This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          hk+sCPZ1KwkXcQAAVYHgjgLK4UZDCuxtMZ8E4nn35fk=
Subject key identifier:   C3:26:0C:34:3C:79:A5:E4:1A:14:8D:A1:7D:92:26:10:FF:32:F2:8A
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019AF4652A546BE61B722C29B02F3929F448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1771
Signing time:             Sat 06 Dec 2025 16:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:01 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: Eh+2tRnwewv/uW3BZ/kyp9fUvW73q7a/8oqhtuHYI30=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:2a:54:6b:e6:1b:72:2c:29:b0:2f:39:29:f4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Dec  6 16:01:01 2025 GMT
            Not After : Dec  7 16:01:01 2025 GMT
        Subject: CN=c3260c343c79a5e41a148da17d922610ff32f28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:8f:6b:c8:40:af:f0:99:d0:85:fb:51:ac:
                    1e:16:72:4b:5d:dc:16:1f:36:2f:18:c2:67:67:02:
                    fc:fb:32:8e:2a:52:98:53:47:14:aa:fd:15:67:14:
                    db:82:4d:05:6a:a4:a8:83:89:7c:c7:35:ca:f7:98:
                    e8:fa:c9:93:6e:82:1a:c3:7b:f1:99:b8:55:a6:3c:
                    5e:9c:d3:6b:d2:1b:2f:70:78:ae:e0:89:2c:d6:53:
                    f3:89:dc:45:99:a9:37:a4:24:49:e8:ac:9a:dd:7d:
                    c0:76:d7:52:6d:3c:ed:83:25:62:f9:4a:52:89:d9:
                    59:e5:30:3f:bc:5e:75:b4:b9:83:d8:5b:67:3a:0e:
                    9b:ca:6d:8e:ce:d1:58:eb:b6:4b:b0:a4:05:cc:bc:
                    fe:11:f1:5c:2d:ae:02:b9:c7:42:54:e4:75:fa:a6:
                    71:70:4d:4c:1f:01:7d:1c:ae:60:c5:37:67:2b:d2:
                    ba:f2:f8:23:4f:61:d6:08:3d:71:79:32:1c:72:eb:
                    5f:98:35:86:d3:12:7f:31:bd:b4:ee:e4:3f:a5:22:
                    10:5c:d7:7c:be:e7:50:15:77:91:e7:ac:40:6f:4b:
                    7a:07:63:f7:db:64:16:97:ad:10:ea:ee:5d:41:4c:
                    97:2c:cb:6d:b0:72:ac:14:cd:aa:e4:5d:a3:88:ba:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:0C:34:3C:79:A5:E4:1A:14:8D:A1:7D:92:26:10:FF:32:F2:8A
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:03:8c:ab:61:a6:1d:1a:d7:17:d3:5a:65:bd:6b:1c:41:
         5b:ba:bd:10:b5:24:d5:39:9a:73:98:b8:a7:ff:9e:41:2b:d5:
         92:5d:89:d9:ed:ee:d6:0f:f5:73:42:29:7a:4d:66:4f:3d:7a:
         73:82:90:4f:2b:5f:03:c0:ca:39:01:83:1f:01:7a:cd:2b:2d:
         20:5f:79:5f:6f:2f:0f:9c:73:d2:91:44:08:66:9e:13:64:7e:
         63:8d:e2:b2:5a:3a:96:8b:ab:e3:1c:34:1c:26:e1:fd:48:1f:
         6c:7e:e5:bf:27:e9:61:04:1f:ca:27:fc:80:b0:c1:29:5c:05:
         b0:46:fb:62:e0:ba:90:25:4c:c5:de:90:f4:35:6f:d6:f7:a0:
         87:ab:20:a2:89:59:c8:cd:2a:7b:0e:31:2a:3b:5c:9b:fa:b0:
         a5:14:b8:b6:e5:25:2e:90:10:96:a5:3f:bd:f8:fc:0c:11:1b:
         c8:ab:22:4f:ae:93:37:a4:d3:fb:f6:72:e2:e9:8f:d9:1a:e9:
         86:de:03:df:17:b0:ae:07:86:b3:cf:14:b3:56:17:38:17:1a:
         73:28:39:70:c9:1e:78:0f:ba:99:e1:fd:f2:c9:fb:28:9d:a5:
         56:01:bb:b9:fa:91:ba:d2:a5:56:f4:bb:bc:f5:86:b1:4e:2f:
         d0:44:60:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0ZSpUa+YbciwpsC85KfRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3
OTI2MzgwHhcNMjUxMjA2MTYwMTAxWhcNMjUxMjA3MTYwMTAxWjAzMTEwLwYDVQQD
EyhjMzI2MGMzNDNjNzlhNWU0MWExNDhkYTE3ZDkyMjYxMGZmMzJmMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LKPa8hAr/CZ0IX7UaweFnJLXdwW
HzYvGMJnZwL8+zKOKlKYU0cUqv0VZxTbgk0FaqSog4l8xzXK95jo+smTboIaw3vx
mbhVpjxenNNr0hsvcHiu4Iks1lPzidxFmak3pCRJ6Kya3X3AdtdSbTztgyVi+UpS
idlZ5TA/vF51tLmD2FtnOg6bym2OztFY67ZLsKQFzLz+EfFcLa4CucdCVOR1+qZx
cE1MHwF9HK5gxTdnK9K68vgjT2HWCD1xeTIccutfmDWG0xJ/Mb207uQ/pSIQXNd8
vudQFXeR56xAb0t6B2P322QWl60Q6u5dQUyXLMttsHKsFM2q5F2jiLpG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMmDDQ8eaXkGhSNoX2SJhD/MvKKMB8GA1UdIwQY
MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt
YjQyMzY0ODk1MDgzLzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz
LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF0DjKth
ph0a1xfTWmW9axxBW7q9ELUk1Tmac5i4p/+eQSvVkl2J2e3u1g/1c0Ipek1mTz16
c4KQTytfA8DKOQGDHwF6zSstIF95X28vD5xz0pFECGaeE2R+Y43islo6lour4xw0
HCbh/UgfbH7lvyfpYQQfyif8gLDBKVwFsEb7YuC6kCVMxd6Q9DVv1vegh6sgoolZ
yM0qew4xKjtcm/qwpRS4tuUlLpAQlqU/vfj8DBEbyKsiT66TN6TT+/Zy4umP2Rrp
ht4D3xewrgeGs88Us1YXOBcacyg5cMkeeA+6meH98sn7KJ2lVgG7ufqRutKlVvS7
vPWGsU4v0ERgCA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:59 2025 by rpki-client