This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File:                     ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier:          Tg0tl/qHH8Be0yGwd0UaWD+ID0bKHiNKwKoveE5oX2I=
Subject key identifier:   F9:72:53:35:82:BD:80:36:88:D7:91:F6:4A:EE:13:AD:53:0B:5B:A8
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer:       /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial:       019AF163D7AF4736A944A13D568009E6377F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number:          0895
Signing time:             Sat 06 Dec 2025 02:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:43 +0000
Files and hashes:         1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: 1iUmFJB5iztdwqpt9NZ0oqOYUzpE3z9OWwxwEAoI7c4=)
                          2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=)
                          3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:d7:af:47:36:a9:44:a1:3d:56:80:09:e6:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
        Validity
            Not Before: Dec  6 02:00:43 2025 GMT
            Not After : Dec  7 02:00:43 2025 GMT
        Subject: CN=f972533582bd803688d791f64aee13ad530b5ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:a3:2a:d0:99:0e:72:4b:55:71:ba:fc:13:
                    7f:9a:2c:50:6e:df:b6:52:53:00:1c:d3:c3:e1:54:
                    00:3c:f6:24:29:62:e6:7b:a1:30:4f:c2:54:93:75:
                    7a:6e:c8:79:61:42:bc:b3:35:31:1a:be:fc:b2:26:
                    28:df:f0:9a:38:f0:2e:8b:4f:be:d0:66:4b:38:8f:
                    bf:4b:69:a2:d7:d9:c5:0c:d7:39:e6:65:e2:7f:91:
                    24:a3:d0:48:b4:d0:99:9a:35:0d:a8:0a:fa:91:46:
                    04:51:37:01:17:b6:6c:28:74:ab:8e:c1:96:1b:33:
                    a8:9e:f6:0b:7f:6f:e6:bf:64:e5:f7:2a:31:87:bb:
                    fd:cb:d6:a4:e5:d2:ec:65:43:a3:a4:87:1a:42:c5:
                    23:d0:ae:4a:9f:cd:c7:62:e8:d3:bb:87:1f:f6:9e:
                    a5:16:7c:ec:ba:9b:1b:cf:4c:43:60:1e:75:de:63:
                    97:af:be:de:2e:34:96:45:43:b1:c1:3b:db:25:b6:
                    2d:63:d1:f6:9a:4e:6b:fb:d5:d2:ba:bb:75:b9:83:
                    ac:c4:78:b4:77:8a:7e:40:e5:61:be:db:d5:f0:e9:
                    33:35:68:09:9c:6d:e6:b0:1d:ef:94:c8:bf:e9:b4:
                    6c:76:fb:30:bd:3e:ec:dd:a1:46:cc:f0:98:8d:ef:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:53:35:82:BD:80:36:88:D7:91:F6:4A:EE:13:AD:53:0B:5B:A8
            X509v3 Authority Key Identifier:
                keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:61:2f:ed:d5:10:f8:c9:a7:3f:c1:9a:80:4e:b7:e9:7c:14:
         4a:e6:dd:67:d4:b3:c9:4e:fe:7e:dc:92:e1:b0:db:f7:79:db:
         22:fb:d7:43:e2:27:c9:f1:c1:d3:d6:81:df:a6:21:ea:53:6d:
         d4:52:1f:fd:53:c9:34:23:e5:e4:c0:35:35:da:e3:f3:01:4e:
         6e:4e:22:8f:c2:05:11:a9:e8:7a:d5:52:15:16:38:69:a0:98:
         f8:cb:63:d5:6a:42:72:32:26:c7:b8:86:f8:20:03:5d:4f:5b:
         44:db:e7:d0:f2:c9:6e:a0:13:3a:e8:8c:56:d5:07:d8:af:34:
         57:53:ec:ef:4f:f9:84:fb:fd:b6:fc:42:d5:13:06:ea:91:79:
         d8:cd:82:14:4d:9c:99:9a:31:c1:9c:ba:48:9a:9c:6e:a5:5c:
         9f:48:1f:44:a1:38:1d:cb:97:33:6e:ba:b3:eb:3d:b8:99:ee:
         db:70:4b:e2:74:2e:cd:6a:eb:3d:a3:ea:d2:ce:7c:5f:a5:ad:
         a0:f0:09:0b:5e:fc:18:bb:55:02:c1:73:db:91:4d:e3:1e:54:
         c0:2a:8f:6f:a1:82:bb:2d:e4:eb:d2:ae:76:5b:56:5c:d3:02:
         73:9b:f4:8b:f4:ef:c9:16:7e:bb:95:18:87:96:71:67:58:2f:
         8f:f2:e4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxY9evRzapRKE9VoAJ5jd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD
EyhmOTcyNTMzNTgyYmQ4MDM2ODhkNzkxZjY0YWVlMTNhZDUzMGI1YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDajKtCZDnJLVXG6/BN/mixQbt+2
UlMAHNPD4VQAPPYkKWLme6EwT8JUk3V6bsh5YUK8szUxGr78siYo3/CaOPAui0++
0GZLOI+/S2mi19nFDNc55mXif5Eko9BItNCZmjUNqAr6kUYEUTcBF7ZsKHSrjsGW
GzOonvYLf2/mv2Tl9yoxh7v9y9ak5dLsZUOjpIcaQsUj0K5Kn83HYujTu4cf9p6l
Fnzsupsbz0xDYB513mOXr77eLjSWRUOxwTvbJbYtY9H2mk5r+9XSurt1uYOsxHi0
d4p+QOVhvtvV8OkzNWgJnG3msB3vlMi/6bRsdvswvT7s3aFGzPCYje8R7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlyUzWCvYA2iNeR9kruE61TC1uoMB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGEv7dUQ
+MmnP8GagE636XwUSubdZ9SzyU7+ftyS4bDb93nbIvvXQ+InyfHB09aB36Yh6lNt
1FIf/VPJNCPl5MA1Ndrj8wFObk4ij8IFEanoetVSFRY4aaCY+Mtj1WpCcjImx7iG
+CADXU9bRNvn0PLJbqATOuiMVtUH2K80V1Ps70/5hPv9tvxC1RMG6pF52M2CFE2c
mZoxwZy6SJqcbqVcn0gfRKE4HcuXM266s+s9uJnu23BL4nQuzWrrPaPq0s58X6Wt
oPAJC178GLtVAsFz25FN4x5UwCqPb6GCuy3k69KudltWXNMCc5v0i/TvyRZ+u5UY
h5ZxZ1gvj/Lkpg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:11 2025 by rpki-client