This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File:                     szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier:          Wp7/+752KIkr6WDeVCbU0irTvLvDL1e2ilkN14zE0jI=
Subject key identifier:   11:71:AB:2F:DC:0A:A3:6D:3C:E9:4C:B1:10:5F:A7:C2:1E:C3:EC:4A
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer:       /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial:       019AF1643DA7F8E522CCD55A226AB3CFF9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 02:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:09 +0000
Files and hashes:         1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
                          2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
                          3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: apWQmR+YRjyObjFjx9abQz2lU2NzdATeJeT8Ipj7T0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:3d:a7:f8:e5:22:cc:d5:5a:22:6a:b3:cf:f9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
        Validity
            Not Before: Dec  6 02:01:09 2025 GMT
            Not After : Dec  7 02:01:09 2025 GMT
        Subject: CN=1171ab2fdc0aa36d3ce94cb1105fa7c21ec3ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:0a:5e:5b:7e:cf:47:e4:a3:05:2f:07:c3:
                    54:90:9a:5f:3b:88:69:62:d6:ef:e7:d7:42:3e:70:
                    63:26:59:ef:18:1e:d9:fa:4d:0c:25:b8:02:77:fb:
                    47:ff:69:be:9c:3e:b7:3d:88:92:79:4f:ba:93:a0:
                    20:f3:4b:1c:0d:47:aa:25:fd:ee:c5:e7:c4:11:3b:
                    99:e0:a2:fa:3c:ca:23:a0:28:86:65:53:01:1f:3a:
                    c5:40:d4:d5:86:c3:77:ae:28:04:b1:6b:4c:f2:fd:
                    cc:71:5d:64:5d:81:b1:41:d1:b5:84:f5:9d:4b:85:
                    eb:26:cb:f4:c1:8f:7d:47:3e:2a:45:a1:52:6d:79:
                    ac:19:1d:55:03:2d:43:80:69:9d:bb:67:f9:e3:7c:
                    93:9d:06:16:46:95:fc:61:c9:75:13:6b:e6:c6:a4:
                    89:d5:d9:06:c4:e2:4d:64:41:89:20:4c:f5:51:75:
                    06:25:90:e3:21:be:4c:23:15:cc:5c:23:2f:cf:ee:
                    78:7e:63:26:0d:21:31:73:57:67:bb:7a:fd:ba:56:
                    2f:fe:5c:ac:bf:3f:f8:97:74:25:70:34:98:bf:da:
                    8f:fc:20:6e:76:cb:ae:f0:0e:1e:46:ea:15:92:e8:
                    b0:15:57:a3:a6:e3:68:ed:52:e4:30:84:4c:aa:49:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:AB:2F:DC:0A:A3:6D:3C:E9:4C:B1:10:5F:A7:C2:1E:C3:EC:4A
            X509v3 Authority Key Identifier:
                keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:59:db:0e:57:c9:ab:30:6c:7a:71:3d:a4:76:3b:b6:2b:
         c4:00:64:1a:d5:73:9e:e3:0c:83:d7:6c:e0:3e:e6:e1:39:b8:
         82:43:00:10:40:c3:54:38:e9:71:a5:aa:53:64:7f:4f:43:27:
         05:d4:bf:73:ae:6d:4f:b6:39:b2:39:47:0b:69:cc:7b:9d:58:
         ea:bc:ef:c2:0f:49:9d:5e:a5:a3:20:e7:da:25:b4:eb:d9:4f:
         b7:56:0a:75:4b:a3:0a:14:04:c3:82:0f:7b:13:7a:de:89:ee:
         31:6d:d7:e6:09:be:35:75:0b:99:8c:1b:81:67:fc:7d:00:f2:
         33:49:d9:5c:04:5e:83:55:d1:21:f2:4b:12:11:5e:43:df:7d:
         34:37:71:81:d3:80:33:6f:dc:fd:ec:f6:15:c2:5f:57:25:aa:
         04:55:71:d1:f3:36:38:fc:88:84:27:54:22:3d:e2:f8:5b:b6:
         a4:3f:fd:22:b7:4a:7e:56:cf:79:f6:a7:f8:6d:5f:d1:bb:c9:
         f2:70:33:2a:c9:c4:1f:fb:f9:fe:9b:51:15:97:db:b4:db:72:
         95:90:5b:ac:3b:3b:16:fd:dc:af:60:97:99:74:34:84:cf:1c:
         3d:0c:7d:20:70:85:a9:dd:99:a9:32:d6:0c:9e:57:e3:63:e3:
         2e:bd:cf:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZD2n+OUizNVaImqzz/mwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD
EygxMTcxYWIyZmRjMGFhMzZkM2NlOTRjYjExMDVmYTdjMjFlYzNlYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUIKXlt+z0fkowUvB8NUkJpfO4hp
Ytbv59dCPnBjJlnvGB7Z+k0MJbgCd/tH/2m+nD63PYiSeU+6k6Ag80scDUeqJf3u
xefEETuZ4KL6PMojoCiGZVMBHzrFQNTVhsN3rigEsWtM8v3McV1kXYGxQdG1hPWd
S4XrJsv0wY99Rz4qRaFSbXmsGR1VAy1DgGmdu2f543yTnQYWRpX8Ycl1E2vmxqSJ
1dkGxOJNZEGJIEz1UXUGJZDjIb5MIxXMXCMvz+54fmMmDSExc1dnu3r9ulYv/lys
vz/4l3QlcDSYv9qP/CBudsuu8A4eRuoVkuiwFVejpuNo7VLkMIRMqkmCUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFxqy/cCqNtPOlMsRBfp8Iew+xKMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxxZ2w5X
yaswbHpxPaR2O7YrxABkGtVznuMMg9ds4D7m4Tm4gkMAEEDDVDjpcaWqU2R/T0Mn
BdS/c65tT7Y5sjlHC2nMe51Y6rzvwg9JnV6loyDn2iW069lPt1YKdUujChQEw4IP
exN63onuMW3X5gm+NXULmYwbgWf8fQDyM0nZXAReg1XRIfJLEhFeQ999NDdxgdOA
M2/c/ez2FcJfVyWqBFVx0fM2OPyIhCdUIj3i+Fu2pD/9IrdKflbPefan+G1f0bvJ
8nAzKsnEH/v5/ptRFZfbtNtylZBbrDs7Fv3cr2CXmXQ0hM8cPQx9IHCFqd2ZqTLW
DJ5X42PjLr3PJQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:46:00 2025 by rpki-client