This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
File:                     ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft (raw, json)
Hash identifier:          84nITiVSxW8+/2lcMnXYy+fasPWK2VvvAU3kJ53GnDM=
Subject key identifier:   CC:1B:62:09:74:A3:1F:5D:15:33:90:70:86:43:1E:68:70:91:50:40
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Certificate issuer:       /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial:       019AF1644F6C43B421CE526C1340D61D5F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
Manifest number:          0E07
Signing time:             Sat 06 Dec 2025 02:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:14 +0000
Files and hashes:         1: 52LURRKHhsuXGtaB1ANEy4yK2aU.roa (hash: 6pIRlcrWZsK7b5ZhODLvWeekkcvv6vlup79R4S6fe4w=)
                          2: bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa (hash: YtTxtq7GNbE/i9Tq037SwqJYKg04qn/GGhCrb6d2v/w=)
                          3: ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl (hash: BWG9iRHLX0VfQIsUaqYBT1njGgr6CZ9RBXdo5Mu7RB4=)
                          4: wkXfodQiMlzIrY-XwijDv3ZScmc.roa (hash: QibJgJXwTU1FbLJ1XY5UdzigDZl+rgmIxHJ+4Yba4lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:4f:6c:43:b4:21:ce:52:6c:13:40:d6:1d:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
        Validity
            Not Before: Dec  6 02:01:14 2025 GMT
            Not After : Dec  7 02:01:14 2025 GMT
        Subject: CN=cc1b620974a31f5d1533907086431e6870915040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:85:b6:a2:0c:94:bb:08:2f:9f:a5:ab:16:
                    3d:8d:71:cf:f1:19:f7:19:69:b5:84:4f:86:fe:7a:
                    53:7a:ad:93:b8:bb:c0:94:70:15:d9:14:8b:75:81:
                    0d:b8:d6:55:81:63:79:1b:14:60:56:39:7a:5f:81:
                    7d:2b:34:bf:c0:8c:28:ab:3c:40:c9:ae:dd:81:2b:
                    29:c0:f8:4c:86:29:54:68:49:80:3e:8f:16:43:7a:
                    0b:85:07:e6:a1:34:1e:09:9f:41:a9:67:db:b1:cf:
                    69:de:72:53:b8:e2:50:39:e1:d9:2d:75:20:9a:ad:
                    48:69:aa:09:eb:7f:09:1a:aa:1f:ab:68:39:a6:e7:
                    22:a0:ec:23:19:51:0c:c4:83:fe:19:91:5c:3b:60:
                    96:ef:99:47:d8:38:8d:54:3a:fd:a6:a3:b0:70:5d:
                    94:6c:1a:0a:0e:45:42:29:d3:02:1f:5b:44:2a:b3:
                    58:e8:83:2a:79:52:d9:87:9c:a6:ec:79:7d:ad:12:
                    eb:16:b3:68:6d:c8:14:b8:a0:63:91:9f:33:72:98:
                    e7:28:e1:a1:d4:9c:78:5c:b4:fd:42:2e:2c:51:3d:
                    ac:fe:63:9c:37:54:a4:fc:22:bd:a6:87:0d:6f:ef:
                    6b:42:0a:09:90:7d:bc:9f:4f:22:0e:db:e5:11:d2:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:62:09:74:A3:1F:5D:15:33:90:70:86:43:1E:68:70:91:50:40
            X509v3 Authority Key Identifier:
                keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:40:05:82:b8:48:f9:c1:58:43:53:51:c2:47:6f:d7:43:
         4e:4b:f1:40:d0:5d:09:31:17:59:8d:69:3d:28:29:53:ee:fb:
         88:53:9c:68:da:41:e6:a0:fc:18:e7:4a:67:d7:85:84:49:73:
         b5:47:52:79:eb:a4:17:02:63:32:a5:47:b2:c9:53:14:cc:1d:
         ae:9c:39:82:bf:01:4b:ce:bc:30:3b:89:38:44:41:95:f5:fd:
         e2:e5:28:25:de:0c:95:aa:1b:12:94:03:24:8b:ea:95:1b:23:
         83:10:3a:d8:46:fc:cd:2e:86:f0:40:b4:7c:5e:37:30:a9:46:
         b5:b0:67:85:ed:ab:52:74:40:7d:39:8d:26:c6:c7:74:e4:90:
         8c:c9:d5:c6:98:c5:e2:10:4d:b2:68:4d:3a:6e:20:d1:4a:7f:
         f9:57:be:2e:dd:ab:48:b4:0c:c2:cb:bc:4b:57:c3:71:72:a3:
         41:e0:61:9b:18:15:11:6f:65:67:00:96:0f:7a:e2:65:21:3e:
         0a:fb:65:f6:ee:9b:a2:42:14:fe:b0:9b:4d:9b:d8:db:97:2c:
         60:89:53:5d:41:9f:18:0e:25:96:e5:d8:6f:cf:b6:4c:bd:35:
         06:d4:43:13:f2:7b:b5:b1:45:f3:d8:8b:47:2d:cd:4c:70:33:
         20:9b:77:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZE9sQ7QhzlJsE0DWHV9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2
YjNjN2IwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD
EyhjYzFiNjIwOTc0YTMxZjVkMTUzMzkwNzA4NjQzMWU2ODcwOTE1MDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4GFtqIMlLsIL5+lqxY9jXHP8Rn3
GWm1hE+G/npTeq2TuLvAlHAV2RSLdYENuNZVgWN5GxRgVjl6X4F9KzS/wIwoqzxA
ya7dgSspwPhMhilUaEmAPo8WQ3oLhQfmoTQeCZ9BqWfbsc9p3nJTuOJQOeHZLXUg
mq1IaaoJ638JGqofq2g5pucioOwjGVEMxIP+GZFcO2CW75lH2DiNVDr9pqOwcF2U
bBoKDkVCKdMCH1tEKrNY6IMqeVLZh5ym7Hl9rRLrFrNobcgUuKBjkZ8zcpjnKOGh
1Jx4XLT9Qi4sUT2s/mOcN1Sk/CK9pocNb+9rQgoJkH28n08iDtvlEdLRkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwbYgl0ox9dFTOQcIZDHmhwkVBAMB8GA1UdIwQY
MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt
ZDNhNThiNWNiMGMwLzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw
LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsohABYK4
SPnBWENTUcJHb9dDTkvxQNBdCTEXWY1pPSgpU+77iFOcaNpB5qD8GOdKZ9eFhElz
tUdSeeukFwJjMqVHsslTFMwdrpw5gr8BS868MDuJOERBlfX94uUoJd4MlaobEpQD
JIvqlRsjgxA62Eb8zS6G8EC0fF43MKlGtbBnhe2rUnRAfTmNJsbHdOSQjMnVxpjF
4hBNsmhNOm4g0Up/+Ve+Lt2rSLQMwsu8S1fDcXKjQeBhmxgVEW9lZwCWD3riZSE+
Cvtl9u6bokIU/rCbTZvY25csYIlTXUGfGA4lluXYb8+2TL01BtRDE/J7tbFF89iL
Ry3NTHAzIJt3UA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:33 2025 by rpki-client