2:21:84:a3:f8:01:69:81:8a:d4:1d:d5:a5:00:24:91:7d:59:
         1d:a0:09:ca:1e:fd:7c:96:84:83:83:25:73:d0:01:0f:67:96:
         b7:7f:f9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCMeMHhNCpoUsmrHVcFKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTJkYzJjMWM5Mzg0N2JmOTc5ZjliMDEwZWRjNGNkYTg0
OWY0ZjgwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD
Eyg5YzE5OGI4NzdiNDllODgyY2YzMDgzODgwMjI5ZTRkNDI3NmYyMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSHqnEg25AR0jCoIvwEc0m3fyi0U
narbYB2rb3cLRKESavc2/eslRK+2+E8smjoaIPGMj1AdjdgWESbp/Ai+U223yvSq
Cb5ARPA7I/pyl3eCQVTdCzzNpHTOaCABosLbt4VY+e8cWDOPoJIGw7qjMwjgK/A/
pltRhzMRgglJIoOLmNrVSJ9FN6L7CTXYKD5FHLV2hQg/QYHuPEOm3o45WeFwaIBP
u52Wj81oO5O4mvz/6NDeJ5flMeCuVnutlXd98S032T2V1/NUSNIGgjc2Hw6Rui1+
puv+9f6kfF+cGD1HB/R3rqwEn5MXibOvIlInX0a9TxDcNuUGao621PXjrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwZi4d7SeiCzzCDiAIp5NQnbyIYMB8GA1UdIwQY
MBaAFE3i3Cwck4R7+Xn5sBDtxM2oSfT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMt
MTQ1YzM2ZTM4Mjc2LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMtMTQ1YzM2ZTM4Mjc2
LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo9B7pnz
RcwQJ8Xtg686adSmXFeirajw2ZNUJz98fl4TZ16NniD/VSvrKV/TwiAzz9qRvDHN
ltJRk2haOaipy0B7Rky8Fozc3jwQxggqHgZBQGYx6gxUlUAKJsCF6Ogl4iiYkn7M
YyKGbLfXbuXDqw9S6Lj3lf1KT/0kl4mXp8ccXkg3MfrQXR5xwXXdmoCsgycLskdp
xcWfLagHrrjMCp15Uim6bIqRkIR/dyE9XaZfQ21tZnIKPiCmcWV3mMKHfaAbA66i
RiHpyg9RqkFMxupHLRxIjhZi0iGEo/gBaYGK1B3VpQAkkX1ZHaAJyh79fJaEg4Ml
c9ABD2eWt3/5jg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:59 2025 by rpki-client