This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File:                     mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier:          CLvuumHkxC5uqzIB+vufykN+HOfipvKM8Po7OCALfUY=
Subject key identifier:   FD:50:CB:4B:0C:87:94:75:92:0B:23:E1:05:31:4B:CE:BD:B0:D1:4F
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer:       /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial:       019AF31B85ED5ED3570FD6B3470571D68AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number:          145F
Signing time:             Sat 06 Dec 2025 10:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:58 +0000
Files and hashes:         1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
                          2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
                          3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
                          4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
                          5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: fmOVaC3nrE3K8RwIQk76HJWo5fAY3hsJVbiF+Rp8hCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:85:ed:5e:d3:57:0f:d6:b3:47:05:71:d6:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
        Validity
            Not Before: Dec  6 10:00:58 2025 GMT
            Not After : Dec  7 10:00:58 2025 GMT
        Subject: CN=fd50cb4b0c879475920b23e105314bcebdb0d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:a6:68:ff:c8:e5:95:52:9f:d3:21:74:de:
                    c1:e6:4d:0c:70:72:fb:cb:23:e2:70:d8:5a:81:09:
                    20:c0:fe:a6:ff:a1:4c:e2:51:37:38:f7:f0:c7:77:
                    55:f4:38:bb:78:06:6e:61:75:14:ee:e1:71:66:d9:
                    d3:05:8a:c4:22:83:9b:5f:37:1a:a3:2b:26:5f:3e:
                    8f:13:f2:8a:8b:58:d1:56:50:90:31:cd:7b:89:7f:
                    df:4d:56:dc:63:ba:58:b8:e5:7d:65:24:46:80:45:
                    c2:cc:23:6e:99:2b:b0:d5:99:60:0b:8e:02:cf:0a:
                    f7:60:bb:52:34:24:2f:05:67:64:a0:b2:bd:b3:09:
                    e1:da:85:35:cd:f6:ee:07:4f:80:99:b1:cd:a4:43:
                    58:5d:00:8a:4d:a0:03:b1:ee:51:62:5d:00:e6:4c:
                    a6:b2:60:7d:a9:5a:74:ca:84:2b:27:e6:1a:31:ac:
                    96:46:da:61:f7:20:32:fa:2d:de:b4:2d:3c:1d:d4:
                    e0:48:09:b2:a4:de:25:ae:f7:a5:d4:b6:58:15:10:
                    54:c3:ae:4b:ed:11:46:ee:cf:2a:70:54:28:0f:4d:
                    80:af:0f:5b:c4:0c:6d:1e:36:78:30:53:68:46:b1:
                    1c:b2:46:5a:d9:ff:dd:0d:65:06:62:da:f9:72:18:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:50:CB:4B:0C:87:94:75:92:0B:23:E1:05:31:4B:CE:BD:B0:D1:4F
            X509v3 Authority Key Identifier:
                keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bc:28:97:4c:e8:27:14:fa:94:6e:c1:2c:5d:e5:5b:9c:be:
         3c:59:d2:6e:d7:bb:18:61:c9:56:e8:c1:08:b0:e5:71:91:b9:
         6e:7a:8b:f4:f1:09:37:d9:45:28:e3:de:17:13:54:c9:c9:3d:
         2a:e9:45:65:dc:02:c1:67:d8:dd:2e:56:81:85:ca:11:a4:a4:
         ff:40:18:d3:6a:b3:e8:50:91:cd:0c:87:cb:49:26:1c:3f:b0:
         58:c9:18:02:cb:3a:ab:9c:81:a1:8f:10:ff:a3:9c:f9:be:dc:
         4e:0f:a1:5b:14:be:26:87:5d:07:5d:93:4e:f3:3e:f4:1b:c4:
         2a:49:16:03:0f:d2:23:23:16:d0:27:93:d3:ad:07:73:52:33:
         b3:89:ed:dc:fe:8d:ca:2a:70:b4:ce:19:eb:df:85:fb:0a:a0:
         b1:fa:69:c9:71:cd:31:dd:80:35:81:23:78:aa:c3:17:96:4f:
         61:b2:bf:e0:60:6d:f9:56:ba:65:0d:21:bc:f7:14:6c:3e:a8:
         e7:eb:74:07:b4:e0:a6:4b:c0:1f:7b:be:a3:62:e6:c9:59:31:
         2f:20:83:79:f6:f8:1b:87:8b:70:1c:ca:08:ea:5e:63:2c:00:
         76:88:24:85:9d:33:8c:cd:2c:e0:2b:ce:31:a4:ee:db:21:77:
         ea:62:76:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzG4XtXtNXD9azRwVx1orpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD
EyhmZDUwY2I0YjBjODc5NDc1OTIwYjIzZTEwNTMxNGJjZWJkYjBkMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsKmaP/I5ZVSn9MhdN7B5k0McHL7
yyPicNhagQkgwP6m/6FM4lE3OPfwx3dV9Di7eAZuYXUU7uFxZtnTBYrEIoObXzca
oysmXz6PE/KKi1jRVlCQMc17iX/fTVbcY7pYuOV9ZSRGgEXCzCNumSuw1ZlgC44C
zwr3YLtSNCQvBWdkoLK9swnh2oU1zfbuB0+AmbHNpENYXQCKTaADse5RYl0A5kym
smB9qVp0yoQrJ+YaMayWRtph9yAy+i3etC08HdTgSAmypN4lrvel1LZYFRBUw65L
7RFG7s8qcFQoD02Arw9bxAxtHjZ4MFNoRrEcskZa2f/dDWUGYtr5chhc4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1Qy0sMh5R1kgsj4QUxS869sNFPMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLwol0zo
JxT6lG7BLF3lW5y+PFnSbte7GGHJVujBCLDlcZG5bnqL9PEJN9lFKOPeFxNUyck9
KulFZdwCwWfY3S5WgYXKEaSk/0AY02qz6FCRzQyHy0kmHD+wWMkYAss6q5yBoY8Q
/6Oc+b7cTg+hWxS+JoddB12TTvM+9BvEKkkWAw/SIyMW0CeT060Hc1Izs4nt3P6N
yipwtM4Z69+F+wqgsfppyXHNMd2ANYEjeKrDF5ZPYbK/4GBt+Va6ZQ0hvPcUbD6o
5+t0B7TgpkvAH3u+o2LmyVkxLyCDefb4G4eLcBzKCOpeYywAdogkhZ0zjM0s4CvO
MaTu2yF36mJ2og==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:31 2025 by rpki-client