This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File:                     dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier:          ZeEhhxibqnubbUpimXxLVBaqtJUmd1WUUL9OjzjcIpU=
Subject key identifier:   83:89:E4:52:47:3F:47:03:E1:E1:81:8D:36:DF:18:E2:CE:9C:BF:05
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer:       /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial:       019AF2AD4AF490CD48BA8F3F9CB112CDE2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 08:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:34 +0000
Files and hashes:         1: 1-1fD9INC6tdul0-Zxx4kw5UQaSA.roa (hash: xArWY+ZJbdFaL3BIojqGwzrX81Sbjb4pJCyT9h2MU5E=)
                          2: 8_gnS_gysL9vFXycvHFYUuT3eFQ.roa (hash: fdIKsa34nJXAe2MSq8dUjvxc5//TDcQhR1zCGckQ59Y=)
                          3: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: 4vD7AN3iVy2ukyLC1nLigaAu6hdk/k/p1ln7+8KyMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:4a:f4:90:cd:48:ba:8f:3f:9c:b1:12:cd:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Dec  6 08:00:34 2025 GMT
            Not After : Dec  7 08:00:34 2025 GMT
        Subject: CN=8389e452473f4703e1e1818d36df18e2ce9cbf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:27:81:3d:6d:23:da:60:3c:c2:2f:8f:d9:
                    75:5e:9e:65:53:c2:3f:b4:a4:ba:85:a3:2d:8f:4d:
                    81:f4:48:91:f3:b6:e6:97:c3:42:e2:d4:e0:bd:d3:
                    14:e7:f0:82:a9:46:08:b4:dd:c4:e2:90:91:e6:c9:
                    f0:de:6a:0d:24:56:2b:bb:75:58:6c:92:ec:e8:fd:
                    50:a6:58:c1:f3:06:09:6d:60:3c:9e:bc:18:90:6a:
                    87:60:08:5b:bd:eb:48:8e:41:23:c8:6f:fd:9b:fc:
                    27:6a:25:ce:ec:73:dd:6b:8d:e3:20:f8:0d:4c:f3:
                    c9:76:64:0b:f8:37:d1:65:7f:4e:4b:18:3f:04:99:
                    94:d1:75:4e:de:f4:f1:72:24:bb:b7:66:90:9a:ea:
                    e3:ac:ff:f7:50:b6:77:be:f2:d4:fe:ac:f6:c6:0b:
                    08:ca:9d:16:bf:ae:a8:28:c5:5e:40:e5:0e:f3:88:
                    b7:4e:3f:05:55:e3:87:8f:6e:51:b3:27:f3:ff:6d:
                    f5:9d:aa:50:9e:97:17:8a:2a:c8:92:89:04:8b:b2:
                    79:55:d3:57:0c:4c:8e:3e:80:33:0a:f4:6b:65:e4:
                    2a:4f:aa:52:16:4b:86:d1:13:5f:af:81:50:04:dc:
                    3c:d6:49:24:1e:93:64:85:da:3f:6e:1e:a8:05:a7:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:89:E4:52:47:3F:47:03:E1:E1:81:8D:36:DF:18:E2:CE:9C:BF:05
            X509v3 Authority Key Identifier:
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:a0:ee:54:42:12:d1:82:8c:59:f0:c1:f8:48:f6:b7:c3:
         3d:e6:2d:54:30:34:45:5e:b9:c8:2c:3f:c5:8b:ad:93:cd:de:
         7e:05:80:de:f4:f7:ca:82:8f:26:16:40:e3:d8:52:d4:67:be:
         67:7b:a8:b4:e7:0a:f8:9d:e5:1b:be:5c:22:8c:93:f4:28:d7:
         ea:02:4d:60:36:39:71:35:40:eb:be:2b:65:82:a3:10:52:ae:
         18:64:df:18:76:96:58:7f:bf:5b:14:b6:5a:e9:07:25:08:3b:
         d4:9a:f0:4d:7b:97:fb:d2:a7:05:2d:7c:e7:55:27:a9:86:74:
         e1:46:b6:f8:d1:3e:d4:43:5e:c6:d2:40:f5:98:43:fc:2d:c8:
         46:07:28:c2:71:88:36:2f:17:9e:8b:9b:ba:8e:e0:3e:2d:55:
         54:90:4c:da:21:73:9e:a6:e1:19:89:66:f5:d5:22:11:53:f5:
         98:62:87:8d:8e:fd:0c:00:95:bf:94:31:56:fb:c1:60:13:44:
         01:ae:57:21:4b:95:9d:cf:02:4f:50:15:78:7d:4c:3b:bc:c7:
         bc:ff:f1:95:84:e9:a4:e7:1e:39:87:59:8f:fa:9e:90:ae:ff:
         07:15:82:44:59:76:c3:59:1a:3c:cd:fb:c3:1f:74:2a:12:cc:
         29:12:1a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrUr0kM1Iuo8/nLESzeLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj
MGQ4NTUwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD
Eyg4Mzg5ZTQ1MjQ3M2Y0NzAzZTFlMTgxOGQzNmRmMThlMmNlOWNiZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtkngT1tI9pgPMIvj9l1Xp5lU8I/
tKS6haMtj02B9EiR87bml8NC4tTgvdMU5/CCqUYItN3E4pCR5snw3moNJFYru3VY
bJLs6P1QpljB8wYJbWA8nrwYkGqHYAhbvetIjkEjyG/9m/wnaiXO7HPda43jIPgN
TPPJdmQL+DfRZX9OSxg/BJmU0XVO3vTxciS7t2aQmurjrP/3ULZ3vvLU/qz2xgsI
yp0Wv66oKMVeQOUO84i3Tj8FVeOHj25Rsyfz/231napQnpcXiirIkokEi7J5VdNX
DEyOPoAzCvRrZeQqT6pSFkuG0RNfr4FQBNw81kkkHpNkhdo/bh6oBafO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOJ5FJHP0cD4eGBjTbfGOLOnL8FMB8GA1UdIwQY
MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt
ZjQ1NzU0NDM2M2VmLzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm
LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/6g7lRC
EtGCjFnwwfhI9rfDPeYtVDA0RV65yCw/xYutk83efgWA3vT3yoKPJhZA49hS1Ge+
Z3uotOcK+J3lG75cIoyT9CjX6gJNYDY5cTVA674rZYKjEFKuGGTfGHaWWH+/WxS2
WukHJQg71JrwTXuX+9KnBS1851UnqYZ04Ua2+NE+1ENextJA9ZhD/C3IRgcownGI
Ni8Xnoubuo7gPi1VVJBM2iFznqbhGYlm9dUiEVP1mGKHjY79DACVv5QxVvvBYBNE
Aa5XIUuVnc8CT1AVeH1MO7zHvP/xlYTppOceOYdZj/qekK7/BxWCRFl2w1kaPM37
wx90KhLMKRIaCA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:08 2025 by rpki-client