This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          uGKxFjBD6QAvNTwt5jRdCfM2UBNHSMdDTh5HTaA5fFo=
Subject key identifier:   DC:BC:20:E2:E6:91:59:52:00:2C:15:53:29:4B:57:50:55:52:C1:4C
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       019AF50A55E5B0581972E8D3E04FA01F3DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          1169
Signing time:             Sat 06 Dec 2025 19:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:26 +0000
Files and hashes:         1: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (hash: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=)
                          2: 8ALCem6WNzZicaF6OTNthjeQfck.roa (hash: YpH6jIe+TynmU/8cQY6b28ehJOsvk8Ov/8Gxgmlkb/M=)
                          3: BOjqPIb3athrryYMVMll8dWYS_4.roa (hash: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=)
                          4: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (hash: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=)
                          5: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (hash: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=)
                          6: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (hash: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=)
                          7: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (hash: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=)
                          8: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: rYOkNgObO1EtRh4+5bhoRTk/cI2P2w1+2eUXgoTPUZo=)
                          9: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (hash: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:55:e5:b0:58:19:72:e8:d3:e0:4f:a0:1f:3d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Dec  6 19:01:26 2025 GMT
            Not After : Dec  7 19:01:26 2025 GMT
        Subject: CN=dcbc20e2e6915952002c1553294b57505552c14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:71:14:8c:a5:3a:ba:c7:dd:40:dd:4c:b1:
                    a7:e0:e2:69:c2:9f:5e:04:48:e1:1c:a5:84:07:8f:
                    43:6b:f4:75:3f:03:03:9a:66:43:17:90:15:2a:40:
                    56:b9:5f:49:a3:71:eb:80:56:6a:80:30:d9:ee:ab:
                    fc:20:97:35:51:d1:97:2d:a2:a2:ce:5c:bf:d2:6e:
                    42:ec:41:ac:9b:ef:8a:98:6f:47:ca:54:01:aa:6e:
                    e8:da:b7:a2:e6:de:50:d6:fd:f8:8a:4f:5c:e3:95:
                    cb:2e:ae:3b:4b:3c:a9:12:d1:63:91:55:e8:35:af:
                    42:66:16:9a:ca:fa:57:4d:50:c9:7c:69:ef:8d:cf:
                    10:9e:f3:04:3a:80:c7:44:7a:45:06:2b:44:a9:a0:
                    80:bb:70:93:10:d3:c9:30:cf:c7:42:5c:91:d5:07:
                    81:68:ea:3c:32:62:0e:86:1a:ce:27:6d:45:98:2a:
                    9d:bf:56:ed:79:ea:8f:db:4c:7d:56:bc:8a:88:54:
                    d8:34:a9:86:f1:1d:cb:ce:fe:24:0e:c7:4f:76:25:
                    21:26:59:50:f3:5b:f9:6d:e1:62:7b:a5:02:74:91:
                    92:62:3a:d1:44:69:9d:99:e5:15:9b:ad:25:82:5b:
                    81:0a:23:00:6c:f1:4f:78:48:8f:57:c5:3d:53:81:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BC:20:E2:E6:91:59:52:00:2C:15:53:29:4B:57:50:55:52:C1:4C
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:e1:69:f0:f3:e1:d9:3c:81:7c:5b:b0:ba:1f:90:0c:25:
         fd:cb:8b:c6:b6:44:8b:eb:e7:4b:53:68:8b:2f:1d:4e:ec:94:
         1f:f7:12:53:f5:70:c1:9b:c3:68:d5:cd:a8:28:ca:ac:db:c9:
         2c:69:db:89:eb:16:68:53:00:a0:72:fa:74:eb:9a:66:fe:ab:
         04:bf:68:34:ce:e5:5c:39:87:d0:ac:51:e0:c7:c1:9a:c2:bb:
         46:82:92:23:54:0a:33:b3:96:8d:c3:db:1d:8a:6e:12:aa:0e:
         eb:e0:b4:d5:95:75:fd:b8:d7:24:e0:9c:4f:ce:05:35:e2:fc:
         4a:96:7c:c0:e3:05:f2:0a:39:20:f3:74:78:af:2c:a6:ca:76:
         67:bd:f0:91:47:f5:25:f4:a7:14:cb:32:51:4c:2e:38:93:db:
         c0:3f:01:fa:46:95:e7:5b:05:a6:6c:81:a4:8e:e2:b5:99:e2:
         7b:99:ab:62:a3:14:91:2a:ce:b6:6d:94:cd:07:97:21:d2:14:
         7b:92:f7:a8:e6:c6:0b:4b:09:24:c8:49:ae:5f:30:66:78:35:
         8e:b4:db:64:2c:67:f9:92:f9:d4:17:d4:c7:a3:56:21:80:48:
         26:88:b8:f1:b5:30:0d:94:76:16:5b:0f:6b:21:27:4e:eb:80:
         77:49:69:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1ClXlsFgZcujT4E+gHz3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk
NjNhYjgwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD
EyhkY2JjMjBlMmU2OTE1OTUyMDAyYzE1NTMyOTRiNTc1MDU1NTJjMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArShxFIylOrrH3UDdTLGn4OJpwp9e
BEjhHKWEB49Da/R1PwMDmmZDF5AVKkBWuV9Jo3HrgFZqgDDZ7qv8IJc1UdGXLaKi
zly/0m5C7EGsm++KmG9HylQBqm7o2rei5t5Q1v34ik9c45XLLq47SzypEtFjkVXo
Na9CZhaayvpXTVDJfGnvjc8QnvMEOoDHRHpFBitEqaCAu3CTENPJMM/HQlyR1QeB
aOo8MmIOhhrOJ21FmCqdv1bteeqP20x9VryKiFTYNKmG8R3Lzv4kDsdPdiUhJllQ
81v5beFie6UCdJGSYjrRRGmdmeUVm60lgluBCiMAbPFPeEiPV8U9U4Hi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy8IOLmkVlSACwVUylLV1BVUsFMMB8GA1UdIwQY
MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt
YzRhY2I4OTY5YzQ5LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5
LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDzhafDz
4dk8gXxbsLofkAwl/cuLxrZEi+vnS1Noiy8dTuyUH/cSU/VwwZvDaNXNqCjKrNvJ
LGnbiesWaFMAoHL6dOuaZv6rBL9oNM7lXDmH0KxR4MfBmsK7RoKSI1QKM7OWjcPb
HYpuEqoO6+C01ZV1/bjXJOCcT84FNeL8SpZ8wOMF8go5IPN0eK8spsp2Z73wkUf1
JfSnFMsyUUwuOJPbwD8B+kaV51sFpmyBpI7itZnie5mrYqMUkSrOtm2UzQeXIdIU
e5L3qObGC0sJJMhJrl8wZng1jrTbZCxn+ZL51BfUx6NWIYBIJoi48bUwDZR2FlsP
ayEnTuuAd0lprQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:50:12 2025 by rpki-client