This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File:                     e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier:          9sR0x0lOTX8I0SfnOfj7IFyHO848KKyOgVIY3oAvFIs=
Subject key identifier:   9F:B4:77:EF:18:26:C2:A0:24:40:9A:FF:51:F3:AD:E9:38:08:52:2C
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer:       /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial:       019AF19AE7646A4565B10933A2B0BF570CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number:          0C88
Signing time:             Sat 06 Dec 2025 03:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:52 +0000
Files and hashes:         1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
                          2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: cEzhCVPar2GpSHmbl9jy7YwM9dnMkiw/aMphCx6UxkY=)
                          3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:e7:64:6a:45:65:b1:09:33:a2:b0:bf:57:0c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
        Validity
            Not Before: Dec  6 03:00:52 2025 GMT
            Not After : Dec  7 03:00:52 2025 GMT
        Subject: CN=9fb477ef1826c2a024409aff51f3ade93808522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:ae:ff:27:8e:28:7a:a0:80:1e:5a:99:ab:
                    3e:43:2c:04:18:94:96:35:63:5c:ee:c6:0e:83:6f:
                    01:a7:1f:9c:e0:5f:8e:35:7c:e9:d7:2f:9e:1b:26:
                    8a:6b:10:8e:7f:67:60:57:bc:8b:a8:c5:39:48:fd:
                    3f:e3:cc:ec:5c:14:50:12:32:27:df:4b:87:c0:6b:
                    ee:bb:ff:9e:09:38:59:cf:24:cd:a5:af:10:ef:24:
                    24:5a:ea:1c:72:08:9e:cd:dc:5f:da:fe:f2:27:66:
                    21:1d:b5:af:1d:ec:93:e2:2b:f6:ff:a7:9b:3e:d9:
                    df:c6:66:7b:18:b5:6a:d7:ac:bb:a7:aa:db:79:85:
                    74:09:a5:49:b2:a0:4e:b7:1d:2e:6f:cf:0b:1c:2c:
                    84:87:d4:e5:b3:ad:7d:32:02:c6:85:04:3a:ab:c7:
                    74:53:7d:c5:a2:95:20:7b:e7:46:4f:87:f2:87:c3:
                    2b:67:57:2f:8a:7b:d4:15:63:c8:b5:bd:2b:28:72:
                    a1:8c:a4:73:49:82:1d:92:b3:9f:5b:6c:a4:55:91:
                    dd:a5:2b:e5:71:0b:fe:d6:a2:86:cd:c0:0d:2a:25:
                    1a:43:79:ff:4f:4e:ee:f9:4d:ac:0a:5b:58:59:b3:
                    91:06:39:7a:28:fc:46:0f:d1:e6:78:ab:9f:0d:94:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:77:EF:18:26:C2:A0:24:40:9A:FF:51:F3:AD:E9:38:08:52:2C
            X509v3 Authority Key Identifier:
                keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:91:66:9f:bf:dd:04:e0:58:49:58:e6:d8:52:3c:38:da:82:
         c6:35:03:cf:3f:24:02:ab:3c:51:76:cc:78:b8:bc:3a:19:81:
         a2:24:a5:45:3d:5c:05:bd:66:82:0d:d9:8d:0f:a0:0d:86:06:
         05:b1:b6:59:ed:16:12:cc:9d:93:8e:9f:c5:8c:2e:f3:f1:92:
         df:ed:86:9b:20:f7:8e:8f:59:2b:c1:db:9d:77:e9:a6:e1:d1:
         f9:ae:fb:ce:ee:f4:22:52:26:05:a2:0f:c4:4c:cb:04:e7:f0:
         54:95:28:46:59:f3:a6:38:76:c9:85:27:eb:10:d2:f5:33:c7:
         de:4c:92:e8:2b:60:68:8c:95:e4:8a:6b:06:58:f1:91:49:11:
         f6:02:4c:0c:0a:a8:04:1d:b9:5a:15:7c:0c:6c:05:02:3b:9a:
         1e:fa:b0:eb:9a:3a:81:23:89:d5:0f:85:78:64:49:77:c1:51:
         51:89:7f:50:44:7e:2f:4c:44:86:25:d5:c5:c2:9d:c2:4c:46:
         10:90:11:20:f1:1d:25:ce:bb:fd:d3:59:22:c9:ca:c7:40:ae:
         76:8f:df:6b:d2:17:77:34:b6:ad:75:1c:7d:96:b8:56:10:e3:
         5d:f0:98:8d:da:34:07:5b:f8:67:c8:8d:42:e1:9e:48:6e:e1:
         31:93:f5:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmudkakVlsQkzorC/VwzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz
ZjEzOTcwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD
Eyg5ZmI0NzdlZjE4MjZjMmEwMjQ0MDlhZmY1MWYzYWRlOTM4MDg1MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzeu/yeOKHqggB5amas+QywEGJSW
NWNc7sYOg28Bpx+c4F+ONXzp1y+eGyaKaxCOf2dgV7yLqMU5SP0/48zsXBRQEjIn
30uHwGvuu/+eCThZzyTNpa8Q7yQkWuoccgiezdxf2v7yJ2YhHbWvHeyT4iv2/6eb
PtnfxmZ7GLVq16y7p6rbeYV0CaVJsqBOtx0ub88LHCyEh9Tls619MgLGhQQ6q8d0
U33FopUge+dGT4fyh8MrZ1cvinvUFWPItb0rKHKhjKRzSYIdkrOfW2ykVZHdpSvl
cQv+1qKGzcANKiUaQ3n/T07u+U2sCltYWbORBjl6KPxGD9HmeKufDZRgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+0d+8YJsKgJECa/1Hzrek4CFIsMB8GA1UdIwQY
MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt
M2QwZGI4ZWI0ZTEzLzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz
LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpFmn7/d
BOBYSVjm2FI8ONqCxjUDzz8kAqs8UXbMeLi8OhmBoiSlRT1cBb1mgg3ZjQ+gDYYG
BbG2We0WEsydk46fxYwu8/GS3+2GmyD3jo9ZK8HbnXfppuHR+a77zu70IlImBaIP
xEzLBOfwVJUoRlnzpjh2yYUn6xDS9TPH3kyS6CtgaIyV5IprBljxkUkR9gJMDAqo
BB25WhV8DGwFAjuaHvqw65o6gSOJ1Q+FeGRJd8FRUYl/UER+L0xEhiXVxcKdwkxG
EJARIPEdJc67/dNZIsnKx0Cudo/fa9IXdzS2rXUcfZa4VhDjXfCYjdo0B1v4Z8iN
QuGeSG7hMZP1rw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:59:27 2025 by rpki-client