This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          e4tRdIkzLD51Z9p3sviCu2DxJacQbJWLTzZwIiK9cfI=
Subject key identifier:   A7:21:BC:03:DD:0F:C6:D8:3D:48:4C:3E:DE:B0:03:D7:BA:90:DC:C2
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019AF19BAEE9249C25DE45EC8719459E495F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1320
Signing time:             Sat 06 Dec 2025 03:01:43 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:43 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:43 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: Q0NZE9Ofpdeqh1va5IWfVyCqGIcz+wJCL8Wu/eRwOvM=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:ae:e9:24:9c:25:de:45:ec:87:19:45:9e:49:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Dec  6 03:01:43 2025 GMT
            Not After : Dec  7 03:01:43 2025 GMT
        Subject: CN=a721bc03dd0fc6d83d484c3edeb003d7ba90dcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:2c:5d:c7:80:cc:4b:58:5f:ee:81:9e:f0:
                    84:c3:92:d0:98:3c:d0:91:ad:bb:87:c4:1a:d6:0c:
                    f5:92:7c:9d:9c:6a:e9:a9:d2:f0:48:f9:02:8a:45:
                    35:bc:8d:d6:ab:33:4c:31:d7:3f:d9:77:da:ae:5b:
                    a9:29:c8:fe:1f:54:75:dc:51:b1:5e:74:49:da:bd:
                    63:80:b3:55:bf:ea:a0:40:de:32:c9:2c:a3:ea:8d:
                    4a:17:2b:50:c7:d6:6e:e7:b7:5c:d1:6d:35:1a:c3:
                    14:e9:33:31:a5:8c:d4:83:31:78:bb:13:86:f4:c6:
                    eb:cb:ac:b2:b6:86:ca:13:0b:65:dc:fa:40:26:6c:
                    4d:a9:2d:6d:3d:1f:39:6f:c8:f2:b3:77:8e:c9:ae:
                    f1:28:47:3f:42:80:b8:b4:0d:90:ab:5a:e2:7b:e6:
                    c2:36:c5:6b:85:b4:6d:89:a2:5d:fa:b7:07:dc:d9:
                    42:f8:1e:40:e0:80:b7:c4:79:68:de:ff:b6:c1:58:
                    7d:5e:94:b7:66:44:36:74:85:6a:79:bc:7d:36:96:
                    d6:3d:23:9e:60:0f:dc:3f:40:ed:59:56:bc:f9:e5:
                    07:13:53:37:b0:72:17:fd:78:0c:e2:80:97:d3:58:
                    59:e3:7f:53:27:2c:da:1e:8d:c6:3b:7a:4e:67:c9:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:BC:03:DD:0F:C6:D8:3D:48:4C:3E:DE:B0:03:D7:BA:90:DC:C2
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:36:e7:bb:d4:4d:c2:df:55:ac:8a:30:f4:5a:75:db:b2:fa:
         f5:e0:b1:2f:74:80:80:4e:df:c1:11:8c:88:0d:85:55:b1:b4:
         ac:17:6c:b4:99:96:cd:0e:48:a1:36:08:67:03:f1:68:4b:50:
         fd:bc:db:3e:9d:74:a9:4e:cf:e2:41:16:a7:87:ac:e7:42:53:
         3b:e2:52:e9:8c:e2:46:e0:48:55:bb:c1:14:89:68:2f:79:cd:
         48:a2:89:1f:e1:35:cb:5f:49:74:d6:05:59:b7:f2:81:b0:1b:
         4e:35:5b:13:e1:4a:86:d1:81:37:f8:70:71:8a:ba:6a:5a:4a:
         24:76:eb:e8:71:f2:51:54:dc:a3:f4:1f:0e:04:c2:6c:67:0d:
         f2:24:f4:f7:b6:bd:6f:cb:25:d4:7e:3e:2d:40:98:a6:22:18:
         6e:13:5a:ad:68:c2:18:69:fa:01:3e:90:4a:ab:43:16:98:21:
         8e:a5:d0:ba:e9:0e:f0:bc:55:18:98:85:e9:0d:8a:19:d1:76:
         13:63:86:eb:d7:a2:e4:cf:69:19:02:87:96:58:97:4c:44:1f:
         66:b0:65:94:d6:04:9a:8a:58:15:af:e7:2e:88:bc:4d:8f:dd:
         c8:17:2e:90:fd:07:50:6d:2b:30:7c:d1:56:d7:da:2c:52:2a:
         3d:4e:bc:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm67pJJwl3kXshxlFnklfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD
EyhhNzIxYmMwM2RkMGZjNmQ4M2Q0ODRjM2VkZWIwMDNkN2JhOTBkY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJksXceAzEtYX+6BnvCEw5LQmDzQ
ka27h8Qa1gz1knydnGrpqdLwSPkCikU1vI3WqzNMMdc/2XfarlupKcj+H1R13FGx
XnRJ2r1jgLNVv+qgQN4yySyj6o1KFytQx9Zu57dc0W01GsMU6TMxpYzUgzF4uxOG
9Mbry6yytobKEwtl3PpAJmxNqS1tPR85b8jys3eOya7xKEc/QoC4tA2Qq1rie+bC
NsVrhbRtiaJd+rcH3NlC+B5A4IC3xHlo3v+2wVh9XpS3ZkQ2dIVqebx9NpbWPSOe
YA/cP0DtWVa8+eUHE1M3sHIX/XgM4oCX01hZ439TJyzaHo3GO3pOZ8nNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKchvAPdD8bYPUhMPt6wA9e6kNzCMB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDbnu9RN
wt9VrIow9Fp127L69eCxL3SAgE7fwRGMiA2FVbG0rBdstJmWzQ5IoTYIZwPxaEtQ
/bzbPp10qU7P4kEWp4es50JTO+JS6YziRuBIVbvBFIloL3nNSKKJH+E1y19JdNYF
WbfygbAbTjVbE+FKhtGBN/hwcYq6alpKJHbr6HHyUVTco/QfDgTCbGcN8iT097a9
b8sl1H4+LUCYpiIYbhNarWjCGGn6AT6QSqtDFpghjqXQuukO8LxVGJiF6Q2KGdF2
E2OG69ei5M9pGQKHlliXTEQfZrBllNYEmopYFa/nLoi8TY/dyBcukP0HUG0rMHzR
VtfaLFIqPU68iA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:39 2025 by rpki-client