This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          ZGYNgcX34MGMHmfFIn9nK72EMIOIECzNINbLQ9fpj8Y=
Subject key identifier:   A7:70:5C:2B:38:CF:81:78:57:D1:BA:3D:E4:1E:0C:B2:A4:9F:EA:7A
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       019AF1D1869C548015C0D3EE5A17FD924014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          0844
Signing time:             Sat 06 Dec 2025 04:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:31 +0000
Files and hashes:         1: 2YctLvghF2NTGqouDl9SU7WsK8Q.roa (hash: dDP6o/nzzzraOHQZ9zrzu942AWsku2WIoZUV4lB/aVk=)
                          2: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: neDZWc5u854JEJ9isGeuieqXzRKKvZRi8e4bngIGfRc=)
                          3: K4R2wbla95DXju27vgEj2IYahII.roa (hash: oVwWblaprncMfsgnEdqlxFveHCedyBjk+q0e8GaCPaQ=)
                          4: KDytCj01Z8HV3jbDjoNUphJ9ZqE.roa (hash: tpuGPSXore2CO2e6MYBfrJ1Vug8cc9qaaZfG9lHKTHs=)
                          5: WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa (hash: n4Yw3pq5MyOekrSTwdjLFgxLpUsIwy8D4jmXIUXMJcM=)
                          6: x5j9bCfCB-TRkwdEgD-n9hTBKuI.roa (hash: KGBK15KR60NfaIfx8RVCxr6b9iRlBdChSYDsXNFVIqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:86:9c:54:80:15:c0:d3:ee:5a:17:fd:92:40:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Dec  6 04:00:31 2025 GMT
            Not After : Dec  7 04:00:31 2025 GMT
        Subject: CN=a7705c2b38cf817857d1ba3de41e0cb2a49fea7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:ea:6d:a8:68:c8:1a:57:9c:96:85:c2:9b:
                    e6:86:41:5e:1c:e5:34:54:b4:9c:20:2f:1b:f6:23:
                    80:0c:2c:35:de:d3:95:6e:a6:1f:29:25:06:db:8b:
                    87:fb:4d:14:f7:e6:59:99:c9:08:19:df:32:fb:3c:
                    21:27:a0:d5:35:f9:fa:bf:74:26:89:0b:28:dd:88:
                    b4:9b:f9:84:2e:af:c0:d1:14:98:00:e8:13:39:8d:
                    19:ad:85:d6:dc:55:33:76:85:d6:12:78:c5:3e:74:
                    56:13:88:c1:45:85:33:c6:0a:f8:07:39:bf:8e:02:
                    ae:b1:8c:64:7e:75:f4:4e:ea:d1:e7:d6:d0:12:97:
                    37:92:2e:a6:7c:73:10:04:c0:8e:0c:c8:83:97:9e:
                    3e:a0:ff:53:ce:22:b0:7f:0a:d1:4b:9e:c9:20:bd:
                    de:5a:cc:7b:e6:3f:33:15:4d:57:27:ec:15:d0:8e:
                    e8:ac:85:94:ae:9d:44:2f:99:43:94:e2:1a:7f:bb:
                    79:91:07:0b:9b:76:10:70:21:ff:7a:29:01:52:26:
                    fc:c9:01:41:b1:6a:3a:dd:2c:37:33:f3:d4:6f:cc:
                    d8:ec:80:a1:4b:30:e9:20:cb:63:5c:01:be:7d:f9:
                    54:1b:8c:15:da:cf:0a:b1:21:5d:81:64:f5:1d:ed:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:70:5C:2B:38:CF:81:78:57:D1:BA:3D:E4:1E:0C:B2:A4:9F:EA:7A
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:dd:71:e4:e5:c4:81:de:91:44:79:7f:06:64:ac:4a:53:
         8a:68:49:f9:36:ba:dd:5b:eb:ce:fb:0e:59:54:9b:3d:b5:a8:
         f4:a9:0f:cc:58:61:45:37:47:02:2a:11:4d:22:5f:e5:00:31:
         b6:11:19:79:a3:6d:5f:81:45:14:d0:54:a9:be:a8:6b:6d:19:
         73:fe:67:6a:e9:cd:b9:98:c5:9c:0f:45:05:c0:05:8c:b9:1b:
         7f:96:f5:30:53:57:be:67:59:32:9d:92:a3:0c:f3:a4:e4:05:
         b2:a0:c3:8f:cc:1b:33:35:a0:85:e8:72:f2:4f:5b:3e:d7:b0:
         4f:a4:42:7c:e1:c8:8c:3b:21:ba:c1:74:1a:4a:28:93:9a:73:
         e4:22:f8:8e:c5:eb:dc:51:75:67:df:21:bc:9c:95:93:fe:fd:
         ef:da:92:7a:e2:d9:16:71:47:42:7a:8a:6f:f1:a3:6b:1d:7b:
         bc:2b:b1:21:f3:66:38:a7:b1:14:b9:6c:6f:80:c5:30:5e:2f:
         0b:47:db:f2:12:82:44:d2:46:37:2f:8f:c7:da:35:5d:30:4b:
         3c:7e:7f:e6:f7:75:8f:26:43:03:5a:97:7e:8e:29:87:77:ec:
         1d:63:cf:25:7a:72:56:6e:b4:00:58:33:5e:04:7d:51:d6:8b:
         d0:f2:80:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0YacVIAVwNPuWhf9kkAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy
YzI2YmEwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD
EyhhNzcwNWMyYjM4Y2Y4MTc4NTdkMWJhM2RlNDFlMGNiMmE0OWZlYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6PqbahoyBpXnJaFwpvmhkFeHOU0
VLScIC8b9iOADCw13tOVbqYfKSUG24uH+00U9+ZZmckIGd8y+zwhJ6DVNfn6v3Qm
iQso3Yi0m/mELq/A0RSYAOgTOY0ZrYXW3FUzdoXWEnjFPnRWE4jBRYUzxgr4Bzm/
jgKusYxkfnX0TurR59bQEpc3ki6mfHMQBMCODMiDl54+oP9TziKwfwrRS57JIL3e
Wsx75j8zFU1XJ+wV0I7orIWUrp1EL5lDlOIaf7t5kQcLm3YQcCH/eikBUib8yQFB
sWo63Sw3M/PUb8zY7IChSzDpIMtjXAG+fflUG4wV2s8KsSFdgWT1He2acwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdwXCs4z4F4V9G6PeQeDLKkn+p6MB8GA1UdIwQY
MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt
MjIwMGIzY2M1N2U2LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2
LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrrdceTl
xIHekUR5fwZkrEpTimhJ+Ta63VvrzvsOWVSbPbWo9KkPzFhhRTdHAioRTSJf5QAx
thEZeaNtX4FFFNBUqb6oa20Zc/5naunNuZjFnA9FBcAFjLkbf5b1MFNXvmdZMp2S
owzzpOQFsqDDj8wbMzWghehy8k9bPtewT6RCfOHIjDshusF0Gkook5pz5CL4jsXr
3FF1Z98hvJyVk/7979qSeuLZFnFHQnqKb/Gjax17vCuxIfNmOKexFLlsb4DFMF4v
C0fb8hKCRNJGNy+Px9o1XTBLPH5/5vd1jyZDA1qXfo4ph3fsHWPPJXpyVm60AFgz
XgR9UdaL0PKAcg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:18 2025 by rpki-client