This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File:                     RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier:          sR/F86fGIdRfAOVz/jvleXXXfDAHZuE8/hfdcFMU/cM=
Subject key identifier:   04:6D:26:AC:46:19:6A:85:04:DE:CF:43:C2:BF:57:63:53:C3:85:4A
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer:       /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial:       019AF6535ABA1A1BF7D517FA729118562EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number:          0B0F
Signing time:             Sun 07 Dec 2025 01:00:49 +0000
Manifest this update:     Sun 07 Dec 2025 01:00:49 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:49 +0000
Files and hashes:         1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=)
                          2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=)
                          3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=)
                          4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=)
                          5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=)
                          6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=)
                          7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: GB5hP5E4w1aW2OEslW2hl0alqdl1YfB1auzo4nXoOO8=)
                          8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=)
                          9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=)
                          10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=)
                          11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=)
                          12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=)
                          13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=)
                          14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=)
                          15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:5a:ba:1a:1b:f7:d5:17:fa:72:91:18:56:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
        Validity
            Not Before: Dec  7 01:00:49 2025 GMT
            Not After : Dec  8 01:00:49 2025 GMT
        Subject: CN=046d26ac46196a8504decf43c2bf576353c3854a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:08:de:b5:83:a7:cc:1c:8b:89:59:8a:23:
                    fd:24:17:dd:4f:42:03:98:f1:4c:6d:47:c8:4b:a2:
                    da:3a:c1:0b:3d:c7:fa:66:b4:1e:f8:26:a8:91:e9:
                    d7:38:28:52:64:c5:e3:54:be:ab:dd:28:50:0b:55:
                    c6:4e:dc:75:1d:31:0a:7a:16:7b:dd:04:ef:14:65:
                    a2:c3:10:b2:20:c9:d7:ec:13:a7:8d:fc:f3:ce:f9:
                    80:c8:62:bf:cb:c7:d8:02:42:fb:2a:64:20:20:c2:
                    3c:2b:81:f8:76:2b:52:ee:bc:dd:cc:a8:66:52:d1:
                    34:e7:6e:96:4c:fa:ee:56:2c:dc:4d:69:04:e1:cb:
                    b3:aa:a3:f7:9d:46:04:c8:2a:8c:da:ba:49:82:cf:
                    61:89:bd:64:01:08:87:b3:99:69:e0:8b:de:ff:b9:
                    08:9b:7e:e7:aa:50:b5:54:39:5a:5d:bd:84:12:57:
                    57:38:92:e6:be:8a:ed:b8:4c:ea:ac:79:03:2d:4b:
                    81:4f:90:1b:fd:2a:81:25:dd:5c:b5:88:aa:fc:e9:
                    7d:ed:38:f4:7e:73:59:91:5e:7d:d8:e7:90:05:54:
                    a0:d4:38:71:ab:47:e0:95:20:69:17:47:2d:1b:2d:
                    20:24:96:d8:80:4b:0b:60:25:28:24:ca:9f:23:33:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:26:AC:46:19:6A:85:04:DE:CF:43:C2:BF:57:63:53:C3:85:4A
            X509v3 Authority Key Identifier:
                keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a1:47:a9:a6:fd:9c:7d:f1:45:7f:01:f3:bc:66:8f:b7:80:
         13:87:13:5e:16:50:c0:7c:1e:25:5c:cb:55:eb:7a:6a:e1:21:
         94:ed:8d:b5:f0:e0:b3:c9:8b:7f:88:1d:d1:80:49:18:b4:84:
         88:31:d5:2b:e1:5f:e2:67:93:d2:22:29:e8:22:d8:30:ac:75:
         10:26:e2:a0:44:95:80:e7:b5:67:ba:48:8c:9a:62:52:98:69:
         34:f4:66:6e:3e:63:6a:ee:19:e6:b4:4d:7b:11:42:d6:49:91:
         36:19:00:bc:70:3f:c3:12:14:84:4a:13:8f:da:3a:8b:b1:fb:
         cc:74:02:24:62:25:37:87:e4:14:97:bc:01:0f:3a:13:a0:50:
         4d:00:37:95:ca:51:f1:a8:ad:9e:45:f1:5f:a8:35:72:52:56:
         26:be:8f:fc:5d:f7:79:07:b7:1a:a4:fb:7d:41:5e:18:d8:cc:
         ef:9a:44:66:1b:5b:d0:d7:d4:7e:db:9a:21:05:5b:9b:ee:b7:
         5b:23:bc:12:6a:31:35:50:69:1e:9d:5a:70:4c:53:0e:f8:79:
         d0:5c:03:86:82:d7:17:c3:48:5e:03:23:8f:65:17:b0:fd:68:
         52:f3:7f:66:96:5f:e9:61:fa:f4:c0:05:79:5a:4a:c1:6d:8d:
         25:18:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:32:41 2025 by rpki-client