This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File:                     I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier:          yhYXdRIAmbSPRM3sC3kByQzMRO1Usgav0dncvuqmm7Q=
Subject key identifier:   FC:E5:60:E8:3F:F8:04:7E:8F:6D:92:E7:82:F8:71:EB:48:3D:DD:31
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer:       /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial:       019AF12E639A7E7B4D818ED3E4D822C34FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 01:02:20 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:20 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:20 +0000
Files and hashes:         1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
                          2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: JBtpH09Wud3DL+4cfXPpzKpBktJ8rP3/BLF4yjnuCKc=)
                          3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:63:9a:7e:7b:4d:81:8e:d3:e4:d8:22:c3:4f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
        Validity
            Not Before: Dec  6 01:02:20 2025 GMT
            Not After : Dec  7 01:02:20 2025 GMT
        Subject: CN=fce560e83ff8047e8f6d92e782f871eb483ddd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:b5:6a:ac:90:69:bb:c6:4d:56:92:b0:3a:
                    34:6c:e8:be:59:34:6c:d1:b8:01:6f:d1:7a:a6:ee:
                    20:92:6b:2f:2b:dd:33:47:ad:41:2f:12:71:3d:a5:
                    7a:95:51:a3:e0:ab:57:97:64:ff:20:98:d3:03:dd:
                    55:2f:08:32:39:92:3f:ca:ca:b7:c4:39:40:92:1f:
                    33:d0:8e:49:21:4c:7d:2c:a9:a5:24:e9:08:5c:25:
                    73:f7:9e:2f:03:17:8c:6e:66:f4:ee:73:1f:f5:58:
                    0b:79:12:a4:58:f0:82:a0:af:45:29:7e:4f:0f:12:
                    f6:a6:5a:56:19:52:ef:6a:e3:f3:10:56:05:7e:82:
                    5e:07:c2:ad:ed:88:47:bd:89:5c:31:d3:b7:7d:ef:
                    77:fe:3d:e9:c1:b8:70:8e:fa:84:5e:e3:68:48:4a:
                    7d:7a:6b:05:c1:ae:66:89:57:03:38:52:43:2f:7e:
                    6f:4b:9b:6b:cc:28:b7:7e:f9:16:c2:16:7d:d0:90:
                    4b:c5:88:4a:6b:4a:10:2f:ee:06:6c:03:27:12:e9:
                    41:c0:7f:da:d1:a0:7a:be:f8:d2:7c:13:7e:f8:4c:
                    14:83:bf:54:11:7f:bf:6a:a7:9d:73:3b:47:61:8d:
                    b8:90:d1:8e:9d:2c:f7:90:d7:d0:6e:3b:40:ec:56:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E5:60:E8:3F:F8:04:7E:8F:6D:92:E7:82:F8:71:EB:48:3D:DD:31
            X509v3 Authority Key Identifier:
                keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:e2:26:dd:ec:85:c7:cf:0b:75:74:3f:fc:b1:ec:bb:e1:
         88:8a:f9:31:b7:5b:a8:15:de:47:7a:54:31:a2:7d:08:4c:5c:
         35:98:8d:27:b2:8e:bc:2a:75:88:2e:28:3d:ad:86:54:99:27:
         d7:ea:a6:bc:72:46:16:40:b4:51:b7:54:20:a0:85:83:ed:ad:
         9b:90:6d:a9:fd:7d:2a:45:7a:09:2a:78:bd:f7:66:e8:40:07:
         d5:dc:51:75:41:3a:b5:dd:bf:f2:79:d0:2b:b0:bd:31:b8:4c:
         48:f9:66:e6:5d:0d:11:2a:ee:94:83:ba:5c:db:59:91:32:e7:
         08:dd:c0:ae:99:2c:53:1d:7c:8d:ce:d3:72:e1:69:3d:39:7b:
         f1:8e:fc:79:b8:99:2e:95:c0:8b:01:59:87:d8:62:aa:d7:d7:
         a2:e6:c1:e3:de:e9:aa:5d:69:a1:ee:f2:4c:97:87:70:5e:98:
         7b:a2:85:14:ca:57:be:84:d2:e6:3b:01:4a:bf:d5:ac:33:7e:
         a2:35:7f:60:01:51:c5:55:22:e8:f8:f5:44:6d:1f:7d:81:53:
         b1:44:55:0d:53:41:81:7e:d7:ea:95:c1:40:b8:13:d4:92:72:
         63:44:22:74:00:e0:8b:92:7d:1c:34:3f:5b:12:88:ad:b1:c8:
         4f:f6:a5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLmOafntNgY7T5Ngiw0+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTE2M2QzOWRiODg4MTZjZGRjNTk3YTVkYjVlYWU3MDdk
M2RlMzkwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD
EyhmY2U1NjBlODNmZjgwNDdlOGY2ZDkyZTc4MmY4NzFlYjQ4M2RkZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbS1aqyQabvGTVaSsDo0bOi+WTRs
0bgBb9F6pu4gkmsvK90zR61BLxJxPaV6lVGj4KtXl2T/IJjTA91VLwgyOZI/ysq3
xDlAkh8z0I5JIUx9LKmlJOkIXCVz954vAxeMbmb07nMf9VgLeRKkWPCCoK9FKX5P
DxL2plpWGVLvauPzEFYFfoJeB8Kt7YhHvYlcMdO3fe93/j3pwbhwjvqEXuNoSEp9
emsFwa5miVcDOFJDL35vS5trzCi3fvkWwhZ90JBLxYhKa0oQL+4GbAMnEulBwH/a
0aB6vvjSfBN++EwUg79UEX+/aqedcztHYY24kNGOnSz3kNfQbjtA7FZxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzlYOg/+AR+j22S54L4cetIPd0xMB8GA1UdIwQY
MBaAFCNRY9OduIgWzdxZel216ucH0945MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgt
OTE1MDI5NmRhYTBhLzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgtOTE1MDI5NmRhYTBh
LzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMPiJt3s
hcfPC3V0P/yx7LvhiIr5MbdbqBXeR3pUMaJ9CExcNZiNJ7KOvCp1iC4oPa2GVJkn
1+qmvHJGFkC0UbdUIKCFg+2tm5Btqf19KkV6CSp4vfdm6EAH1dxRdUE6td2/8nnQ
K7C9MbhMSPlm5l0NESrulIO6XNtZkTLnCN3ArpksUx18jc7TcuFpPTl78Y78ebiZ
LpXAiwFZh9hiqtfXoubB497pql1poe7yTJeHcF6Ye6KFFMpXvoTS5jsBSr/VrDN+
ojV/YAFRxVUi6Pj1RG0ffYFTsURVDVNBgX7X6pXBQLgT1JJyY0QidADgi5J9HDQ/
WxKIrbHIT/albA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:12 2025 by rpki-client