This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File:                     AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier:          POWgMk9vltvL0yrdlTW1jt0KRPCVFRtMheJcRATcITk=
Subject key identifier:   25:C4:4D:91:9A:A1:DA:75:25:AE:44:9B:2E:3B:2D:3B:03:F5:F7:A3
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       019AF31C1CF0EA01E0AE47249237337CCD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number:          145E
Signing time:             Sat 06 Dec 2025 10:01:37 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:37 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:37 +0000
Files and hashes:         1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: GrLQi7/8O4ITLuQljMyXX/YY3RYQU6dHE8zlV0mNRCY=)
                          2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
                          3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:1c:f0:ea:01:e0:ae:47:24:92:37:33:7c:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Dec  6 10:01:37 2025 GMT
            Not After : Dec  7 10:01:37 2025 GMT
        Subject: CN=25c44d919aa1da7525ae449b2e3b2d3b03f5f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:a7:d8:25:a9:8c:29:34:65:dd:d0:5a:87:
                    8e:94:48:e8:4c:88:4b:82:69:14:80:aa:0e:70:36:
                    59:ac:4d:07:e4:dd:7d:80:fc:b3:af:e8:97:9a:4b:
                    e6:37:62:52:6e:f7:c4:d5:5b:20:13:69:47:40:99:
                    94:5e:d3:85:81:0d:38:d1:98:56:b2:fb:08:84:b3:
                    65:27:6a:e0:76:bf:18:1d:b1:61:77:9b:55:a8:3c:
                    1b:cb:14:87:9b:e0:05:83:b0:39:8b:a9:02:3a:bc:
                    a6:63:0a:1d:95:69:9b:5a:0a:de:50:e7:02:0e:18:
                    d3:69:83:41:c4:f0:d7:84:0b:45:5a:39:d1:f3:69:
                    97:7d:f8:ac:25:cc:08:f5:ed:94:7c:40:e7:e8:fb:
                    82:68:00:d0:55:25:a0:2a:c3:c4:44:94:04:54:d8:
                    06:22:f9:3a:89:52:b5:01:b0:a3:3d:c6:1b:46:01:
                    74:c5:90:95:fc:1d:6e:89:d9:2d:da:94:62:b1:5f:
                    26:5f:7b:f3:ea:ed:3a:65:d7:43:42:0b:71:03:9a:
                    7d:7f:05:0c:a0:47:00:2e:3e:7f:eb:e7:8c:12:67:
                    6c:65:e0:04:9e:04:27:7f:58:af:1c:d9:1c:1d:d7:
                    7f:9e:5c:a4:08:3c:a9:85:51:69:52:7f:89:f1:a5:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:4D:91:9A:A1:DA:75:25:AE:44:9B:2E:3B:2D:3B:03:F5:F7:A3
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:62:7b:28:77:2a:35:1a:7c:3e:02:77:fc:de:95:07:74:
         56:0c:ec:9a:84:b1:31:8b:17:c8:58:17:f9:f5:d0:b0:3f:5e:
         d1:7b:63:66:00:ba:1d:96:fd:e5:b2:f4:64:d9:6e:93:05:56:
         c4:d0:76:dc:bd:c4:4a:03:c9:46:71:88:d5:d3:20:7c:4d:aa:
         4b:40:81:6c:68:56:6f:40:2c:ea:d6:6d:fc:0f:7d:57:a2:cb:
         3f:1c:f6:b2:e9:12:9c:9e:44:d5:02:53:a4:1e:19:ea:a6:70:
         ba:02:1b:33:df:db:a7:2d:79:0b:ca:26:03:ff:c6:2d:46:d1:
         17:70:8b:51:3e:3b:bc:07:e9:ce:80:fd:c6:ae:51:5d:c2:a8:
         23:b6:6a:c7:b2:30:2c:eb:91:b3:17:f6:68:9c:05:a5:63:76:
         39:56:ab:5f:4d:20:63:9a:0a:1c:a4:01:f6:04:51:53:cb:5c:
         97:31:4c:aa:5e:1c:09:e8:47:ff:7c:35:d5:2d:d7:06:29:64:
         06:ee:ac:6d:73:fc:36:8c:58:a9:d1:9d:1f:92:b4:c7:e3:02:
         80:7f:f2:50:1a:35:fa:f5:c7:d2:b2:fa:3b:41:4a:66:13:2e:
         75:74:02:d4:b7:44:fc:49:f5:5a:5e:c9:3c:36:dc:0a:b3:37:
         a1:06:fb:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHBzw6gHgrkckkjczfM2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDcxOGU3YTI2M2ViZTQ1ZTc3MDY3MzkyNDFlYzZkNmFl
NThlNzQwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD
EygyNWM0NGQ5MTlhYTFkYTc1MjVhZTQ0OWIyZTNiMmQzYjAzZjVmN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Iun2CWpjCk0Zd3QWoeOlEjoTIhL
gmkUgKoOcDZZrE0H5N19gPyzr+iXmkvmN2JSbvfE1VsgE2lHQJmUXtOFgQ040ZhW
svsIhLNlJ2rgdr8YHbFhd5tVqDwbyxSHm+AFg7A5i6kCOrymYwodlWmbWgreUOcC
DhjTaYNBxPDXhAtFWjnR82mXffisJcwI9e2UfEDn6PuCaADQVSWgKsPERJQEVNgG
Ivk6iVK1AbCjPcYbRgF0xZCV/B1uidkt2pRisV8mX3vz6u06ZddDQgtxA5p9fwUM
oEcALj5/6+eMEmdsZeAEngQnf1ivHNkcHdd/nlykCDyphVFpUn+J8aUFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXETZGaodp1Ja5Emy47LTsD9fejMB8GA1UdIwQY
MBaAFABHGOeiY+vkXncGc5JB7G1q5Y50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYt
M2E5MWE2MTNhNDA3LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYtM2E5MWE2MTNhNDA3
LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd1ieyh3
KjUafD4Cd/zelQd0VgzsmoSxMYsXyFgX+fXQsD9e0XtjZgC6HZb95bL0ZNlukwVW
xNB23L3ESgPJRnGI1dMgfE2qS0CBbGhWb0As6tZt/A99V6LLPxz2sukSnJ5E1QJT
pB4Z6qZwugIbM9/bpy15C8omA//GLUbRF3CLUT47vAfpzoD9xq5RXcKoI7Zqx7Iw
LOuRsxf2aJwFpWN2OVarX00gY5oKHKQB9gRRU8tclzFMql4cCehH/3w11S3XBilk
Bu6sbXP8NoxYqdGdH5K0x+MCgH/yUBo1+vXH0rL6O0FKZhMudXQC1LdE/En1Wl7J
PDbcCrM3oQb7Zg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:39 2025 by rpki-client