This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          1D+yMvx+FMq1G4RsjU8pWAcbbs/P204JhnEEQpq2rCk=
Subject key identifier:   6F:B5:F0:08:B3:DA:3D:44:45:D7:29:50:80:0B:6D:21:26:78:D1:89
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       019AF051742C9FC95858652FE227B58CE547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          1763
Signing time:             Fri 05 Dec 2025 21:01:01 +0000
Manifest this update:     Fri 05 Dec 2025 21:01:01 +0000
Manifest next update:     Sat 06 Dec 2025 21:01:01 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: 6J2MgQ0/5d7p1i34hD7+MHvlKpQodTTUCr0g5+8ljOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:74:2c:9f:c9:58:58:65:2f:e2:27:b5:8c:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Dec  5 21:01:01 2025 GMT
            Not After : Dec  6 21:01:01 2025 GMT
        Subject: CN=6fb5f008b3da3d4445d72950800b6d212678d189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:48:96:fd:27:79:db:d2:56:6a:20:e0:48:
                    29:d7:8f:b3:19:86:b8:e7:2a:48:a8:98:b2:8d:e0:
                    50:87:20:c2:59:3d:a3:a0:8d:f5:16:a8:74:7f:05:
                    fc:a4:17:f3:e9:48:50:73:21:b7:61:6f:32:3c:bf:
                    cb:9d:86:f6:5d:6e:31:91:20:4f:c9:b4:23:60:90:
                    c7:77:d5:eb:1a:0b:81:d8:d2:af:81:e3:87:3f:a9:
                    ad:e8:06:52:d6:41:a9:36:4b:0a:c9:87:c8:37:7d:
                    18:39:db:b7:06:0e:3f:a6:06:19:aa:e1:e7:a6:52:
                    96:8d:47:7e:9a:03:bc:b5:55:9a:61:1e:41:46:a6:
                    7e:38:f2:d3:70:d7:b6:15:b1:6e:f1:0e:5f:75:8b:
                    67:c6:43:d5:28:4b:6f:33:20:ba:ec:0a:97:a6:14:
                    db:38:b5:5c:95:13:06:1d:fd:63:56:30:b1:96:17:
                    02:2d:10:16:c3:f9:5e:3b:f2:63:af:ad:2b:ec:b4:
                    58:76:e8:dc:7a:5d:c4:0b:c7:68:c2:6a:02:e6:36:
                    e5:94:ce:6e:ce:be:7b:b3:32:fa:7c:b8:9d:e4:c3:
                    00:0a:b0:1d:61:10:a1:03:e6:72:6f:99:3f:10:7e:
                    25:d1:9d:6b:22:58:42:c6:63:e0:d1:c3:1c:04:0d:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B5:F0:08:B3:DA:3D:44:45:D7:29:50:80:0B:6D:21:26:78:D1:89
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:3f:4a:ad:7a:d5:36:34:30:97:61:5e:96:2e:8c:60:39:
         ff:35:3e:91:7e:13:c9:fd:a6:48:4c:09:f3:07:8f:8d:97:00:
         fd:0f:e9:7e:3a:ca:5b:8c:ad:62:78:00:45:78:ad:c5:f3:39:
         eb:17:e8:ce:66:08:e3:5e:c0:56:3c:4f:15:33:19:59:b4:35:
         19:6f:35:82:a5:39:0f:58:9d:88:43:cc:2b:0a:6a:eb:f1:92:
         b8:16:be:db:a4:40:c0:46:06:98:33:17:40:7e:79:3f:97:99:
         f3:d4:b7:d5:e8:22:19:da:24:e3:07:1d:0b:d3:bd:03:1c:10:
         1a:cc:b7:8c:d8:46:cc:9f:68:06:9f:72:a5:12:cc:57:52:57:
         31:7c:b6:c4:e2:d8:f9:c1:ff:92:a0:6c:c3:9f:9c:ff:29:f3:
         fa:07:e9:64:0e:64:d6:0a:57:08:c4:d2:d8:50:ad:12:ed:e4:
         35:fe:c8:74:c6:3d:a3:f8:ed:90:07:a2:a6:e5:5f:b2:43:63:
         b8:a4:34:b1:7d:e3:97:78:b2:ef:c6:65:a5:e1:4f:5e:1a:2b:
         e0:a8:97:46:a2:8d:13:5c:2e:c0:6a:65:07:54:34:f7:9e:5e:
         9f:be:5d:8e:85:62:82:7d:84:e3:da:50:72:e2:f5:f9:21:67:
         e4:4e:72:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwUXQsn8lYWGUv4ie1jOVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3
ZGY2Y2QwHhcNMjUxMjA1MjEwMTAxWhcNMjUxMjA2MjEwMTAxWjAzMTEwLwYDVQQD
Eyg2ZmI1ZjAwOGIzZGEzZDQ0NDVkNzI5NTA4MDBiNmQyMTI2NzhkMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6VIlv0nedvSVmog4Egp14+zGYa4
5ypIqJiyjeBQhyDCWT2joI31Fqh0fwX8pBfz6UhQcyG3YW8yPL/LnYb2XW4xkSBP
ybQjYJDHd9XrGguB2NKvgeOHP6mt6AZS1kGpNksKyYfIN30YOdu3Bg4/pgYZquHn
plKWjUd+mgO8tVWaYR5BRqZ+OPLTcNe2FbFu8Q5fdYtnxkPVKEtvMyC67AqXphTb
OLVclRMGHf1jVjCxlhcCLRAWw/leO/Jjr60r7LRYdujcel3EC8dowmoC5jbllM5u
zr57szL6fLid5MMACrAdYRChA+Zyb5k/EH4l0Z1rIlhCxmPg0cMcBA2ZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+18Aiz2j1ERdcpUIALbSEmeNGJMB8GA1UdIwQY
MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt
ZTFiN2M3NjQ5ZmEzLzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz
LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvQ/Sq16
1TY0MJdhXpYujGA5/zU+kX4Tyf2mSEwJ8wePjZcA/Q/pfjrKW4ytYngARXitxfM5
6xfozmYI417AVjxPFTMZWbQ1GW81gqU5D1idiEPMKwpq6/GSuBa+26RAwEYGmDMX
QH55P5eZ89S31egiGdok4wcdC9O9AxwQGsy3jNhGzJ9oBp9ypRLMV1JXMXy2xOLY
+cH/kqBsw5+c/ynz+gfpZA5k1gpXCMTS2FCtEu3kNf7IdMY9o/jtkAeipuVfskNj
uKQ0sX3jl3iy78ZlpeFPXhor4KiXRqKNE1wuwGplB1Q0955en75djoVign2E49pQ
cuL1+SFn5E5yXg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:03:08 2025 by rpki-client