This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File:                     X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier:          Q7yTT3fDsHH17R7mWH6VktjORjr+dol9A+NWUWkgNIA=
Subject key identifier:   23:3E:FB:A5:76:C2:B4:9D:4E:28:0C:68:4F:DC:BA:02:EB:93:51:37
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer:       /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial:       019AF509C798F0C5244694B1533864E7BACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number:          0FFF
Signing time:             Sat 06 Dec 2025 19:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:49 +0000
Files and hashes:         1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
                          2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
                          3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: qoxxZcESxDjdjtUbg84OlD6viKK13bXYbTcBZiGVAJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:c7:98:f0:c5:24:46:94:b1:53:38:64:e7:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
        Validity
            Not Before: Dec  6 19:00:49 2025 GMT
            Not After : Dec  7 19:00:49 2025 GMT
        Subject: CN=233efba576c2b49d4e280c684fdcba02eb935137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:b2:40:c3:9a:e5:38:86:18:46:ef:c3:12:
                    b6:4c:8c:f2:64:a5:6d:58:76:dd:15:be:d7:31:c1:
                    ba:ca:a0:91:e8:4d:47:89:35:3e:fa:b8:0f:14:77:
                    26:2d:9b:70:fa:eb:a0:8b:9c:51:0c:77:78:fb:1f:
                    82:f1:cb:9f:32:27:5e:b2:71:06:5f:ce:a2:0f:9b:
                    d2:ad:35:2b:dc:0e:db:f1:02:06:a5:19:d8:db:3e:
                    4a:9d:18:55:82:96:6a:0a:74:05:0e:6e:ce:6e:0d:
                    47:d2:59:94:ab:6d:5b:91:df:89:33:94:2a:a7:49:
                    46:32:27:70:86:30:4c:bd:76:97:f5:a0:f7:8b:35:
                    f9:e0:a0:a5:28:3a:d6:87:16:01:50:36:9c:4f:b7:
                    bc:28:a8:dc:fa:81:cd:cb:e0:74:90:c3:64:44:e7:
                    72:ef:26:99:05:b2:e7:23:a0:a4:eb:2d:51:55:07:
                    03:8d:c0:b0:0e:a9:9e:c6:f7:7f:82:38:4e:d8:83:
                    d7:43:97:16:b9:20:2c:85:d6:cd:87:9d:95:f4:37:
                    e2:e0:78:51:22:91:ec:f3:59:71:0b:7d:9a:e6:d5:
                    5b:6d:f1:b2:50:80:0a:4f:23:ac:8a:e7:5a:2d:29:
                    29:87:e1:ea:5f:29:f6:7d:47:06:3f:2a:ba:7c:a1:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:FB:A5:76:C2:B4:9D:4E:28:0C:68:4F:DC:BA:02:EB:93:51:37
            X509v3 Authority Key Identifier:
                keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:ed:b6:60:97:5b:6a:de:fc:71:64:94:cb:bd:9c:8b:08:
         e5:73:8c:91:61:a1:49:d9:0a:cf:cb:5c:ad:da:4d:15:29:d2:
         1e:7e:86:68:79:a7:a4:cc:ec:4a:e3:e2:9d:c6:dd:71:31:cc:
         f2:83:d6:56:2d:23:1c:80:29:51:3a:fd:b0:e8:20:9a:a0:fc:
         06:a9:69:33:6a:34:27:b0:3c:12:92:c7:3c:6c:a3:77:5e:22:
         e3:5e:d8:54:54:6c:27:97:cc:ca:8c:1d:4a:d8:77:c1:12:0c:
         53:90:9f:81:25:c8:a0:95:3d:72:78:1c:29:d2:1b:03:93:3a:
         33:38:4a:25:c8:96:ab:11:5a:e7:45:1c:0a:2f:32:76:81:98:
         ce:73:9b:74:6a:14:b4:c1:ff:d6:d6:1f:8b:1d:71:d0:f4:99:
         c0:50:26:26:83:28:f5:2e:99:54:8a:ad:34:6c:18:22:bd:6d:
         71:88:63:d6:4a:c2:73:ed:3b:42:98:72:b4:d6:64:88:b0:d1:
         fb:ca:74:95:dd:cd:0e:cd:0f:cf:7a:7f:c9:f9:eb:84:3f:2a:
         e8:00:b3:05:35:d4:5f:d9:1f:69:d1:2f:a2:8d:97:fd:72:c0:
         3e:12:84:bc:3f:5e:d2:57:ac:a5:08:bc:97:a0:12:07:f8:67:
         4a:bd:c9:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1CceY8MUkRpSxUzhk57rPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWRkMGU5NDViYzYxMTAxYzY5YmNlNjRhM2Q3MjhiYTFi
Yjg2NjEwHhcNMjUxMjA2MTkwMDQ5WhcNMjUxMjA3MTkwMDQ5WjAzMTEwLwYDVQQD
EygyMzNlZmJhNTc2YzJiNDlkNGUyODBjNjg0ZmRjYmEwMmViOTM1MTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXGyQMOa5TiGGEbvwxK2TIzyZKVt
WHbdFb7XMcG6yqCR6E1HiTU++rgPFHcmLZtw+uugi5xRDHd4+x+C8cufMidesnEG
X86iD5vSrTUr3A7b8QIGpRnY2z5KnRhVgpZqCnQFDm7Obg1H0lmUq21bkd+JM5Qq
p0lGMidwhjBMvXaX9aD3izX54KClKDrWhxYBUDacT7e8KKjc+oHNy+B0kMNkROdy
7yaZBbLnI6Ck6y1RVQcDjcCwDqmexvd/gjhO2IPXQ5cWuSAshdbNh52V9Dfi4HhR
IpHs81lxC32a5tVbbfGyUIAKTyOsiudaLSkph+HqXyn2fUcGPyq6fKFjpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM++6V2wrSdTigMaE/cugLrk1E3MB8GA1UdIwQY
MBaAFF+t0OlFvGEQHGm85ko9couhu4ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUt
NzFjN2U4YWM1OWMwLzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUtNzFjN2U4YWM1OWMw
LzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa7ttmCX
W2re/HFklMu9nIsI5XOMkWGhSdkKz8tcrdpNFSnSHn6GaHmnpMzsSuPincbdcTHM
8oPWVi0jHIApUTr9sOggmqD8BqlpM2o0J7A8EpLHPGyjd14i417YVFRsJ5fMyowd
Sth3wRIMU5CfgSXIoJU9cngcKdIbA5M6MzhKJciWqxFa50UcCi8ydoGYznObdGoU
tMH/1tYfix1x0PSZwFAmJoMo9S6ZVIqtNGwYIr1tcYhj1krCc+07QphytNZkiLDR
+8p0ld3NDs0Pz3p/yfnrhD8q6ACzBTXUX9kfadEvoo2X/XLAPhKEvD9e0lespQi8
l6ASB/hnSr3JNw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:33:08 2025 by rpki-client