This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          juxTA2Doje8FbFJV385Sk2CHlHtsG+UW5JbEHdCUrZo=
Subject key identifier:   70:F6:63:D4:86:B9:81:60:31:D5:7C:45:3E:72:AB:8C:9E:D2:53:B2
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       019AF3C0C63E294CEF7E4E2ED516AF4DAE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 13:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:28 +0000
Files and hashes:         1: 03xoijHJR91pQdRK4BVsUMo651Q.roa (hash: NiWV6nMnI3xd8nfLo25KyV3pkHiiEo7coUv5lu4C83o=)
                          2: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          3: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: RqWAvOdBEXXT45T/9kz3462ANbE2lEd89RfQ3L5uOKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:c6:3e:29:4c:ef:7e:4e:2e:d5:16:af:4d:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Dec  6 13:01:28 2025 GMT
            Not After : Dec  7 13:01:28 2025 GMT
        Subject: CN=70f663d486b9816031d57c453e72ab8c9ed253b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:99:d7:6d:d5:22:6d:10:f4:7d:76:e0:ae:
                    13:cc:ae:da:9f:27:de:b3:97:e3:7a:1f:6c:ca:3f:
                    47:a6:2a:a1:d4:d3:bd:d3:5d:91:8d:74:18:fd:ef:
                    22:cf:60:15:65:3a:d2:bf:2a:02:3c:40:4d:f5:92:
                    5a:de:c7:70:2d:4f:79:c7:af:cc:27:f4:29:8a:17:
                    cc:4a:2a:99:b2:f1:51:e0:db:f1:4f:9d:71:e2:c7:
                    41:70:a6:af:21:ae:9c:20:40:05:92:55:c4:4a:19:
                    89:18:8c:70:50:1c:b6:70:ac:2e:2e:77:93:e5:82:
                    f7:28:99:c9:aa:e5:09:18:1a:38:1b:1c:4f:c4:a9:
                    3c:06:09:d2:b1:0f:12:ca:b7:d2:38:43:e1:8e:5b:
                    00:d7:5e:15:b1:b4:3d:6c:5a:93:29:a0:d9:c5:be:
                    bf:64:0c:74:9c:c1:61:09:7d:21:2a:cb:83:96:33:
                    4b:d0:66:f1:d7:88:fb:1b:5e:b7:60:f8:52:b6:25:
                    7a:25:7a:f6:c6:41:a2:ba:89:4e:8f:0c:65:46:3e:
                    7f:10:bc:d7:c3:90:52:61:b7:b5:2a:96:30:86:db:
                    80:a8:84:2d:ed:83:c5:3d:0d:e3:70:8f:c7:ff:e8:
                    91:a0:99:ac:ed:4e:32:22:5a:e8:bf:ce:c7:2b:e7:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F6:63:D4:86:B9:81:60:31:D5:7C:45:3E:72:AB:8C:9E:D2:53:B2
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:d5:1e:a3:14:5a:e9:27:cd:91:17:b9:db:96:46:80:48:
         0a:4c:99:61:78:2c:64:05:49:3e:96:fc:43:73:f3:5a:3e:3f:
         12:4c:b4:e1:d7:e8:3d:a1:a4:81:ec:53:2b:01:32:6a:d7:ab:
         1d:ae:19:84:96:c8:c2:68:f7:17:43:de:b3:84:25:40:1e:c7:
         19:30:31:8b:9a:9c:21:a6:df:8f:28:c9:40:64:73:98:f3:1f:
         b8:d9:e6:2c:fd:a6:ab:6c:8a:3d:40:58:e4:6d:70:0e:4b:98:
         69:fd:66:ee:42:1f:0b:87:d1:dc:b0:57:04:a4:73:66:f2:27:
         db:10:4c:95:ff:5a:be:ab:e4:14:3e:9a:1b:8d:45:11:32:ea:
         ec:83:bf:53:ec:e8:5d:fc:a2:f7:de:63:96:aa:88:38:de:6c:
         4e:1f:80:af:a4:ac:21:b4:fb:65:fb:fd:3b:89:49:61:3e:05:
         44:f4:e9:31:1a:63:c1:bb:3d:cb:aa:3d:7a:49:7a:6a:26:4c:
         36:6c:00:cc:d8:e0:51:3c:5f:41:3e:3b:5c:0c:36:8c:9e:88:
         b4:bc:a1:c2:39:d0:e1:fb:07:33:87:58:e8:98:50:19:6c:a9:
         0a:d8:a0:1f:79:e8:b8:88:b5:b9:6d:b5:fc:ea:45:87:4c:32:
         8c:a5:74:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwMY+KUzvfk4u1RavTa5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh
YThjN2IwHhcNMjUxMjA2MTMwMTI4WhcNMjUxMjA3MTMwMTI4WjAzMTEwLwYDVQQD
Eyg3MGY2NjNkNDg2Yjk4MTYwMzFkNTdjNDUzZTcyYWI4YzllZDI1M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FiZ123VIm0Q9H124K4TzK7anyfe
s5fjeh9syj9Hpiqh1NO9012RjXQY/e8iz2AVZTrSvyoCPEBN9ZJa3sdwLU95x6/M
J/QpihfMSiqZsvFR4NvxT51x4sdBcKavIa6cIEAFklXEShmJGIxwUBy2cKwuLneT
5YL3KJnJquUJGBo4GxxPxKk8BgnSsQ8SyrfSOEPhjlsA114VsbQ9bFqTKaDZxb6/
ZAx0nMFhCX0hKsuDljNL0Gbx14j7G163YPhStiV6JXr2xkGiuolOjwxlRj5/ELzX
w5BSYbe1KpYwhtuAqIQt7YPFPQ3jcI/H/+iRoJms7U4yIlrov87HK+drLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD2Y9SGuYFgMdV8RT5yq4ye0lOyMB8GA1UdIwQY
MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt
MWQ0ZGZiNGY0ODAwLzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw
LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQXVHqMU
WuknzZEXuduWRoBICkyZYXgsZAVJPpb8Q3PzWj4/Eky04dfoPaGkgexTKwEyater
Ha4ZhJbIwmj3F0Pes4QlQB7HGTAxi5qcIabfjyjJQGRzmPMfuNnmLP2mq2yKPUBY
5G1wDkuYaf1m7kIfC4fR3LBXBKRzZvIn2xBMlf9avqvkFD6aG41FETLq7IO/U+zo
Xfyi995jlqqION5sTh+Ar6SsIbT7Zfv9O4lJYT4FRPTpMRpjwbs9y6o9ekl6aiZM
NmwAzNjgUTxfQT47XAw2jJ6ItLyhwjnQ4fsHM4dY6JhQGWypCtigH3nouIi1uW21
/OpFh0wyjKV02A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:59:43 2025 by rpki-client