This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          sAkrUEBiebdRQltwffo7o6dQT5U2+1djo7pl8R9PB0Q=
Subject key identifier:   9D:45:CB:BF:A0:36:30:3E:B7:DE:EF:55:F5:22:4B:1E:B0:01:3B:16
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019AF19BA8E8F04C5546F7D6D4C021771BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          1696
Signing time:             Sat 06 Dec 2025 03:01:41 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:41 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:41 +0000
Files and hashes:         1: 1-lOZ9CojkFPMarDdJI5p8kuB4xY.roa (hash: xSbooZ2aXIQhAjsl9R8IdLyOzoIrIGLJWb0yzYMG7eQ=)
                          2: 9nYCpRDqLjXkPW_4xA3ma8dX4jo.roa (hash: LTkB48lSNoDAYkD/zDK6m8vOh49htS24Ue4wI1v1Jcg=)
                          3: SO2r7hsXMD0rXtOemxDNawKSwK8.roa (hash: 3SE/M/3jMxmStavB2oSEQ1ZOQCjp7NcclCdpHKXNutg=)
                          4: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: zYL+Z8NKSyXEr/DO4Q8GFGr9cJEcdvWtel/4hcmzP2A=)
                          5: s7p4j9URn2D7wbUlKxsLHirYGx8.roa (hash: DBs/FkHFiHhJS9lahQklwyy7rNMLV87rpIdKTKuvgz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:a8:e8:f0:4c:55:46:f7:d6:d4:c0:21:77:1b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Dec  6 03:01:41 2025 GMT
            Not After : Dec  7 03:01:41 2025 GMT
        Subject: CN=9d45cbbfa036303eb7deef55f5224b1eb0013b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:75:47:c6:ea:99:ca:85:49:1b:3b:4e:03:
                    ec:56:a0:8a:5e:10:4e:3e:92:f5:93:3f:f3:06:ce:
                    f0:89:f9:9f:26:2c:c2:f7:e0:49:9f:6c:1a:60:f1:
                    4f:bc:60:0e:77:45:98:c5:bc:c7:0f:d7:41:bc:c9:
                    d2:a6:52:9d:6f:91:9d:e9:6c:09:8a:9e:52:51:57:
                    d9:03:68:3a:57:56:87:e4:e8:52:1d:70:0e:c5:83:
                    f7:6e:68:3e:eb:0f:1f:e5:89:c5:85:7b:9d:fc:9b:
                    56:12:73:8a:1d:05:e9:e6:8a:a4:b2:71:64:57:dd:
                    cf:ca:82:55:0b:2d:f1:c1:cd:f2:d7:a0:68:b5:ec:
                    ad:fe:79:df:6e:bd:e4:b4:31:f4:07:c0:74:61:ee:
                    a0:48:f2:86:03:32:0f:b0:92:8b:09:1f:42:71:d7:
                    88:9c:9e:5f:b2:ce:21:be:e3:03:e9:93:c2:e9:a6:
                    93:c9:03:45:e0:05:c5:dc:98:06:7d:21:8a:cf:ff:
                    d8:2e:c4:06:f3:2c:78:1f:70:69:8e:d9:87:c6:12:
                    2a:99:02:07:06:24:97:50:f0:04:4e:fb:07:39:63:
                    a9:81:62:85:5d:1d:da:7d:54:a6:2a:14:e1:2e:3d:
                    eb:50:79:fb:0f:60:f5:28:85:6e:a6:e0:bf:57:a6:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:CB:BF:A0:36:30:3E:B7:DE:EF:55:F5:22:4B:1E:B0:01:3B:16
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:f8:b5:31:9f:b5:e4:1c:45:4e:fe:d9:45:46:73:52:e8:
         27:fd:4b:3f:14:87:bc:74:0f:57:63:0f:a9:77:c5:0b:58:6e:
         e0:c4:b7:0e:2a:4b:bb:88:55:2b:c2:b5:d6:9a:07:7a:c7:72:
         8d:9b:68:32:c3:09:ed:39:f4:dc:f0:d8:c5:f9:a8:43:b3:6f:
         9a:d6:96:a4:f2:74:d2:d1:7c:ee:0b:0b:33:ef:8a:df:cb:7c:
         ad:18:71:ad:70:0e:4b:13:bb:bd:59:e4:94:52:c8:13:86:7e:
         ef:48:74:cb:55:1b:1a:64:72:43:fd:07:ed:75:52:11:6a:25:
         a5:39:9a:ca:73:e7:2b:29:4f:84:48:1d:f5:3a:69:c4:88:be:
         98:1a:a7:c9:91:8b:ee:56:69:fe:9e:8c:ef:90:80:dc:bd:73:
         6d:6b:63:d9:2c:3e:f1:a7:67:ad:80:a6:7f:db:dc:50:5f:91:
         64:fd:8b:f7:97:71:92:a4:f1:b4:83:97:ef:4c:60:9d:92:4f:
         37:65:2d:ae:16:75:87:6e:e8:2e:5c:e2:c0:3b:a7:82:54:06:
         fa:61:08:7c:51:c2:4f:df:6a:94:e9:a3:34:a8:47:ab:cd:7e:
         11:63:af:2b:a1:eb:bf:87:b3:fe:2b:ba:6e:db:1e:4e:62:82:
         ef:fb:58:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm6jo8ExVRvfW1MAhdxvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5
NTgwYmIwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD
Eyg5ZDQ1Y2JiZmEwMzYzMDNlYjdkZWVmNTVmNTIyNGIxZWIwMDEzYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Sp1R8bqmcqFSRs7TgPsVqCKXhBO
PpL1kz/zBs7wifmfJizC9+BJn2waYPFPvGAOd0WYxbzHD9dBvMnSplKdb5Gd6WwJ
ip5SUVfZA2g6V1aH5OhSHXAOxYP3bmg+6w8f5YnFhXud/JtWEnOKHQXp5oqksnFk
V93PyoJVCy3xwc3y16Boteyt/nnfbr3ktDH0B8B0Ye6gSPKGAzIPsJKLCR9CcdeI
nJ5fss4hvuMD6ZPC6aaTyQNF4AXF3JgGfSGKz//YLsQG8yx4H3BpjtmHxhIqmQIH
BiSXUPAETvsHOWOpgWKFXR3afVSmKhThLj3rUHn7D2D1KIVupuC/V6ZTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1Fy7+gNjA+t97vVfUiSx6wATsWMB8GA1UdIwQY
MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt
ZThjOWFkNWYwNTFhLzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh
LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUR74tTGf
teQcRU7+2UVGc1LoJ/1LPxSHvHQPV2MPqXfFC1hu4MS3DipLu4hVK8K11poHesdy
jZtoMsMJ7Tn03PDYxfmoQ7NvmtaWpPJ00tF87gsLM++K38t8rRhxrXAOSxO7vVnk
lFLIE4Z+70h0y1UbGmRyQ/0H7XVSEWolpTmaynPnKylPhEgd9TppxIi+mBqnyZGL
7lZp/p6M75CA3L1zbWtj2Sw+8adnrYCmf9vcUF+RZP2L95dxkqTxtIOX70xgnZJP
N2UtrhZ1h27oLlziwDunglQG+mEIfFHCT99qlOmjNKhHq81+EWOvK6Hrv4ez/iu6
btseTmKC7/tYUw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:16:19 2025 by rpki-client