This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
File:                     D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json)
Hash identifier:          YO4fKTUpsHxkLojMH4uP+zG/Nz6ao2jliUM3zFm8NVQ=
Subject key identifier:   46:0C:67:3A:0C:47:D5:AE:A9:6F:1D:9E:0E:9A:0C:14:22:19:7B:BB
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       019AF19B483F83EF85A8AAA4A7C339DAD4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
Manifest number:          126B
Signing time:             Sat 06 Dec 2025 03:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:16 +0000
Files and hashes:         1: 36cneJws6HIb-_f2mS0l66nxLX4.roa (hash: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=)
                          2: 8AuUB3FxiHV1blKo-b6xY84eohk.roa (hash: Kg20ZKTXvW1uV16aDD+SNuojir6sQqoC1ASnSIoi3uI=)
                          3: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: Mn1LRru1xWLsbHTqW4eqfZM+WqLsS4gQSc/3BxSmiqY=)
                          4: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=)
                          5: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=)
                          6: MMa9zjyYWF9MCSd9kWiKsBQwMOM.roa (hash: 1M1oXb07BTgtuT6hZTPpfndwoJo6RVKYLwfsIu34iO8=)
                          7: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=)
                          8: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=)
                          9: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=)
                          10: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=)
                          11: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=)
                          12: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=)
                          13: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=)
                          14: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=)
                          15: ux64x-iG-RIiMC28cG1MXnvTlG8.roa (hash: BYFtMvhjulHNkOE6Oci/AgVAG/FMD/15DLpBK0+ttvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:48:3f:83:ef:85:a8:aa:a4:a7:c3:39:da:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Dec  6 03:01:16 2025 GMT
            Not After : Dec  7 03:01:16 2025 GMT
        Subject: CN=460c673a0c47d5aea96f1d9e0e9a0c1422197bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:16:3b:b2:3a:8e:bb:8a:66:1a:94:5c:50:
                    06:36:45:25:62:c6:36:35:5c:b8:61:05:e9:4a:d8:
                    c2:a4:46:bb:67:97:36:ad:78:3b:95:39:bb:90:f6:
                    13:29:fb:c3:d5:ec:a1:1f:f3:43:15:81:82:8f:8f:
                    da:8c:d8:b5:8f:67:2f:cb:e2:01:56:5c:53:74:9a:
                    b3:a9:92:6c:2c:ec:c4:76:2e:de:c4:a3:8a:e8:f9:
                    11:bd:1b:3c:24:9e:ae:86:82:72:39:31:31:4e:a7:
                    de:5b:26:42:52:11:84:72:c4:30:10:69:28:dd:91:
                    97:e8:97:de:ab:80:b6:bc:31:45:67:80:7f:ab:b0:
                    5f:0d:96:94:a8:5e:f4:f0:5f:8a:2e:ec:63:bc:fe:
                    95:bb:30:a0:13:ef:d0:2c:26:07:30:9a:a8:a8:98:
                    f7:81:44:ad:3a:54:a3:19:dd:8f:de:49:cb:1b:f8:
                    68:a6:b3:f5:f3:ba:a2:7a:4e:e1:cd:48:c5:46:a4:
                    cc:e5:82:23:05:27:83:5e:f6:25:8c:9b:e0:a5:fe:
                    2b:ab:e7:ad:76:3b:99:43:06:99:63:f5:58:a7:da:
                    e0:f2:f6:33:c7:3f:f2:26:6a:bf:e5:7f:83:af:2d:
                    c3:9f:7b:91:4e:c0:55:9e:95:6e:e7:91:de:18:b8:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:67:3A:0C:47:D5:AE:A9:6F:1D:9E:0E:9A:0C:14:22:19:7B:BB
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:ed:08:e2:fe:89:20:a0:cd:f9:52:90:53:d9:c7:99:7b:
         b9:e8:fc:9c:4a:3e:d4:0b:ec:0d:ed:53:cb:0a:03:91:34:71:
         21:a8:ae:46:79:8f:ee:66:93:b1:fa:fc:0a:90:4d:da:91:22:
         e0:25:f0:4a:91:69:bb:83:a9:f0:9f:80:55:eb:1e:dd:83:a2:
         3b:67:54:e5:81:5a:e0:8c:99:39:9d:13:d7:85:e5:85:04:87:
         f2:51:6d:8c:b6:45:66:56:a6:60:ca:35:4a:c0:98:e6:f2:64:
         9b:68:46:95:fc:49:73:1d:0f:4b:62:5f:85:b5:36:32:a1:05:
         01:5a:b7:b9:64:f2:81:f9:64:36:06:a0:f3:63:fc:43:2b:f4:
         b9:69:09:53:61:49:a8:d1:a1:16:ab:da:46:a8:9b:93:2e:79:
         d0:1e:27:48:70:90:8b:ee:57:0a:f0:68:5d:da:56:99:e5:2d:
         84:fb:00:53:38:46:82:9e:1d:17:7c:f9:63:e8:54:48:aa:00:
         95:2f:db:a1:2e:8b:f1:3e:96:2e:bd:63:b8:06:31:fa:2b:0c:
         f4:8f:b7:95:dd:e9:5c:2d:6a:3c:15:f7:e5:c9:d9:88:54:6a:
         36:8a:47:f1:a6:cc:61:bf:45:c4:c5:96:12:eb:68:ec:4e:e6:
         f0:b4:a2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm0g/g++FqKqkp8M52tTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD
Eyg0NjBjNjczYTBjNDdkNWFlYTk2ZjFkOWUwZTlhMGMxNDIyMTk3YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEWO7I6jruKZhqUXFAGNkUlYsY2
NVy4YQXpStjCpEa7Z5c2rXg7lTm7kPYTKfvD1eyhH/NDFYGCj4/ajNi1j2cvy+IB
VlxTdJqzqZJsLOzEdi7exKOK6PkRvRs8JJ6uhoJyOTExTqfeWyZCUhGEcsQwEGko
3ZGX6Jfeq4C2vDFFZ4B/q7BfDZaUqF708F+KLuxjvP6VuzCgE+/QLCYHMJqoqJj3
gUStOlSjGd2P3knLG/hoprP187qiek7hzUjFRqTM5YIjBSeDXvYljJvgpf4rq+et
djuZQwaZY/VYp9rg8vYzxz/yJmq/5X+Dry3Dn3uRTsBVnpVu55HeGLi4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYMZzoMR9WuqW8dng6aDBQiGXu7MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmntCOL+
iSCgzflSkFPZx5l7uej8nEo+1AvsDe1TywoDkTRxIaiuRnmP7maTsfr8CpBN2pEi
4CXwSpFpu4Op8J+AVese3YOiO2dU5YFa4IyZOZ0T14XlhQSH8lFtjLZFZlamYMo1
SsCY5vJkm2hGlfxJcx0PS2JfhbU2MqEFAVq3uWTygflkNgag82P8Qyv0uWkJU2FJ
qNGhFqvaRqibky550B4nSHCQi+5XCvBoXdpWmeUthPsAUzhGgp4dF3z5Y+hUSKoA
lS/boS6L8T6WLr1juAYx+isM9I+3ld3pXC1qPBX35cnZiFRqNopH8abMYb9FxMWW
Euto7E7m8LSi5w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:25:07 2025 by rpki-client