This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File:                     pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier:          OqpRLabRDXDTqfalJ5+FPtccr3RXcfunSsiTW1NODHQ=
Subject key identifier:   96:C2:B6:93:34:BA:DE:B3:1B:7E:AD:68:A1:28:CC:E8:9E:9B:FB:CE
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       019AF19B293DAB56C3032134C05AA8283E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:08 +0000
Files and hashes:         1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
                          2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: /gPfMnB+yfakIH8B4DlKOQxr8UQa7KogEZQLbQZAW1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:29:3d:ab:56:c3:03:21:34:c0:5a:a8:28:3e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Dec  6 03:01:08 2025 GMT
            Not After : Dec  7 03:01:08 2025 GMT
        Subject: CN=96c2b69334badeb31b7ead68a128cce89e9bfbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:4d:ce:56:2e:89:b2:2d:2b:19:67:ae:05:
                    5c:ba:c5:3d:96:4c:eb:2a:df:60:57:73:63:29:cb:
                    1b:6a:75:fe:e0:78:27:02:f3:35:7b:a6:dc:d1:67:
                    ee:5d:af:4a:a2:e3:29:82:36:06:bd:10:80:59:af:
                    e7:ed:cb:c0:4a:d3:55:d7:cf:73:37:b1:fb:dd:31:
                    11:27:60:3d:97:f5:49:39:60:6a:6c:3f:13:fc:9a:
                    bb:ce:e5:22:87:08:55:20:88:54:08:e2:a7:db:9f:
                    40:d3:f1:a4:96:e9:6d:cf:eb:8b:a8:a6:c2:7a:1c:
                    e8:93:9b:39:a1:82:1d:4e:0f:c3:01:fc:47:c0:d5:
                    ca:ee:92:27:d1:4d:68:e6:b5:c6:e0:6a:df:6a:15:
                    6a:2e:87:6a:2d:de:9c:52:01:ad:31:ec:b2:c8:a3:
                    d4:ad:25:8b:e5:76:e2:c9:d1:62:66:25:02:8a:74:
                    8e:95:74:1a:ba:92:59:0f:da:90:23:ed:bb:0b:b5:
                    43:f8:93:70:fc:96:d6:40:37:83:ac:e7:89:f8:1f:
                    84:9c:fc:c9:99:80:36:dc:80:68:b0:ef:3a:b6:01:
                    dc:23:d6:5f:8f:a0:79:ba:e5:ef:86:2b:8b:4c:18:
                    ab:45:b7:e7:4d:3c:f0:af:31:26:5a:4b:23:74:af:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:B6:93:34:BA:DE:B3:1B:7E:AD:68:A1:28:CC:E8:9E:9B:FB:CE
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:0f:87:20:8a:b0:54:99:93:5d:79:f4:53:80:b1:e0:51:
         8a:8d:4f:8f:46:08:51:fe:f4:27:89:15:3c:e8:4a:0c:88:78:
         d0:63:1d:f8:bf:5f:66:b3:97:11:fd:4d:dd:1a:72:e3:e6:65:
         fc:7d:93:ae:a2:4c:0d:e7:c5:97:5e:c5:94:0b:7f:2e:57:a0:
         8b:a2:d4:11:37:4e:b6:2d:aa:da:c0:5f:24:6f:4a:66:9f:8f:
         ee:f6:a6:fd:eb:c1:66:82:29:75:bd:ea:c5:b9:3e:e9:c4:16:
         4f:75:9d:30:34:cf:b1:99:28:af:21:58:2e:a8:9e:37:4a:b7:
         9b:e1:50:86:af:46:86:fc:c8:19:21:62:2e:93:d1:64:c9:53:
         dc:ef:c4:ce:57:f8:7b:e9:23:e1:90:4c:dd:ed:bd:66:78:40:
         3f:ed:7e:c8:23:41:73:af:59:1b:f7:f3:f4:18:ac:0e:20:ac:
         7e:c7:95:39:dc:25:4a:79:a9:31:e5:e6:cf:db:f5:8c:c5:24:
         41:05:d9:ae:73:9b:43:89:f4:44:06:a4:6d:45:4a:85:38:ac:
         93:a1:49:9f:b5:4e:56:b9:c6:44:21:49:be:44:a9:d6:0b:c7:
         79:16:14:18:d7:f8:9d:f0:e3:e9:7d:49:96:d2:a1:b4:63:63:
         f0:fa:2b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmyk9q1bDAyE0wFqoKD6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWM5NmU5MzFlZWU0MWI4OTlkNjJjN2RiODM2MzM0NDZh
M2M0MmIwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD
Eyg5NmMyYjY5MzM0YmFkZWIzMWI3ZWFkNjhhMTI4Y2NlODllOWJmYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSNNzlYuibItKxlnrgVcusU9lkzr
Kt9gV3NjKcsbanX+4HgnAvM1e6bc0WfuXa9KouMpgjYGvRCAWa/n7cvAStNV189z
N7H73TERJ2A9l/VJOWBqbD8T/Jq7zuUihwhVIIhUCOKn259A0/Gklultz+uLqKbC
ehzok5s5oYIdTg/DAfxHwNXK7pIn0U1o5rXG4GrfahVqLodqLd6cUgGtMeyyyKPU
rSWL5XbiydFiZiUCinSOlXQaupJZD9qQI+27C7VD+JNw/JbWQDeDrOeJ+B+EnPzJ
mYA23IBosO86tgHcI9Zfj6B5uuXvhiuLTBirRbfnTTzwrzEmWksjdK+BlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbCtpM0ut6zG36taKEozOiem/vOMB8GA1UdIwQY
MBaAFKQclukx7uQbiZ1ix9uDYzRGo8QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjct
ZjgzZTNjNzFlZmNiLzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjctZjgzZTNjNzFlZmNi
LzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrIPhyCK
sFSZk1159FOAseBRio1Pj0YIUf70J4kVPOhKDIh40GMd+L9fZrOXEf1N3Rpy4+Zl
/H2TrqJMDefFl17FlAt/Llegi6LUETdOti2q2sBfJG9KZp+P7vam/evBZoIpdb3q
xbk+6cQWT3WdMDTPsZkoryFYLqieN0q3m+FQhq9GhvzIGSFiLpPRZMlT3O/Ezlf4
e+kj4ZBM3e29ZnhAP+1+yCNBc69ZG/fz9BisDiCsfseVOdwlSnmpMeXmz9v1jMUk
QQXZrnObQ4n0RAakbUVKhTisk6FJn7VOVrnGRCFJvkSp1gvHeRYUGNf4nfDj6X1J
ltKhtGNj8Por4Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:58:38 2025 by rpki-client