This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File:                     k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier:          VpwGhyShzUMi5iwPV0V4TMFj6N6EFNPdoM0Nmnn+HgU=
Subject key identifier:   63:91:D1:0C:7E:40:6C:4F:BF:EC:83:79:DC:11:A5:75:0A:0B:68:DD
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer:       /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial:       019AF277293D6F2163318D1F52E865F6929C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number:          1024
Signing time:             Sat 06 Dec 2025 07:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:26 +0000
Files and hashes:         1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
                          2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
                          3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: m/Jo3J8q5OtBXRFs+anEywjqQFo2j7BsW+74z6omW1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:29:3d:6f:21:63:31:8d:1f:52:e8:65:f6:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
        Validity
            Not Before: Dec  6 07:01:26 2025 GMT
            Not After : Dec  7 07:01:26 2025 GMT
        Subject: CN=6391d10c7e406c4fbfec8379dc11a5750a0b68dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:3a:70:60:a8:d1:db:32:3c:6c:94:c9:7f:
                    08:97:00:81:65:da:45:d7:12:dc:21:1e:3b:8e:a4:
                    f4:51:68:9e:75:ac:46:a7:0a:fb:25:fd:70:5b:6a:
                    87:8e:ee:ce:a9:f8:1a:f2:ad:c8:f6:b1:8d:12:21:
                    0a:0e:c1:7b:ac:73:a0:f3:91:ba:14:24:42:d8:af:
                    20:5a:d2:7d:3f:88:5a:f3:43:c8:a9:ff:8c:e7:6f:
                    c9:50:4c:08:66:d7:2d:99:6c:fc:64:43:ef:3e:06:
                    4a:8b:b6:ff:e8:e2:76:c2:ff:49:16:74:84:0c:0c:
                    62:dc:fe:35:70:30:1e:66:7c:6e:89:f9:7e:75:df:
                    5f:7b:3b:9b:76:8d:c9:2e:25:22:b2:f9:67:53:9c:
                    4c:86:1b:62:c7:d8:2c:a6:5b:39:11:25:81:81:7e:
                    8a:1e:d2:a0:c1:36:43:1e:c8:ac:54:17:b0:1c:7b:
                    19:67:cc:51:93:c2:71:33:8a:e9:ed:ba:0f:c6:b0:
                    70:56:61:8d:d2:34:12:96:eb:66:6c:0d:3f:f7:7b:
                    6d:f4:9c:54:2f:79:8e:99:40:25:28:c3:6b:b9:9e:
                    19:d1:0f:6f:03:66:c3:df:ea:1b:d4:07:2a:0b:12:
                    9b:16:56:54:b0:a1:8d:fb:01:e3:1a:de:71:72:88:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:D1:0C:7E:40:6C:4F:BF:EC:83:79:DC:11:A5:75:0A:0B:68:DD
            X509v3 Authority Key Identifier:
                keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:4a:cb:fd:ae:f7:8b:59:38:23:99:6b:a2:ae:71:fb:96:
         40:10:90:b3:26:97:16:37:9a:7b:f1:0b:43:18:a9:07:31:01:
         68:23:ef:cb:ef:27:9b:54:9f:39:14:8f:f7:7d:e8:89:b5:00:
         58:75:16:e2:e6:39:77:ea:4f:71:b4:b9:31:be:30:9d:13:ef:
         db:e1:de:1d:85:9e:73:72:a3:42:2e:00:25:d8:ee:91:4e:a8:
         51:a6:bd:91:18:cb:27:71:52:0d:30:97:2a:e2:62:1b:d9:cc:
         fe:fb:9f:20:f1:66:3a:67:37:ad:28:0f:f4:77:74:a9:4f:af:
         a7:ec:6a:ef:d6:e8:cb:8e:f3:4b:ec:cd:23:e0:13:ae:64:2e:
         4b:f2:61:b5:06:69:34:b0:89:cc:46:44:2e:d9:bc:2c:88:15:
         7b:c3:66:8c:eb:20:88:3a:bd:42:1d:1f:6f:16:cc:73:06:95:
         ce:dd:4d:82:48:0d:52:1b:9d:d1:32:a6:b5:40:78:fe:f0:75:
         d2:0f:0a:4e:ec:fb:b4:3e:ae:fd:60:59:c5:48:80:48:05:40:
         a3:25:67:ff:f8:bf:ae:02:52:b7:04:02:18:e0:c1:d1:60:f6:
         62:00:c1:43:19:f5:40:ed:a6:8d:df:56:98:53:c0:f2:4a:94:
         22:ab:ba:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydyk9byFjMY0fUuhl9pKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm
N2VhNzkwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD
Eyg2MzkxZDEwYzdlNDA2YzRmYmZlYzgzNzlkYzExYTU3NTBhMGI2OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUU6cGCo0dsyPGyUyX8IlwCBZdpF
1xLcIR47jqT0UWiedaxGpwr7Jf1wW2qHju7Oqfga8q3I9rGNEiEKDsF7rHOg85G6
FCRC2K8gWtJ9P4ha80PIqf+M52/JUEwIZtctmWz8ZEPvPgZKi7b/6OJ2wv9JFnSE
DAxi3P41cDAeZnxuifl+dd9fezubdo3JLiUisvlnU5xMhhtix9gspls5ESWBgX6K
HtKgwTZDHsisVBewHHsZZ8xRk8JxM4rp7boPxrBwVmGN0jQSlutmbA0/93tt9JxU
L3mOmUAlKMNruZ4Z0Q9vA2bD3+ob1AcqCxKbFlZUsKGN+wHjGt5xcoj7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOR0Qx+QGxPv+yDedwRpXUKC2jdMB8GA1UdIwQY
MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct
YWJhNTVlMjQyNGQyLzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy
LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8dKy/2u
94tZOCOZa6KucfuWQBCQsyaXFjeae/ELQxipBzEBaCPvy+8nm1SfORSP933oibUA
WHUW4uY5d+pPcbS5Mb4wnRPv2+HeHYWec3KjQi4AJdjukU6oUaa9kRjLJ3FSDTCX
KuJiG9nM/vufIPFmOmc3rSgP9Hd0qU+vp+xq79boy47zS+zNI+ATrmQuS/JhtQZp
NLCJzEZELtm8LIgVe8NmjOsgiDq9Qh0fbxbMcwaVzt1NgkgNUhud0TKmtUB4/vB1
0g8KTuz7tD6u/WBZxUiASAVAoyVn//i/rgJStwQCGODB0WD2YgDBQxn1QO2mjd9W
mFPA8kqUIqu6Mg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:47:27 2025 by rpki-client