This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File:                     Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier:          UNsIbUHuBsFZB5hBYKsDGzfYJ9t9RE94fAwv8iFtHkg=
Subject key identifier:   60:E8:6C:38:29:E4:98:6F:B2:4A:7A:5B:1D:B9:C7:E1:8B:68:1B:76
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer:       /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial:       019B2B1CDB39796E74AB7749C23C79700A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number:          0ACF
Signing time:             Wed 17 Dec 2025 07:01:09 +0000
Manifest this update:     Wed 17 Dec 2025 07:01:09 +0000
Manifest next update:     Thu 18 Dec 2025 07:01:09 +0000
Files and hashes:         1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
                          2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: 6bmbI/YX2oeTrxGG4pbqrDwtnbjj8k79KmLTxsFHOKg=)
                          3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1c:db:39:79:6e:74:ab:77:49:c2:3c:79:70:0a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
        Validity
            Not Before: Dec 17 07:01:09 2025 GMT
            Not After : Dec 18 07:01:09 2025 GMT
        Subject: CN=60e86c3829e4986fb24a7a5b1db9c7e18b681b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:06:7a:7b:26:08:8b:98:76:92:74:e0:a2:
                    05:e0:80:45:4d:0a:a4:fe:0c:37:f5:0d:b4:cb:26:
                    00:c3:c1:a9:30:b5:10:76:33:a7:94:d7:3b:d8:60:
                    07:ff:86:c5:07:2c:5d:7b:f5:2b:2e:37:84:b9:c8:
                    d5:67:e6:cc:e6:96:08:97:e9:0a:79:3f:92:a1:80:
                    e0:f0:99:e0:d1:ad:14:fc:9f:28:04:29:71:e2:0e:
                    9f:63:1c:6b:13:dc:d2:21:71:70:6b:1c:42:50:61:
                    04:11:c6:74:c0:e1:39:26:b4:cd:46:bd:8f:7f:09:
                    1d:a0:65:08:d0:bf:78:06:87:c6:e9:28:3d:7c:e8:
                    44:4f:c0:b1:6c:af:cc:90:54:c9:b9:78:b7:bf:4f:
                    ce:25:7a:27:9d:81:b7:9c:ec:ce:59:8c:01:87:52:
                    80:18:e6:53:da:b7:a1:85:46:11:99:e0:16:f3:18:
                    75:99:13:35:2f:d9:67:ed:6b:2c:35:2d:d4:1b:93:
                    78:02:53:57:60:40:ea:92:e2:5e:71:a4:4c:3d:8b:
                    47:f5:10:b3:7e:0f:ee:a1:8e:a4:d4:e8:fb:51:2c:
                    2e:82:69:da:90:c0:9c:26:18:3f:da:99:ca:7d:d2:
                    7d:f9:29:d1:4d:6f:de:c4:c6:95:23:9b:41:c7:15:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:6C:38:29:E4:98:6F:B2:4A:7A:5B:1D:B9:C7:E1:8B:68:1B:76
            X509v3 Authority Key Identifier:
                keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:90:c5:87:13:d7:b4:87:be:69:37:8e:32:67:9f:34:da:c8:
         c7:49:44:bf:8a:4b:e9:9b:92:79:e9:87:86:a5:d3:c1:bf:e1:
         fb:74:3d:e9:17:86:11:d2:4d:11:f4:08:23:88:a8:48:2d:ac:
         bc:31:e9:a4:f4:20:92:67:e8:6d:1b:e7:c4:69:21:56:36:58:
         d7:a5:54:34:ab:78:5c:24:0e:f2:54:9e:2f:b5:e0:3a:c4:e3:
         bc:98:c3:04:3d:0a:62:30:e4:e3:fd:d8:66:60:60:26:05:4a:
         c4:da:f6:b7:60:dd:08:b8:88:a3:b1:dd:61:3d:c8:3b:52:40:
         dd:61:4d:50:4b:e9:c0:88:86:4d:8a:fa:74:b1:9b:86:f4:36:
         32:eb:86:46:9b:1d:72:7a:b5:0d:42:78:b8:cb:f5:e2:80:dc:
         d8:4e:06:ec:98:a9:e8:d0:b2:74:c2:14:bf:09:84:79:44:a2:
         91:73:b4:dd:a1:24:35:c5:59:2f:91:b6:19:bb:0f:30:4a:63:
         1f:f5:08:f0:23:99:0a:ff:49:44:8b:15:2d:62:1f:e5:85:1c:
         36:08:3d:a8:80:3c:44:03:3f:64:32:8c:d8:c2:d0:00:37:a7:
         b7:0e:ee:05:57:d2:57:29:85:fa:ad:ca:53:fb:29:7c:ff:c7:
         55:f4:2c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsrHNs5eW50q3dJwjx5cAoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjUxMjE3MDcwMTA5WhcNMjUxMjE4MDcwMTA5WjAzMTEwLwYDVQQD
Eyg2MGU4NmMzODI5ZTQ5ODZmYjI0YTdhNWIxZGI5YzdlMThiNjgxYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r8GensmCIuYdpJ04KIF4IBFTQqk
/gw39Q20yyYAw8GpMLUQdjOnlNc72GAH/4bFByxde/UrLjeEucjVZ+bM5pYIl+kK
eT+SoYDg8Jng0a0U/J8oBClx4g6fYxxrE9zSIXFwaxxCUGEEEcZ0wOE5JrTNRr2P
fwkdoGUI0L94BofG6Sg9fOhET8CxbK/MkFTJuXi3v0/OJXonnYG3nOzOWYwBh1KA
GOZT2rehhUYRmeAW8xh1mRM1L9ln7WssNS3UG5N4AlNXYEDqkuJecaRMPYtH9RCz
fg/uoY6k1Oj7USwugmnakMCcJhg/2pnKfdJ9+SnRTW/exMaVI5tBxxWw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDobDgp5Jhvskp6Wx25x+GLaBt2MB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZDFhxPX
tIe+aTeOMmefNNrIx0lEv4pL6ZuSeemHhqXTwb/h+3Q96ReGEdJNEfQII4ioSC2s
vDHppPQgkmfobRvnxGkhVjZY16VUNKt4XCQO8lSeL7XgOsTjvJjDBD0KYjDk4/3Y
ZmBgJgVKxNr2t2DdCLiIo7HdYT3IO1JA3WFNUEvpwIiGTYr6dLGbhvQ2MuuGRpsd
cnq1DUJ4uMv14oDc2E4G7Jip6NCydMIUvwmEeUSikXO03aEkNcVZL5G2GbsPMEpj
H/UI8COZCv9JRIsVLWIf5YUcNgg9qIA8RAM/ZDKM2MLQADentw7uBVfSVymF+q3K
U/spfP/HVfQsaw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 13:43:19 2025 by rpki-client