This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File:                     0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier:          FSDTrR7f1uIuLr6jeXSHRK3jYewPyTEjaf+7Iuc9YPQ=
Subject key identifier:   8D:DE:35:41:6C:6C:CA:25:24:67:99:81:6D:37:F1:A5:F1:15:BD:FD
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer:       /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial:       019AF2AD39889FCCEFE56DCD33026813CD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number:          0DE1
Signing time:             Sat 06 Dec 2025 08:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:29 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:29 +0000
Files and hashes:         1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: 83eM/TzfLeXcpEI/Ah9Sda+t7xswmIjfIVCXQM2Kjlo=)
                          2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
                          3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:39:88:9f:cc:ef:e5:6d:cd:33:02:68:13:cd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
        Validity
            Not Before: Dec  6 08:00:29 2025 GMT
            Not After : Dec  7 08:00:29 2025 GMT
        Subject: CN=8dde35416c6cca25246799816d37f1a5f115bdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:0f:7b:41:7c:02:4e:77:6f:74:cb:d9:ad:
                    fd:fc:e3:30:6a:8f:7c:0b:af:85:ba:3b:e1:ba:5b:
                    33:4d:03:00:4b:06:a9:a0:04:df:8f:7d:4e:b7:15:
                    c5:66:62:e4:15:b0:0b:cc:38:04:00:ee:95:76:4a:
                    d9:7b:e0:a2:72:14:70:fe:83:a2:95:8b:a3:71:ad:
                    f9:31:c3:05:d7:cd:2d:f1:94:2d:d1:75:d0:57:37:
                    99:1a:2c:1d:5d:8d:2b:ea:e4:4e:fc:3e:ca:92:3b:
                    86:be:a3:e2:e0:c3:6c:6d:e0:ca:aa:f3:95:54:f2:
                    c7:b2:d1:19:94:11:de:0d:9c:25:b3:dc:5e:1a:4d:
                    09:13:b3:ca:0a:91:a5:a4:48:e0:5e:05:b6:e5:a7:
                    c9:9f:9f:15:04:2c:6b:88:03:64:a6:12:c3:25:32:
                    40:0b:ea:32:66:b3:9b:2e:ac:f0:1f:11:c4:8d:3f:
                    81:79:e2:9d:c4:61:34:3f:4d:2a:b8:ee:fd:2b:39:
                    5c:24:1e:65:ff:39:a2:d2:31:b2:c3:19:37:9f:0a:
                    0e:a1:41:0b:22:27:da:99:aa:36:02:d9:b2:62:ee:
                    6e:45:1c:cd:4c:29:b7:98:b8:3f:36:e4:c4:4b:59:
                    ac:00:c3:d5:61:9b:ad:e7:8c:a3:de:30:bf:53:75:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:35:41:6C:6C:CA:25:24:67:99:81:6D:37:F1:A5:F1:15:BD:FD
            X509v3 Authority Key Identifier:
                keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:57:eb:e8:3e:05:1a:6b:62:f2:c6:48:c0:24:5c:5b:2d:
         04:39:7c:68:7e:9a:36:47:ab:84:bb:7b:47:02:3e:96:89:82:
         76:f3:d1:78:1c:d8:ac:fc:e5:ae:a0:4d:e9:7e:1e:87:2f:bc:
         6c:83:1e:58:1e:df:5d:6e:e7:49:bc:e8:fe:83:b9:de:7e:23:
         6a:62:8b:d9:63:5f:09:55:46:51:22:9c:f9:11:74:05:c6:ad:
         cd:d0:78:88:ff:e3:18:62:43:43:b2:7c:e2:66:8f:0d:65:03:
         5d:57:02:b1:12:5c:bb:b9:00:b0:59:d6:58:5c:d3:07:b8:19:
         03:f6:32:4e:2f:fa:86:87:59:f2:b1:e0:ae:54:12:a7:3b:a2:
         58:8a:9b:2c:20:6a:8c:a4:45:42:a4:44:62:ff:a0:af:86:d0:
         4b:4e:67:92:2a:c2:ac:07:29:b4:c2:c2:5d:3b:53:ac:f8:3d:
         83:0e:3d:10:84:42:94:62:2b:05:65:c3:5e:c0:b7:68:d5:98:
         2f:3b:5a:6f:44:39:d3:a0:9d:cf:53:e0:f0:7d:bb:c6:0e:85:
         5a:f2:f3:0a:22:c8:be:7b:bd:7b:da:c5:b0:6a:3b:d7:25:ef:
         e4:29:c0:90:d7:b5:12:21:11:e6:b3:58:39:0b:22:50:27:41:
         79:28:47:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrTmIn8zv5W3NMwJoE805MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy
MmU4OGYwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD
Eyg4ZGRlMzU0MTZjNmNjYTI1MjQ2Nzk5ODE2ZDM3ZjFhNWYxMTViZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucwPe0F8Ak53b3TL2a39/OMwao98
C6+FujvhulszTQMASwapoATfj31OtxXFZmLkFbALzDgEAO6VdkrZe+CichRw/oOi
lYujca35McMF180t8ZQt0XXQVzeZGiwdXY0r6uRO/D7KkjuGvqPi4MNsbeDKqvOV
VPLHstEZlBHeDZwls9xeGk0JE7PKCpGlpEjgXgW25afJn58VBCxriANkphLDJTJA
C+oyZrObLqzwHxHEjT+BeeKdxGE0P00quO79KzlcJB5l/zmi0jGywxk3nwoOoUEL
Iifamao2AtmyYu5uRRzNTCm3mLg/NuTES1msAMPVYZut54yj3jC/U3X8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3eNUFsbMolJGeZgW038aXxFb39MB8GA1UdIwQY
MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt
ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz
LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS1X6+g+
BRprYvLGSMAkXFstBDl8aH6aNkerhLt7RwI+lomCdvPReBzYrPzlrqBN6X4ehy+8
bIMeWB7fXW7nSbzo/oO53n4jamKL2WNfCVVGUSKc+RF0BcatzdB4iP/jGGJDQ7J8
4maPDWUDXVcCsRJcu7kAsFnWWFzTB7gZA/YyTi/6hodZ8rHgrlQSpzuiWIqbLCBq
jKRFQqREYv+gr4bQS05nkirCrAcptMLCXTtTrPg9gw49EIRClGIrBWXDXsC3aNWY
Lztab0Q506Cdz1Pg8H27xg6FWvLzCiLIvnu9e9rFsGo71yXv5CnAkNe1EiER5rNY
OQsiUCdBeShHcA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:39 2025 by rpki-client