This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          sym+xQRPdrFIvjFmrDvMGxvqoLwFVrx7bzpiNLfDm10=
Subject key identifier:   EC:02:FE:D4:98:E2:61:E9:C8:D7:C9:3C:BA:6A:AC:3C:8C:B8:FF:8A
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       019AF0BF9D10ADEDF698E7220010E6E391F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 23:01:20 +0000
Manifest this update:     Fri 05 Dec 2025 23:01:20 +0000
Manifest next update:     Sat 06 Dec 2025 23:01:20 +0000
Files and hashes:         1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
                          2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: uCLb3MnYZ97QG+1oOQLzuAYwYA4NLolo5+EDeoCurKI=)
                          3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:9d:10:ad:ed:f6:98:e7:22:00:10:e6:e3:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: Dec  5 23:01:20 2025 GMT
            Not After : Dec  6 23:01:20 2025 GMT
        Subject: CN=ec02fed498e261e9c8d7c93cba6aac3c8cb8ff8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:a9:95:77:49:27:e9:1c:98:23:c4:c2:b5:
                    af:87:9c:0f:95:88:6e:cb:10:9e:49:39:31:29:39:
                    a9:11:77:1c:51:5c:14:db:fe:48:ee:25:c4:79:4c:
                    54:e1:00:6e:6b:db:71:f5:ee:85:0b:c2:c6:63:e4:
                    b5:b6:9d:27:74:ec:11:cc:a4:30:61:c7:12:9a:83:
                    6e:15:62:e6:ff:68:be:5c:de:77:d1:13:51:7a:29:
                    9f:25:a3:f7:69:55:e7:8e:90:8a:20:6c:fe:1b:d8:
                    4a:99:bd:7c:bc:04:9e:6a:bd:e1:9f:e9:06:f5:03:
                    62:02:8e:d8:cb:cb:97:f5:5d:dc:0f:a6:bd:17:16:
                    37:02:95:7e:f8:46:65:1a:af:cb:e9:6f:5b:70:7c:
                    7e:83:65:fb:e4:81:19:f1:53:73:30:61:72:1f:c8:
                    b4:d1:cf:e5:32:72:8b:6b:dc:b4:98:16:c9:12:e1:
                    6b:2b:a1:7a:3c:c8:e5:a1:95:f1:9d:d0:6f:16:36:
                    e7:ad:c6:27:cb:ed:3b:3c:f6:ea:e0:13:d0:01:70:
                    88:1b:03:79:dd:4d:01:9f:85:27:ac:22:65:4d:83:
                    c9:40:29:31:61:a1:23:07:71:31:02:25:84:02:8d:
                    f7:ca:b4:42:cc:fe:26:ef:a9:1e:6d:ed:0d:87:b5:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:02:FE:D4:98:E2:61:E9:C8:D7:C9:3C:BA:6A:AC:3C:8C:B8:FF:8A
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:ed:b5:8d:5f:b9:83:f7:fb:12:36:88:b6:60:50:01:f7:
         07:ad:87:ff:4f:42:53:78:51:55:06:7f:6e:20:ba:5b:aa:c1:
         59:68:65:b3:e2:54:6f:a5:75:ac:08:f5:36:fd:1d:0a:2e:7e:
         5f:78:75:ed:51:d4:2a:47:ac:70:93:c1:2f:26:c4:eb:ea:ee:
         27:f4:6b:20:68:94:c7:0e:7f:86:99:2a:a7:a4:b9:27:ed:ad:
         28:e7:b6:32:3c:3e:2c:5e:4c:05:1d:ce:41:84:6d:16:ab:aa:
         ab:15:9e:bb:05:7b:ea:f2:28:fa:76:39:5e:f2:5b:c3:a2:83:
         b3:58:ad:aa:0e:62:6e:7d:8e:8a:c9:37:1d:8f:ca:20:6b:85:
         15:1c:57:e6:5b:c7:15:ce:28:9d:d0:6f:f2:17:c7:02:5b:b3:
         0a:e2:50:b8:56:2d:12:02:cd:ea:eb:ef:11:d1:24:91:39:8c:
         dd:04:3c:23:cb:d4:33:55:b2:6d:b5:dd:48:63:95:53:7f:0f:
         63:f6:11:62:4d:8e:86:7b:7e:7c:2a:f6:5b:ae:db:62:0f:fc:
         3f:f8:3f:03:de:51:5c:59:5a:77:fc:0f:36:fc:b1:98:56:5a:
         e9:4b:d0:0b:ff:c3:60:ac:bf:f6:b1:f4:62:4f:b3:86:7d:43:
         0b:6c:f3:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwv50Qre32mOciABDm45HwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD
EyhlYzAyZmVkNDk4ZTI2MWU5YzhkN2M5M2NiYTZhYWMzYzhjYjhmZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y+plXdJJ+kcmCPEwrWvh5wPlYhu
yxCeSTkxKTmpEXccUVwU2/5I7iXEeUxU4QBua9tx9e6FC8LGY+S1tp0ndOwRzKQw
YccSmoNuFWLm/2i+XN530RNReimfJaP3aVXnjpCKIGz+G9hKmb18vASear3hn+kG
9QNiAo7Yy8uX9V3cD6a9FxY3ApV++EZlGq/L6W9bcHx+g2X75IEZ8VNzMGFyH8i0
0c/lMnKLa9y0mBbJEuFrK6F6PMjloZXxndBvFjbnrcYny+07PPbq4BPQAXCIGwN5
3U0Bn4UnrCJlTYPJQCkxYaEjB3ExAiWEAo33yrRCzP4m76kebe0Nh7U3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwC/tSY4mHpyNfJPLpqrDyMuP+KMB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqrttY1f
uYP3+xI2iLZgUAH3B62H/09CU3hRVQZ/biC6W6rBWWhls+JUb6V1rAj1Nv0dCi5+
X3h17VHUKkescJPBLybE6+ruJ/RrIGiUxw5/hpkqp6S5J+2tKOe2Mjw+LF5MBR3O
QYRtFquqqxWeuwV76vIo+nY5XvJbw6KDs1itqg5ibn2Oisk3HY/KIGuFFRxX5lvH
Fc4ondBv8hfHAluzCuJQuFYtEgLN6uvvEdEkkTmM3QQ8I8vUM1WybbXdSGOVU38P
Y/YRYk2Ohnt+fCr2W67bYg/8P/g/A95RXFlad/wPNvyxmFZa6UvQC//DYKy/9rH0
Yk+zhn1DC2zzqw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:23 2025 by rpki-client