This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          sjJtqa1+z7pcdAvZnzCNox0HJQgqj+RqhQ3+W9c5yoM=
Subject key identifier:   F9:CF:11:2D:37:4C:8D:FB:59:3C:A1:C4:71:A4:51:8F:86:8E:CA:BE
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019AF12D217ABE9ACF0A9680295FCB8B2224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0C89
Signing time:             Sat 06 Dec 2025 01:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:57 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: /lqZnYRKbUPBopa5rWhnHyjEgsVXj7f/UfNnu2+5xdg=)
                          2: RrIUgGzA_6uRGMIHp97XatRgZIk.roa (hash: 3NT/lPqavpni/vGyQU257tSAfic3v6CA2/+wCtzuUCs=)
                          3: ebY0ybGhZip6V6HRTLpeSE7O7sw.roa (hash: CjnZtq5jk1id0rS9srgQaW3rR6nXLv2/QKmxK7hdv7k=)
                          4: exoVO57OcVlbrW3dFlqxMbRV-3k.roa (hash: 4+wfdmERPGk5rVct3syoULulD0ss2tRDAHPKy/Fy+vE=)
                          5: rYYW7WMqtpYi4D6CLqrYoLO5mNg.roa (hash: f6/pTbyCuVSw0vzY+a+MjWpCCLP6pCY1EIIjbucvXHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:21:7a:be:9a:cf:0a:96:80:29:5f:cb:8b:22:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Dec  6 01:00:57 2025 GMT
            Not After : Dec  7 01:00:57 2025 GMT
        Subject: CN=f9cf112d374c8dfb593ca1c471a4518f868ecabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:45:47:f1:f9:0d:7e:17:7d:5a:4f:c3:9b:
                    93:1c:50:bb:7c:58:0b:af:fc:5c:31:91:2d:f6:ab:
                    08:ff:a8:2f:fc:8b:eb:f8:b6:45:ee:50:07:b7:07:
                    13:a8:d7:b1:4a:12:31:c2:5a:f8:bf:0f:f8:78:0b:
                    6d:64:34:a4:03:44:a8:48:24:6f:e2:12:38:90:18:
                    8b:8b:e3:cb:34:28:0e:6a:21:34:27:44:9d:91:fc:
                    6d:45:6f:3f:9a:c3:f1:6e:45:58:47:71:3c:58:b1:
                    fa:9a:2d:5f:96:23:2c:8a:a5:42:1c:76:8b:67:eb:
                    e8:59:36:00:e6:d1:49:46:69:f7:b8:a4:4f:9b:05:
                    ff:d0:cc:aa:fc:c0:7f:b2:4f:46:74:1f:15:31:3b:
                    9e:3e:18:78:53:1e:83:4a:f3:8a:1a:8d:97:97:c5:
                    16:76:c4:17:53:d7:0f:96:05:b2:01:5a:58:42:8e:
                    f8:e4:67:fd:11:cb:1b:35:58:8e:7e:9f:b4:45:45:
                    81:63:87:e8:f4:de:71:29:22:14:2e:0a:78:a3:25:
                    f9:28:e9:91:72:f7:19:91:0c:3c:ad:11:0a:40:b2:
                    af:5c:d8:1d:85:6c:49:52:7b:58:bf:bc:44:40:d8:
                    c7:d3:6b:d5:1d:a1:be:fe:c7:ee:4f:03:c7:bf:78:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:11:2D:37:4C:8D:FB:59:3C:A1:C4:71:A4:51:8F:86:8E:CA:BE
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:57:83:07:fe:ea:4b:3a:e8:62:87:ac:33:23:f4:f8:cb:
         09:12:7b:5c:f2:db:41:32:60:21:09:53:4d:90:fc:91:ab:ec:
         e1:7b:52:ca:45:5b:28:ce:f2:10:81:3c:0a:7d:46:7f:b6:44:
         66:7c:eb:de:86:f6:05:0c:33:9d:72:a0:cf:e1:61:80:c6:44:
         91:90:fd:7f:87:f5:e7:e5:45:58:43:40:cd:13:68:a9:01:a2:
         d7:44:da:e2:03:ec:1a:2f:73:74:e5:0a:23:a4:c5:9d:44:b5:
         e6:93:e3:a4:7b:35:fa:e9:8d:a1:dc:77:44:85:24:a1:c0:49:
         b5:07:bc:f9:c2:d3:29:db:1f:b0:1c:dd:ad:0a:6c:f0:c4:46:
         20:f7:7e:56:e0:4d:21:7e:4a:d2:54:5d:3b:5c:1c:22:47:29:
         05:a1:3e:07:d2:0c:15:fb:d7:22:70:ca:bb:98:2e:12:1f:cf:
         71:24:27:fd:52:26:bc:5c:f2:d8:b2:2e:6d:05:53:b8:d3:de:
         6b:89:96:93:28:74:14:c6:4b:9e:47:21:fa:f0:8e:0e:7b:ba:
         e2:4c:95:01:c0:ab:ff:9c:30:49:9a:cc:c1:5e:45:35:2d:12:
         ce:ae:d6:44:6a:ac:3f:77:fc:cc:c9:5e:9f:2d:4e:ce:ce:79:
         69:b8:a1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLSF6vprPCpaAKV/LiyIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy
ZDhlNjMwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD
EyhmOWNmMTEyZDM3NGM4ZGZiNTkzY2ExYzQ3MWE0NTE4Zjg2OGVjYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3BFR/H5DX4XfVpPw5uTHFC7fFgL
r/xcMZEt9qsI/6gv/Ivr+LZF7lAHtwcTqNexShIxwlr4vw/4eAttZDSkA0SoSCRv
4hI4kBiLi+PLNCgOaiE0J0SdkfxtRW8/msPxbkVYR3E8WLH6mi1fliMsiqVCHHaL
Z+voWTYA5tFJRmn3uKRPmwX/0Myq/MB/sk9GdB8VMTuePhh4Ux6DSvOKGo2Xl8UW
dsQXU9cPlgWyAVpYQo745Gf9EcsbNViOfp+0RUWBY4fo9N5xKSIULgp4oyX5KOmR
cvcZkQw8rREKQLKvXNgdhWxJUntYv7xEQNjH02vVHaG+/sfuTwPHv3hdIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnPES03TI37WTyhxHGkUY+Gjsq+MB8GA1UdIwQY
MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt
MDc3MTFlZDAyYjc1LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1
LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuJXgwf+
6ks66GKHrDMj9PjLCRJ7XPLbQTJgIQlTTZD8kavs4XtSykVbKM7yEIE8Cn1Gf7ZE
Znzr3ob2BQwznXKgz+FhgMZEkZD9f4f15+VFWENAzRNoqQGi10Ta4gPsGi9zdOUK
I6TFnUS15pPjpHs1+umNodx3RIUkocBJtQe8+cLTKdsfsBzdrQps8MRGIPd+VuBN
IX5K0lRdO1wcIkcpBaE+B9IMFfvXInDKu5guEh/PcSQn/VImvFzy2LIubQVTuNPe
a4mWkyh0FMZLnkch+vCODnu64kyVAcCr/5wwSZrMwV5FNS0Szq7WRGqsP3f8zMle
ny1Ozs55abihsw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:18:55 2025 by rpki-client