This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File:                     Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier:          n38Twvgp4VRP7e+o/8C5s4MFlGy/g8Xi+upeMuyPmaI=
Subject key identifier:   1F:6B:ED:DA:B6:79:2E:51:2B:87:6D:D0:E6:CA:CE:15:AC:59:D6:9D
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer:       /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial:       019AF38A1F4DA46436619C9F4FA667AE3B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number:          0CE7
Signing time:             Sat 06 Dec 2025 12:01:46 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:46 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:46 +0000
Files and hashes:         1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
                          2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: tUZbCImEssZC3Jotb262UUc6KlTTjRXp+OHpn5NEsKw=)
                          3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:1f:4d:a4:64:36:61:9c:9f:4f:a6:67:ae:3b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
        Validity
            Not Before: Dec  6 12:01:46 2025 GMT
            Not After : Dec  7 12:01:46 2025 GMT
        Subject: CN=1f6beddab6792e512b876dd0e6cace15ac59d69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:2b:c1:dc:78:ac:76:a3:7a:03:e4:6b:47:
                    0a:01:43:e6:54:d3:f1:8d:fc:61:01:6f:77:2a:bd:
                    04:dc:ea:a3:f5:66:58:73:c0:12:84:c0:46:f3:93:
                    f8:0c:2e:3e:c1:a5:ba:97:4d:58:56:e9:dc:9d:86:
                    e7:93:46:cd:db:72:6a:71:fc:4d:15:8a:74:19:41:
                    89:f4:85:22:c5:f7:69:70:92:d7:94:41:c6:8a:39:
                    c8:af:d9:ad:b7:1e:ce:e2:20:6e:d8:07:82:5b:a2:
                    86:83:0d:c5:a4:85:71:b3:82:b3:77:66:30:2a:a2:
                    e3:4f:df:c6:9d:e6:88:0a:78:ef:60:b4:d5:2a:5e:
                    ed:8f:4c:18:6d:70:fb:f2:67:8d:76:05:60:b5:e0:
                    e2:b6:8c:f8:d6:0b:52:b1:d7:4f:6f:0d:4f:7c:86:
                    3d:6f:26:90:9e:88:7d:09:0d:7e:bc:04:a2:26:8e:
                    f3:a7:86:24:b8:0d:8e:59:ba:cb:1d:86:b0:44:fd:
                    62:1a:ba:ac:6e:bc:a2:64:0a:6f:31:a6:d4:ea:b4:
                    57:8b:16:44:9b:49:d8:d0:46:d8:02:4d:29:a1:49:
                    b0:c2:da:94:76:90:c4:47:76:db:78:0c:b9:4e:0b:
                    c5:e7:33:d9:64:00:36:b2:55:7a:05:91:36:85:39:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:ED:DA:B6:79:2E:51:2B:87:6D:D0:E6:CA:CE:15:AC:59:D6:9D
            X509v3 Authority Key Identifier:
                keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:18:b0:7d:6f:06:3c:b3:bc:6a:14:b2:31:17:0b:fb:bd:
         82:be:c0:8c:0a:e9:4c:8d:99:a3:a7:a9:9d:dd:f9:fe:17:43:
         5c:32:e7:95:f8:ff:f8:e6:59:a6:86:da:31:6e:a6:54:6c:14:
         d7:0b:80:7f:8d:6d:2f:ac:53:ff:6e:9e:0b:e2:0f:6b:b2:3a:
         4c:9d:de:ad:d8:7c:8d:0d:9d:a8:d6:ec:c3:a6:83:58:d1:f6:
         2e:01:b7:89:9e:20:e0:57:52:5a:70:75:20:46:94:92:3d:3e:
         5a:37:35:54:fd:7b:9a:1c:59:1d:3e:69:05:a8:f3:ae:00:2a:
         94:a2:cc:db:cb:26:88:e4:43:98:d2:69:9c:64:72:d4:ec:7b:
         de:6c:4a:9c:06:7e:e6:9c:44:35:79:a4:5d:54:bb:20:c8:a0:
         e3:77:68:61:dd:30:5b:ef:59:07:c9:14:44:68:90:09:9b:50:
         ea:a9:89:de:f0:8b:8e:e0:24:fd:66:3a:46:89:98:27:c2:b2:
         42:c0:4d:bb:1c:2e:2f:1b:40:c1:5b:79:a6:82:15:96:b1:17:
         19:08:61:e0:ef:f5:21:bf:94:69:ae:da:7e:a1:7c:8b:de:c6:
         4d:6f:7e:11:e5:c6:ae:09:2f:2e:bc:f3:c0:54:2f:b5:d6:d5:
         ed:02:a4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzih9NpGQ2YZyfT6ZnrjsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjUxMjA2MTIwMTQ2WhcNMjUxMjA3MTIwMTQ2WjAzMTEwLwYDVQQD
EygxZjZiZWRkYWI2NzkyZTUxMmI4NzZkZDBlNmNhY2UxNWFjNTlkNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJYrwdx4rHajegPka0cKAUPmVNPx
jfxhAW93Kr0E3Oqj9WZYc8AShMBG85P4DC4+waW6l01YVuncnYbnk0bN23JqcfxN
FYp0GUGJ9IUixfdpcJLXlEHGijnIr9mttx7O4iBu2AeCW6KGgw3FpIVxs4Kzd2Yw
KqLjT9/GneaICnjvYLTVKl7tj0wYbXD78meNdgVgteDitoz41gtSsddPbw1PfIY9
byaQnoh9CQ1+vASiJo7zp4YkuA2OWbrLHYawRP1iGrqsbryiZApvMabU6rRXixZE
m0nY0EbYAk0poUmwwtqUdpDER3bbeAy5TgvF5zPZZAA2slV6BZE2hTmXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9r7dq2eS5RK4dt0ObKzhWsWdadMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy8YsH1v
BjyzvGoUsjEXC/u9gr7AjArpTI2Zo6epnd35/hdDXDLnlfj/+OZZpobaMW6mVGwU
1wuAf41tL6xT/26eC+IPa7I6TJ3erdh8jQ2dqNbsw6aDWNH2LgG3iZ4g4FdSWnB1
IEaUkj0+Wjc1VP17mhxZHT5pBajzrgAqlKLM28smiORDmNJpnGRy1Ox73mxKnAZ+
5pxENXmkXVS7IMig43doYd0wW+9ZB8kURGiQCZtQ6qmJ3vCLjuAk/WY6RomYJ8Ky
QsBNuxwuLxtAwVt5poIVlrEXGQhh4O/1Ib+Uaa7afqF8i97GTW9+EeXGrgkvLrzz
wFQvtdbV7QKk9g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:28:15 2025 by rpki-client