This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          Hcv60ZEZEeIGgGNKEk0nP2FFip7cr9plb0ZKl6ad53g=
Subject key identifier:   1B:3E:C3:17:20:49:72:42:D2:FE:51:CC:CA:FC:B6:F3:1B:E9:6C:8B
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019AF2AD9211B0AE1B9C3D620345984BBD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0E0D
Signing time:             Sat 06 Dec 2025 08:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:52 +0000
Files and hashes:         1: nOieJBaD-sIvzNFw8ys8kgtNYus.roa (hash: mIQiCbdb3uG6eqbgHss6OvqglKI0yQcTc3QtF2YXAwA=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: ZHXwxBN+0ICY/6R5A5u1WGsyhK53EsN1bWM8ZMFlhK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:92:11:b0:ae:1b:9c:3d:62:03:45:98:4b:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Dec  6 08:00:52 2025 GMT
            Not After : Dec  7 08:00:52 2025 GMT
        Subject: CN=1b3ec31720497242d2fe51cccafcb6f31be96c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:86:f0:ee:c1:0c:ad:69:d4:12:72:60:71:
                    80:08:2f:04:5f:98:9d:68:19:04:be:6e:2a:28:00:
                    b9:8e:dd:f7:50:34:52:d2:0b:bc:a2:bc:27:4f:45:
                    f8:87:66:2b:f5:0f:a2:82:fb:7e:d5:19:a3:e0:5c:
                    a0:cd:63:c8:37:d9:4a:e7:7e:b4:5d:86:24:bc:d9:
                    09:3c:10:e9:39:e9:31:35:4b:1d:b9:8f:7c:15:0b:
                    b3:0f:32:6a:6b:7a:bb:33:76:41:cf:a5:fe:ab:12:
                    ec:14:ab:7c:eb:a0:94:61:ff:0b:49:10:c5:31:b3:
                    22:ed:85:cd:58:92:54:f4:07:1c:09:1e:b6:70:33:
                    f6:f1:ac:29:0a:d4:bb:bb:0b:65:f9:41:50:32:1d:
                    e1:51:0a:ea:76:eb:40:77:06:d1:08:31:3b:46:ad:
                    f7:48:67:c1:bf:a8:72:72:46:c3:19:23:ba:1a:39:
                    5f:87:f4:be:87:dc:60:a2:e5:0e:75:d9:3d:48:07:
                    39:7b:8b:10:b3:dc:82:04:43:22:32:3b:4a:80:90:
                    65:03:4a:8b:9e:78:78:c5:3a:a0:1f:f7:b4:6b:e9:
                    9e:51:5a:9b:21:30:a6:81:b6:91:75:34:bf:b3:98:
                    67:59:b9:c8:b9:0c:cb:ac:63:f7:80:06:dc:08:03:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:C3:17:20:49:72:42:D2:FE:51:CC:CA:FC:B6:F3:1B:E9:6C:8B
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:7b:32:3b:e4:42:a2:fb:e8:88:07:67:ac:57:21:ea:f9:cc:
         40:d7:08:38:4b:5f:9c:67:d3:61:75:2e:2f:58:f1:6a:ec:e6:
         08:12:fc:a9:df:d8:33:57:d4:ba:28:95:7f:a6:3b:c2:17:80:
         91:55:e5:cc:82:a5:41:17:fc:c9:18:4d:42:96:31:3c:0e:82:
         58:df:85:d5:37:88:3d:e7:b7:6d:bc:a5:6c:9c:fe:70:4c:f5:
         9a:8b:c6:80:f5:55:99:99:6a:aa:20:f1:fb:c4:26:d7:db:87:
         00:6c:c0:5b:8c:cf:13:25:2d:ec:ae:98:67:70:9b:44:c3:91:
         98:f7:66:3d:95:ab:19:02:a3:51:fd:82:ff:ac:0f:35:1c:f7:
         95:15:6a:a4:77:c2:d8:80:3e:4a:3e:f7:39:cf:70:fe:46:02:
         e8:44:8b:76:a3:09:f3:8f:43:ad:db:5d:7d:7b:70:e3:0c:e3:
         d5:79:7f:4b:57:fc:7e:17:ec:98:4a:e9:53:84:90:dc:df:44:
         36:80:cf:b9:66:23:5c:87:1d:7b:79:89:07:00:0b:24:fa:a7:
         10:1a:c3:7b:07:d2:e4:4e:94:ed:55:68:cf:6e:22:5f:56:86:
         88:f6:20:8f:7f:97:ce:a0:92:88:28:d5:c7:80:e1:b0:f8:2b:
         d9:7a:91:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrZIRsK4bnD1iA0WYS71jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD
EygxYjNlYzMxNzIwNDk3MjQyZDJmZTUxY2NjYWZjYjZmMzFiZTk2YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyuG8O7BDK1p1BJyYHGACC8EX5id
aBkEvm4qKAC5jt33UDRS0gu8orwnT0X4h2Yr9Q+igvt+1Rmj4FygzWPIN9lK5360
XYYkvNkJPBDpOekxNUsduY98FQuzDzJqa3q7M3ZBz6X+qxLsFKt866CUYf8LSRDF
MbMi7YXNWJJU9AccCR62cDP28awpCtS7uwtl+UFQMh3hUQrqdutAdwbRCDE7Rq33
SGfBv6hyckbDGSO6Gjlfh/S+h9xgouUOddk9SAc5e4sQs9yCBEMiMjtKgJBlA0qL
nnh4xTqgH/e0a+meUVqbITCmgbaRdTS/s5hnWbnIuQzLrGP3gAbcCAMSOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBs+wxcgSXJC0v5RzMr8tvMb6WyLMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4XsyO+RC
ovvoiAdnrFch6vnMQNcIOEtfnGfTYXUuL1jxauzmCBL8qd/YM1fUuiiVf6Y7wheA
kVXlzIKlQRf8yRhNQpYxPA6CWN+F1TeIPee3bbylbJz+cEz1movGgPVVmZlqqiDx
+8Qm19uHAGzAW4zPEyUt7K6YZ3CbRMORmPdmPZWrGQKjUf2C/6wPNRz3lRVqpHfC
2IA+Sj73Oc9w/kYC6ESLdqMJ849DrdtdfXtw4wzj1Xl/S1f8fhfsmErpU4SQ3N9E
NoDPuWYjXIcde3mJBwALJPqnEBrDewfS5E6U7VVoz24iX1aGiPYgj3+XzqCSiCjV
x4DhsPgr2XqRAg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:46 2025 by rpki-client