This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          /FlL83gSlAZGluYdfYr50okDvAaBJY9zAOh10OaqemE=
Subject key identifier:   F0:A1:7F:FF:4F:10:C8:4E:7D:84:B9:3E:79:13:22:7E:BF:59:E4:36
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019AF3C020C67A8403E42A667939AE5DC2D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 13:00:45 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:45 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:45 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: 3AB5F3vCBjMYeI+13JVuyOmIoINodj7zJBHuIX0jyMw=)
                          2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
                          3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:20:c6:7a:84:03:e4:2a:66:79:39:ae:5d:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Dec  6 13:00:45 2025 GMT
            Not After : Dec  7 13:00:45 2025 GMT
        Subject: CN=f0a17fff4f10c84e7d84b93e7913227ebf59e436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:5f:90:76:c4:d5:40:46:d7:92:b0:13:4f:
                    db:30:aa:24:ed:7b:21:f1:f2:21:23:62:c7:57:14:
                    cc:f9:dd:60:41:f6:0b:16:05:b8:33:bb:3f:c3:fb:
                    c1:c8:4b:0c:df:19:65:db:39:ea:71:c9:2d:90:6f:
                    cd:88:cd:3c:a8:4b:78:67:ef:12:22:d4:a9:96:7f:
                    2f:b5:85:53:38:f2:da:85:5e:79:78:e4:13:22:ce:
                    b6:57:8b:92:26:f0:71:1d:79:f0:3d:ce:c2:1f:ef:
                    33:cc:06:80:c8:ee:4d:5d:18:0d:76:86:0f:fe:f8:
                    96:cf:c5:02:03:44:a7:c7:45:b3:c7:32:42:26:94:
                    b1:6c:74:c2:af:30:d2:c3:5d:8f:e9:15:ba:bb:9d:
                    f5:19:73:ae:02:aa:bc:b7:a5:69:cf:83:a0:a9:1d:
                    85:f1:b2:5c:91:51:d8:0b:2b:f1:2b:a6:58:a0:ae:
                    c8:58:fd:a7:a9:f3:13:22:50:95:77:8b:d0:45:55:
                    84:c0:81:90:e1:89:5d:2a:42:da:21:a6:3d:41:36:
                    22:5b:69:de:5e:aa:b7:6e:e0:7f:dd:b4:70:64:89:
                    f5:99:33:21:3b:07:1e:92:a8:d2:0e:b5:48:25:0a:
                    69:e4:6b:53:03:eb:f5:a0:c8:9d:9e:1f:93:cb:54:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A1:7F:FF:4F:10:C8:4E:7D:84:B9:3E:79:13:22:7E:BF:59:E4:36
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:c1:75:f5:23:89:87:b9:83:cd:f3:18:96:84:47:36:90:
         42:90:2e:a7:81:d5:b1:d0:ca:48:aa:e0:8e:1f:8b:0a:2b:b6:
         cc:f8:1e:37:16:af:10:9e:79:f8:c9:67:ec:d6:3a:80:e8:c0:
         33:c1:ab:f2:18:3b:34:a1:82:50:5e:28:49:0e:4a:e6:b1:08:
         4b:c8:98:ce:30:ab:66:7e:34:25:ac:5a:45:52:03:ef:8e:66:
         e3:ab:a4:9c:20:19:4f:92:06:46:70:ca:94:02:2e:ca:b4:eb:
         e4:9c:7a:ce:92:9e:cf:78:34:37:4b:a0:7a:2a:e0:af:28:45:
         38:a2:a3:39:cd:99:c7:ac:4c:e2:70:de:e5:8b:79:c0:bc:33:
         2e:02:f9:7a:50:ea:de:36:79:ef:f5:8c:5d:92:d3:dc:2d:f2:
         3e:87:02:12:c1:d7:c7:a1:e6:72:f8:57:ad:7f:0a:d2:fd:c6:
         5f:01:24:07:31:bb:5e:0f:78:34:8c:36:03:55:15:ab:6d:38:
         44:51:cc:c0:7a:e8:fd:0a:a7:2c:a9:b6:c4:87:97:54:0d:36:
         cd:4f:ad:9d:51:96:69:78:25:ce:0a:ad:0f:d8:0c:fe:d5:07:
         e9:c1:bd:a4:6a:13:e9:25:96:23:8a:74:20:53:fb:c4:75:48:
         73:3e:8f:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwCDGeoQD5CpmeTmuXcLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD
EyhmMGExN2ZmZjRmMTBjODRlN2Q4NGI5M2U3OTEzMjI3ZWJmNTllNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fFfkHbE1UBG15KwE0/bMKok7Xsh
8fIhI2LHVxTM+d1gQfYLFgW4M7s/w/vByEsM3xll2znqccktkG/NiM08qEt4Z+8S
ItSpln8vtYVTOPLahV55eOQTIs62V4uSJvBxHXnwPc7CH+8zzAaAyO5NXRgNdoYP
/viWz8UCA0Snx0WzxzJCJpSxbHTCrzDSw12P6RW6u531GXOuAqq8t6Vpz4OgqR2F
8bJckVHYCyvxK6ZYoK7IWP2nqfMTIlCVd4vQRVWEwIGQ4YldKkLaIaY9QTYiW2ne
Xqq3buB/3bRwZIn1mTMhOwcekqjSDrVIJQpp5GtTA+v1oMidnh+Ty1RMmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPChf/9PEMhOfYS5PnkTIn6/WeQ2MB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6bBdfUj
iYe5g83zGJaERzaQQpAup4HVsdDKSKrgjh+LCiu2zPgeNxavEJ55+Mln7NY6gOjA
M8Gr8hg7NKGCUF4oSQ5K5rEIS8iYzjCrZn40JaxaRVID745m46uknCAZT5IGRnDK
lAIuyrTr5Jx6zpKez3g0N0ugeirgryhFOKKjOc2Zx6xM4nDe5Yt5wLwzLgL5elDq
3jZ57/WMXZLT3C3yPocCEsHXx6HmcvhXrX8K0v3GXwEkBzG7Xg94NIw2A1UVq204
RFHMwHro/QqnLKm2xIeXVA02zU+tnVGWaXglzgqtD9gM/tUH6cG9pGoT6SWWI4p0
IFP7xHVIcz6PzQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:12 2025 by rpki-client