This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File:                     2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier:          4ypjU0L5HlWrOg1VxFt1RHKPu7vk+yQ3tWEVodC2Zpo=
Subject key identifier:   A2:C1:AB:A8:E6:8B:77:4B:38:DA:DE:07:5B:7F:87:B3:C6:71:55:A5
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer:       /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial:       019AF19B880B5F173666F5A241DF4B8C3C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number:          06F7
Signing time:             Sat 06 Dec 2025 03:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:33 +0000
Files and hashes:         1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: 4NqoDM+5ZRZ4bO38tswlf7aHPtD4o2NttXEdqYYHpzY=)
                          2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
                          3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:88:0b:5f:17:36:66:f5:a2:41:df:4b:8c:3c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
        Validity
            Not Before: Dec  6 03:01:33 2025 GMT
            Not After : Dec  7 03:01:33 2025 GMT
        Subject: CN=a2c1aba8e68b774b38dade075b7f87b3c67155a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:97:4e:45:9d:48:62:e9:38:6c:16:c2:9a:
                    60:1f:8b:a2:ad:fa:65:f6:da:08:80:11:67:cc:d8:
                    ac:7d:47:0b:d0:db:ff:43:cd:9a:8f:a0:cb:1b:f7:
                    03:9f:1f:f6:5a:3f:4f:dc:97:38:ae:1a:60:ac:a5:
                    19:b0:dc:ec:1d:6b:cf:0b:8c:91:20:d4:27:10:0c:
                    ef:ec:36:68:81:ba:dd:c2:a5:2d:64:59:fe:9c:95:
                    cc:62:1d:33:cf:6f:d9:94:c6:06:f6:a1:57:88:73:
                    18:c2:20:ba:07:f3:ee:43:60:9b:77:9d:36:0d:75:
                    cf:ad:52:85:c8:88:e7:dd:bb:20:b2:97:7d:0a:83:
                    9a:ca:d1:ac:e3:47:eb:66:ab:9e:a4:1a:f8:64:35:
                    63:8c:f1:80:1b:e4:29:a7:85:d1:4e:cb:53:d3:c4:
                    4a:60:6b:34:17:30:48:d6:e2:77:b9:0b:33:9b:34:
                    04:11:a2:e1:fd:c5:d0:ea:44:ac:cd:28:7a:ab:a4:
                    e4:e9:99:58:1f:e8:12:99:64:28:7a:12:77:77:0d:
                    c9:0c:d5:0d:01:bc:9f:38:d3:60:82:29:fa:6c:b9:
                    6a:b1:9a:6c:8f:93:7e:b5:27:ae:5d:9d:d0:8c:14:
                    25:07:88:3d:ae:3b:c9:f1:bf:0d:f7:91:6f:77:fd:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:AB:A8:E6:8B:77:4B:38:DA:DE:07:5B:7F:87:B3:C6:71:55:A5
            X509v3 Authority Key Identifier:
                keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:a6:d9:84:c0:43:b4:d5:29:03:a6:ea:90:82:54:98:c3:
         b6:7d:b5:06:a1:72:8f:6f:87:ef:0e:53:e0:78:1f:81:a7:3c:
         56:ef:89:f0:d1:87:a7:af:e1:50:80:dc:d1:ec:a0:4e:af:64:
         f3:ac:59:84:dd:7b:94:b5:81:e5:85:f2:27:eb:a7:b1:65:08:
         db:8d:90:4d:a5:9a:fe:7a:a3:83:13:14:87:96:0b:a8:5d:fa:
         99:c8:d7:a8:44:01:ce:59:24:1c:a7:78:c9:3d:0b:c0:c9:46:
         94:19:1e:20:d6:d3:58:c1:13:fa:a2:13:a0:47:54:7a:2b:77:
         bc:bf:b6:79:1e:51:5c:77:54:86:b6:31:fd:e3:66:a2:08:c0:
         7d:49:86:85:a5:eb:24:e9:79:99:4e:06:13:9b:8b:d3:2e:44:
         bc:13:07:6a:4b:a1:29:0c:a1:b2:0f:84:3b:fa:00:52:e8:2b:
         8a:ca:13:6f:72:14:7c:87:c4:fa:5b:8d:ee:fb:0f:1e:8a:82:
         98:16:a0:ae:e8:c6:42:b3:33:19:a5:f8:26:38:01:56:53:5c:
         75:b2:0d:b1:52:9e:54:10:36:a2:c5:a5:bd:7d:36:9f:ee:aa:
         87:03:4a:70:ed:41:a2:18:ba:81:d8:fd:ce:4f:9c:e3:62:7b:
         9f:f2:75:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm4gLXxc2ZvWiQd9LjDwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz
MjY1ZTEwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD
EyhhMmMxYWJhOGU2OGI3NzRiMzhkYWRlMDc1YjdmODdiM2M2NzE1NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6XTkWdSGLpOGwWwppgH4uirfpl
9toIgBFnzNisfUcL0Nv/Q82aj6DLG/cDnx/2Wj9P3Jc4rhpgrKUZsNzsHWvPC4yR
INQnEAzv7DZogbrdwqUtZFn+nJXMYh0zz2/ZlMYG9qFXiHMYwiC6B/PuQ2Cbd502
DXXPrVKFyIjn3bsgspd9CoOaytGs40frZquepBr4ZDVjjPGAG+Qpp4XRTstT08RK
YGs0FzBI1uJ3uQszmzQEEaLh/cXQ6kSszSh6q6Tk6ZlYH+gSmWQoehJ3dw3JDNUN
AbyfONNggin6bLlqsZpsj5N+tSeuXZ3QjBQlB4g9rjvJ8b8N95Fvd/1ChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLBq6jmi3dLONreB1t/h7PGcVWlMB8GA1UdIwQY
MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt
YzgyMDFiOTFhZWMzLzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz
LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOCm2YTA
Q7TVKQOm6pCCVJjDtn21BqFyj2+H7w5T4Hgfgac8Vu+J8NGHp6/hUIDc0eygTq9k
86xZhN17lLWB5YXyJ+unsWUI242QTaWa/nqjgxMUh5YLqF36mcjXqEQBzlkkHKd4
yT0LwMlGlBkeINbTWMET+qIToEdUeit3vL+2eR5RXHdUhrYx/eNmogjAfUmGhaXr
JOl5mU4GE5uL0y5EvBMHakuhKQyhsg+EO/oAUugrisoTb3IUfIfE+luN7vsPHoqC
mBagrujGQrMzGaX4JjgBVlNcdbINsVKeVBA2osWlvX02n+6qhwNKcO1Bohi6gdj9
zk+c42J7n/J1zQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:24 2025 by rpki-client