This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File:                     b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier:          a5Dzo1M6CgeiXSkpVgPeekeFkyGf4Z1t8Z2RIF7bNes=
Subject key identifier:   60:19:AC:22:81:E7:51:93:FA:E0:18:2E:D5:A6:F0:C9:69:78:A4:B4
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer:       /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial:       019AF19AE88CA203F0C4E5971E833F6C1139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number:          0112
Signing time:             Sat 06 Dec 2025 03:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:52 +0000
Files and hashes:         1: 4F8H7nNNelFubPxa-Se_4jhtbVs.roa (hash: 0pMog6BIURq0CwttFDOe27twy9MaL7OZIJcruUdS1Oc=)
                          2: XU5of-sO5C2kcDo6tI15PQJLpSE.roa (hash: yMviCrZaaiQvFu0zaMoGhkE3HEZqEZ5DgntX+OnEfio=)
                          3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: zfTodJawQA/2VUVkpppkBmUpww2nH0GAyngYtsu9aSI=)
                          4: to9OwOfY2gYabsE2e_ZELvsI_rU.roa (hash: s0SkGoiQxrVm7KkMC6Ajpkq1MgO1vuYl0n5PRb27DnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:e8:8c:a2:03:f0:c4:e5:97:1e:83:3f:6c:11:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
        Validity
            Not Before: Dec  6 03:00:52 2025 GMT
            Not After : Dec  7 03:00:52 2025 GMT
        Subject: CN=6019ac2281e75193fae0182ed5a6f0c96978a4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:f2:4f:a6:e0:99:60:a2:65:c1:11:44:78:
                    0e:a2:d4:55:f9:fd:c4:52:99:b7:13:00:ab:94:70:
                    2b:aa:d5:ef:55:aa:20:2d:15:ab:9c:c6:46:93:30:
                    e9:39:7b:11:1b:47:9d:7b:c3:72:91:6a:11:6c:04:
                    d6:7a:8a:6f:c8:bd:a9:e7:c9:5e:c3:bc:3e:c5:71:
                    92:b5:4f:90:9b:b0:8f:60:bb:93:13:73:82:1c:f4:
                    bb:db:a0:a6:58:07:97:5e:fa:8d:45:73:b0:c6:1a:
                    47:0a:7b:a8:cd:5c:1e:46:cd:f6:cd:34:ce:66:73:
                    ac:e9:13:b3:aa:a1:57:d1:dc:aa:d9:ab:99:b7:ec:
                    a6:85:f0:f2:a3:60:c7:24:32:22:4f:74:e9:c8:6a:
                    f4:b6:16:52:4c:8c:19:c1:2f:0a:9c:1f:6e:ef:89:
                    2f:e6:c6:fb:e9:cd:42:fb:70:39:5c:4f:29:62:cc:
                    7a:65:e3:49:5d:a0:46:ec:6d:90:e5:58:41:98:8a:
                    77:ad:ee:25:0a:a1:a4:72:78:9e:e6:68:35:58:7a:
                    33:8f:f3:cd:b5:3b:a8:cc:9a:fa:b6:64:e4:ac:63:
                    fc:68:93:41:0d:8c:9a:f1:07:24:54:c3:8f:48:54:
                    a6:29:74:2b:80:b5:a8:d7:ab:9b:01:03:3d:cf:0e:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:19:AC:22:81:E7:51:93:FA:E0:18:2E:D5:A6:F0:C9:69:78:A4:B4
            X509v3 Authority Key Identifier:
                keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:5f:93:1e:33:38:ba:fe:51:3d:dd:b0:5f:58:6b:79:96:
         52:38:4c:26:96:6d:53:58:c5:c5:fb:7a:1e:71:d8:b5:25:fb:
         d2:4d:0b:ce:ce:d0:5e:79:9a:18:32:75:a5:a6:9c:7f:5d:1e:
         9f:22:8d:20:84:b3:81:3c:ed:23:b1:82:8a:be:75:aa:f7:e9:
         4e:66:94:e9:47:12:1b:fb:93:91:d3:72:a6:fe:0f:29:46:fb:
         fc:e7:b7:9d:ec:7f:39:82:70:29:5c:eb:45:01:d4:f6:df:f8:
         71:6a:87:ac:e1:ec:0c:70:d6:97:e6:6f:5f:b4:de:4f:ee:ea:
         92:41:b0:4b:54:3f:65:b5:0e:63:4a:66:b0:3a:9b:78:70:45:
         77:1c:4c:9f:20:f3:17:f6:3d:a1:f8:3c:51:34:50:b5:27:77:
         ef:2c:3a:86:ee:1f:46:e4:f8:1c:cf:df:5f:78:5a:40:9e:1c:
         60:7c:e5:6d:b9:77:b8:d7:58:bc:7f:9f:dd:54:a6:95:23:b0:
         1a:ae:ae:01:b4:74:af:60:b9:26:95:d4:10:71:c3:70:d2:f0:
         87:3f:39:f1:e0:db:0e:33:3f:31:7f:75:74:45:7b:c5:93:f2:
         3f:19:90:1d:51:29:bf:49:35:e5:f8:22:75:e3:c0:d6:d1:4c:
         09:5d:a7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmuiMogPwxOWXHoM/bBE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl
ZDQyMTgwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD
Eyg2MDE5YWMyMjgxZTc1MTkzZmFlMDE4MmVkNWE2ZjBjOTY5NzhhNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM7yT6bgmWCiZcERRHgOotRV+f3E
Upm3EwCrlHArqtXvVaogLRWrnMZGkzDpOXsRG0ede8NykWoRbATWeopvyL2p58le
w7w+xXGStU+Qm7CPYLuTE3OCHPS726CmWAeXXvqNRXOwxhpHCnuozVweRs32zTTO
ZnOs6ROzqqFX0dyq2auZt+ymhfDyo2DHJDIiT3TpyGr0thZSTIwZwS8KnB9u74kv
5sb76c1C+3A5XE8pYsx6ZeNJXaBG7G2Q5VhBmIp3re4lCqGkcnie5mg1WHozj/PN
tTuozJr6tmTkrGP8aJNBDYya8QckVMOPSFSmKXQrgLWo16ubAQM9zw5dSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAZrCKB51GT+uAYLtWm8MlpeKS0MB8GA1UdIwQY
MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt
ZDI0YzM1ZGZhYzk0LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0
LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHpfkx4z
OLr+UT3dsF9Ya3mWUjhMJpZtU1jFxft6HnHYtSX70k0Lzs7QXnmaGDJ1paacf10e
nyKNIISzgTztI7GCir51qvfpTmaU6UcSG/uTkdNypv4PKUb7/Oe3nex/OYJwKVzr
RQHU9t/4cWqHrOHsDHDWl+ZvX7TeT+7qkkGwS1Q/ZbUOY0pmsDqbeHBFdxxMnyDz
F/Y9ofg8UTRQtSd37yw6hu4fRuT4HM/fX3haQJ4cYHzlbbl3uNdYvH+f3VSmlSOw
Gq6uAbR0r2C5JpXUEHHDcNLwhz858eDbDjM/MX91dEV7xZPyPxmQHVEpv0k15fgi
dePA1tFMCV2n4A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:47 2025 by rpki-client