This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          bWALsg0VpiEBXKBoxhlMZFFzCNFQ9/V9RJDBA/xjNPo=
Subject key identifier:   38:09:E8:02:4B:63:71:52:80:3E:E8:5B:8A:BA:98:38:4C:D5:21:5B
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019AF27714FD14506D28E339CBCE302FF947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 07:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:21 +0000
Files and hashes:         1: ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa (hash: kZC3BUi9IJGxujxTtEudY5sD/lL78MLQwa1Gtt8Q7zA=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: W713rCg6hZ+seOYQbrMI61GdFZkryx3/kkv/IWCHTNk=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:14:fd:14:50:6d:28:e3:39:cb:ce:30:2f:f9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Dec  6 07:01:21 2025 GMT
            Not After : Dec  7 07:01:21 2025 GMT
        Subject: CN=3809e8024b637152803ee85b8aba98384cd5215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:66:44:dd:fc:b1:46:e1:4d:14:2b:90:c3:
                    ca:ec:4f:33:2e:76:d3:71:84:d3:be:a8:3f:94:f7:
                    07:5e:fb:00:09:c1:15:5a:a5:a5:2a:e4:52:51:4b:
                    bc:f7:bd:62:04:d7:d8:1f:b2:ca:2d:a8:95:cc:ff:
                    f6:55:bc:13:7c:c3:4d:72:67:8b:37:b8:df:62:56:
                    df:51:b8:27:07:9e:e6:b0:45:cf:86:f4:f7:15:f6:
                    82:aa:07:46:1a:fd:3f:40:99:bc:a7:e0:88:39:45:
                    ec:e2:b7:b7:b9:0c:27:f3:c2:fb:ae:8e:7b:7b:5b:
                    c4:d2:ec:fa:29:01:04:df:cc:79:4a:21:7b:7a:5a:
                    31:51:76:2b:9a:f6:13:66:3e:a7:9e:7c:66:c9:e4:
                    ac:97:f7:fe:ee:1a:82:6c:73:1b:80:3a:af:fb:f0:
                    25:f4:b3:97:ba:d4:a7:d4:b8:d0:9b:60:6f:dd:f6:
                    06:a3:94:2e:5e:b4:fe:9f:99:1d:37:21:f5:2d:5e:
                    72:73:50:1d:9a:1b:b6:5e:df:ac:c9:f7:b5:9c:19:
                    97:67:14:fe:f3:d0:71:3e:ca:cf:b3:dd:8a:0a:cc:
                    f4:96:99:63:39:86:95:82:a7:d4:f2:73:b7:e5:55:
                    a9:50:63:16:da:3c:56:e5:75:7a:92:b3:b2:2e:17:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:09:E8:02:4B:63:71:52:80:3E:E8:5B:8A:BA:98:38:4C:D5:21:5B
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:af:80:96:5e:c5:90:99:51:5b:c5:6c:dc:c6:f2:99:3f:6e:
         7d:ec:7d:46:ee:34:83:41:1f:af:10:ca:15:2a:45:e4:52:10:
         2f:45:28:45:3d:04:6a:4f:c6:4a:48:fb:28:13:69:52:12:da:
         e8:7b:40:4e:8a:40:b8:67:73:28:ca:1c:25:6b:9f:1a:3a:8b:
         09:c6:18:52:0c:c2:93:91:29:94:31:00:b1:8e:c2:6d:37:cf:
         54:af:7f:cf:83:f8:41:00:f8:a8:da:68:0d:f5:c5:dc:89:7f:
         33:e5:b1:0d:16:54:9b:a4:bb:44:91:8d:3b:c6:c3:35:6f:f1:
         d0:35:56:99:e5:c7:e8:22:92:5d:fe:a3:9a:19:61:89:42:de:
         73:dc:31:29:65:35:83:fc:e9:1f:0c:e0:98:51:1e:d8:85:74:
         c1:4c:1c:96:34:bb:72:3e:cc:e9:a2:d7:23:6e:66:75:dc:c6:
         07:db:b0:9d:54:6e:b5:85:8f:da:5b:f3:f7:9e:96:46:07:0c:
         94:62:05:eb:2b:57:01:3b:44:60:50:17:50:1c:3f:3f:6b:f5:
         f1:f1:fa:6e:03:bc:33:c0:67:03:d4:ef:d3:c3:2f:7e:b5:b0:
         63:44:7e:2c:f3:b4:27:90:a6:e3:98:f2:b5:f2:43:9f:4b:7c:
         2b:aa:1f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydxT9FFBtKOM5y84wL/lHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1
OWQ5ZWUwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD
EygzODA5ZTgwMjRiNjM3MTUyODAzZWU4NWI4YWJhOTgzODRjZDUyMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAJmRN38sUbhTRQrkMPK7E8zLnbT
cYTTvqg/lPcHXvsACcEVWqWlKuRSUUu8971iBNfYH7LKLaiVzP/2VbwTfMNNcmeL
N7jfYlbfUbgnB57msEXPhvT3FfaCqgdGGv0/QJm8p+CIOUXs4re3uQwn88L7ro57
e1vE0uz6KQEE38x5SiF7eloxUXYrmvYTZj6nnnxmyeSsl/f+7hqCbHMbgDqv+/Al
9LOXutSn1LjQm2Bv3fYGo5QuXrT+n5kdNyH1LV5yc1Admhu2Xt+syfe1nBmXZxT+
89BxPsrPs92KCsz0lpljOYaVgqfU8nO35VWpUGMW2jxW5XV6krOyLhc48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgJ6AJLY3FSgD7oW4q6mDhM1SFbMB8GA1UdIwQY
MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt
ZWYzYmJiMDU2NTVlLzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl
LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK+All7F
kJlRW8Vs3MbymT9ufex9Ru40g0EfrxDKFSpF5FIQL0UoRT0Eak/GSkj7KBNpUhLa
6HtATopAuGdzKMocJWufGjqLCcYYUgzCk5EplDEAsY7CbTfPVK9/z4P4QQD4qNpo
DfXF3Il/M+WxDRZUm6S7RJGNO8bDNW/x0DVWmeXH6CKSXf6jmhlhiULec9wxKWU1
g/zpHwzgmFEe2IV0wUwcljS7cj7M6aLXI25mddzGB9uwnVRutYWP2lvz956WRgcM
lGIF6ytXATtEYFAXUBw/P2v18fH6bgO8M8BnA9Tv08MvfrWwY0R+LPO0J5Cm45jy
tfJDn0t8K6ofNw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:25 2025 by rpki-client