This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File:                     Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier:          JbXtSzeedv31mKuKELUS0osk/CkBiR+DBagFNFfu+ks=
Subject key identifier:   BD:07:98:F0:83:2A:75:D6:69:D1:61:A2:20:42:B7:9F:68:E1:94:9C
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer:       /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial:       019AF49C402AD87FE5E7EC86ABB625D704DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 17:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 17:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 17:01:11 +0000
Files and hashes:         1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
                          2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 0zxzbdLUCZ5hUT0y9TgLqcMDBYJWU9PqWEr4VDYXZJg=)
                          3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9c:40:2a:d8:7f:e5:e7:ec:86:ab:b6:25:d7:04:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
        Validity
            Not Before: Dec  6 17:01:11 2025 GMT
            Not After : Dec  7 17:01:11 2025 GMT
        Subject: CN=bd0798f0832a75d669d161a22042b79f68e1949c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:f3:a3:27:fd:73:d4:c4:dd:2d:13:e4:57:
                    54:1d:ce:2e:b6:8b:78:05:e6:64:7b:5f:06:de:bc:
                    da:da:d6:09:e3:0a:21:1b:78:1d:57:7b:fb:d4:c6:
                    63:87:e5:a6:05:fb:84:3e:c6:e3:3f:18:79:30:c5:
                    43:c3:dd:8c:30:68:c1:86:84:44:8d:98:b8:a5:ea:
                    7b:69:65:50:fb:3f:39:8c:55:bc:05:5f:e4:3d:ef:
                    ab:a8:0a:4e:20:87:2c:3f:52:36:5a:38:09:86:e3:
                    b3:ec:89:3b:9d:fa:d3:1d:62:bf:27:cb:99:ed:d2:
                    39:79:a1:c3:50:c2:87:85:ad:4e:ac:51:cd:74:6d:
                    db:d8:a2:ca:f3:1c:c9:7a:5f:08:ed:02:f3:73:a9:
                    46:5c:47:dc:d8:0e:d6:73:47:c2:6e:31:7e:cd:91:
                    fe:c0:3f:70:e2:60:a4:f1:88:c2:a7:31:df:c3:17:
                    08:d1:e4:2d:39:98:40:d7:8b:ff:4a:29:6e:7a:b2:
                    76:8d:d4:4f:61:c2:cc:11:7c:83:57:40:d4:d4:c0:
                    53:dc:54:28:04:9f:55:2f:4f:84:87:90:d8:0a:a0:
                    25:00:0f:31:59:2f:d9:6d:f8:11:f0:10:a7:b6:dd:
                    cd:97:3b:35:9c:72:f2:2a:3a:f9:eb:16:fd:4a:b7:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:98:F0:83:2A:75:D6:69:D1:61:A2:20:42:B7:9F:68:E1:94:9C
            X509v3 Authority Key Identifier:
                keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:18:72:74:7f:27:1f:26:2d:a3:27:5f:e6:fa:a2:d9:f6:44:
         f9:7a:1c:70:27:ac:4c:c3:f2:85:9e:b4:1c:a2:24:40:95:c9:
         fc:48:09:94:47:87:8f:79:61:03:13:5e:fe:26:8a:1e:4a:96:
         e4:3f:52:4f:b7:4a:bf:34:bb:ab:ea:6b:b8:f0:37:ac:c4:a5:
         8d:c3:ee:a4:96:50:f8:cd:30:a3:69:92:22:5e:d7:d6:3b:75:
         06:ea:4b:5d:89:a3:82:72:8e:3a:a7:32:d6:18:18:3c:65:26:
         85:51:5a:25:d6:08:e8:5d:df:8c:b9:6d:48:e1:b2:97:46:c8:
         03:32:dd:2d:82:ad:de:1e:ea:21:ab:3e:d2:b5:23:9b:1f:0f:
         73:4c:52:85:11:2e:e4:49:e1:78:39:e7:90:1c:4a:88:53:7e:
         05:98:a2:79:04:d6:76:b0:1d:68:d2:59:b6:0f:08:13:0e:8c:
         c2:ac:7e:d6:44:7b:dc:72:7c:43:28:f3:8e:e9:f1:6a:a2:8f:
         f5:8f:f3:b3:25:24:02:4b:4e:1c:f4:98:1a:7f:98:51:71:07:
         8d:01:5d:82:a5:e7:51:64:b1:3d:be:f6:66:48:20:a6:d8:1e:
         6b:11:c3:83:b1:41:a2:c1:72:a9:56:7a:ae:4d:31:23:cd:94:
         4e:83:15:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0nEAq2H/l5+yGq7Yl1wTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw
ZmUwMDkwHhcNMjUxMjA2MTcwMTExWhcNMjUxMjA3MTcwMTExWjAzMTEwLwYDVQQD
EyhiZDA3OThmMDgzMmE3NWQ2NjlkMTYxYTIyMDQyYjc5ZjY4ZTE5NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkjzoyf9c9TE3S0T5FdUHc4utot4
BeZke18G3rza2tYJ4wohG3gdV3v71MZjh+WmBfuEPsbjPxh5MMVDw92MMGjBhoRE
jZi4pep7aWVQ+z85jFW8BV/kPe+rqApOIIcsP1I2WjgJhuOz7Ik7nfrTHWK/J8uZ
7dI5eaHDUMKHha1OrFHNdG3b2KLK8xzJel8I7QLzc6lGXEfc2A7Wc0fCbjF+zZH+
wD9w4mCk8YjCpzHfwxcI0eQtOZhA14v/SiluerJ2jdRPYcLMEXyDV0DU1MBT3FQo
BJ9VL0+Eh5DYCqAlAA8xWS/ZbfgR8BCntt3Nlzs1nHLyKjr56xb9SreVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0HmPCDKnXWadFhoiBCt59o4ZScMB8GA1UdIwQY
MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt
YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3
LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxhydH8n
HyYtoydf5vqi2fZE+XoccCesTMPyhZ60HKIkQJXJ/EgJlEeHj3lhAxNe/iaKHkqW
5D9ST7dKvzS7q+pruPA3rMSljcPupJZQ+M0wo2mSIl7X1jt1BupLXYmjgnKOOqcy
1hgYPGUmhVFaJdYI6F3fjLltSOGyl0bIAzLdLYKt3h7qIas+0rUjmx8Pc0xShREu
5EnheDnnkBxKiFN+BZiieQTWdrAdaNJZtg8IEw6Mwqx+1kR73HJ8QyjzjunxaqKP
9Y/zsyUkAktOHPSYGn+YUXEHjQFdgqXnUWSxPb72ZkggptgeaxHDg7FBosFyqVZ6
rk0xI82UToMVEQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:39:35 2025 by rpki-client