This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File:                     GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier:          zdFKC43akXsonaVUlSoo+o4bTboexfVnza99aOPP3QI=
Subject key identifier:   F2:C8:99:AE:5B:8D:9C:2B:AE:FF:42:B2:E0:B6:18:D8:23:96:1B:70
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer:       /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial:       019AF3C0BB017618B51CBE1E71BBAACEA5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number:          14AD
Signing time:             Sat 06 Dec 2025 13:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:25 +0000
Files and hashes:         1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
                          2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 2B0e2vhfPXflElfxCu9z/PgbSqnnH2E3qAFKPxFz4/c=)
                          3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:bb:01:76:18:b5:1c:be:1e:71:bb:aa:ce:a5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
        Validity
            Not Before: Dec  6 13:01:25 2025 GMT
            Not After : Dec  7 13:01:25 2025 GMT
        Subject: CN=f2c899ae5b8d9c2baeff42b2e0b618d823961b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:87:06:fe:7c:f3:c6:0c:79:f2:92:b1:ec:
                    cb:1c:90:ff:c7:c5:bf:1c:de:35:23:e9:fd:ab:2b:
                    99:cb:37:73:e3:ed:2e:a2:f8:3b:68:2e:c4:1d:b7:
                    fb:f5:41:48:47:3d:a8:64:1e:03:ac:a3:3b:42:00:
                    73:8d:13:30:22:4a:5c:99:42:1d:f3:f2:51:eb:62:
                    08:f0:a1:46:d1:14:dd:88:a9:7c:2b:a7:69:1c:77:
                    23:ac:8e:5e:8c:17:02:58:62:71:0e:12:22:f8:c1:
                    1f:5a:2f:97:9c:20:a8:59:90:de:e0:52:48:df:e4:
                    a3:3b:5f:7e:a2:6b:48:7d:71:99:c6:90:fc:da:68:
                    f6:82:e7:7c:5d:62:d0:16:df:56:92:31:6c:75:eb:
                    b7:34:0b:5a:21:49:46:a5:af:6d:71:49:74:fa:17:
                    04:02:90:b1:d3:e1:ef:63:4d:14:b8:74:fc:4e:fc:
                    30:a8:2f:d5:1e:28:35:95:ce:cc:2d:59:cb:25:ba:
                    cd:b1:e3:a2:fd:8a:4e:bc:73:5a:fc:ba:74:a2:9b:
                    24:2e:00:4f:25:71:6f:f5:38:54:2b:58:92:ff:44:
                    3d:40:69:63:46:57:3c:98:28:23:17:3a:5b:8e:2a:
                    14:b5:62:64:13:ef:62:77:22:ed:90:a3:0f:61:6d:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:99:AE:5B:8D:9C:2B:AE:FF:42:B2:E0:B6:18:D8:23:96:1B:70
            X509v3 Authority Key Identifier:
                keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:09:e4:b0:fd:61:60:08:99:09:56:ca:c0:d1:2d:31:a4:
         04:ea:36:29:8a:17:51:9d:58:b0:6d:49:14:5f:e6:8f:38:51:
         28:aa:00:ca:f7:09:79:ef:df:a0:61:06:17:6a:03:a1:69:34:
         35:05:2b:0a:82:8c:28:99:c4:e4:a2:db:98:b5:83:27:00:9e:
         13:e5:23:7f:0e:ef:2c:37:79:34:5f:a3:4c:38:f6:f3:cb:0e:
         56:1b:5f:da:73:2e:e7:c6:6c:c4:25:39:96:30:83:bd:9e:a5:
         6c:22:31:34:8d:13:38:df:bb:0a:b7:bd:03:9a:52:d5:23:ba:
         e8:69:9b:7a:ad:24:5e:fa:15:18:4c:ce:ed:56:7e:e9:ad:fd:
         54:21:e7:8a:5a:3b:fc:c8:e6:4c:86:4e:51:1e:5c:40:ce:5f:
         fa:eb:42:b7:c4:a5:50:b4:ae:39:98:0a:7c:38:05:e6:eb:be:
         59:98:9e:d2:ab:55:41:4e:36:0e:e3:be:20:b8:05:31:10:00:
         b4:de:ea:70:34:2b:1a:1f:ae:22:2e:da:79:1a:11:98:5d:de:
         bb:ff:d5:07:47:7c:c4:3e:4e:b5:43:6b:5d:76:a0:8b:ae:0f:
         e1:59:ad:85:d1:12:a4:47:ba:35:9e:4a:ab:eb:7e:6c:ac:4f:
         90:23:10:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwLsBdhi1HL4ecbuqzqXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0
YzM1YjQwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD
EyhmMmM4OTlhZTViOGQ5YzJiYWVmZjQyYjJlMGI2MThkODIzOTYxYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6eHBv5888YMefKSsezLHJD/x8W/
HN41I+n9qyuZyzdz4+0uovg7aC7EHbf79UFIRz2oZB4DrKM7QgBzjRMwIkpcmUId
8/JR62II8KFG0RTdiKl8K6dpHHcjrI5ejBcCWGJxDhIi+MEfWi+XnCCoWZDe4FJI
3+SjO19+omtIfXGZxpD82mj2gud8XWLQFt9WkjFsdeu3NAtaIUlGpa9tcUl0+hcE
ApCx0+HvY00UuHT8TvwwqC/VHig1lc7MLVnLJbrNseOi/YpOvHNa/Lp0opskLgBP
JXFv9ThUK1iS/0Q9QGljRlc8mCgjFzpbjioUtWJkE+9idyLtkKMPYW2YaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLIma5bjZwrrv9CsuC2GNgjlhtwMB8GA1UdIwQY
MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt
ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm
LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDoJ5LD9
YWAImQlWysDRLTGkBOo2KYoXUZ1YsG1JFF/mjzhRKKoAyvcJee/foGEGF2oDoWk0
NQUrCoKMKJnE5KLbmLWDJwCeE+Ujfw7vLDd5NF+jTDj288sOVhtf2nMu58ZsxCU5
ljCDvZ6lbCIxNI0TON+7Cre9A5pS1SO66Gmbeq0kXvoVGEzO7VZ+6a39VCHnilo7
/MjmTIZOUR5cQM5f+utCt8SlULSuOZgKfDgF5uu+WZie0qtVQU42DuO+ILgFMRAA
tN7qcDQrGh+uIi7aeRoRmF3eu//VB0d8xD5OtUNrXXagi64P4VmthdESpEe6NZ5K
q+t+bKxPkCMQ7Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:04:29 2025 by rpki-client