This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File:                     o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier:          4cwrPV7Lhej5CQFAqR74JS9l0VaF5e0oQ1jKFg9KDPw=
Subject key identifier:   4F:F9:1C:88:55:34:70:19:AB:FD:FF:80:6E:34:E8:27:96:39:F1:0A
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer:       /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial:       019AF19B8BE20E0CAD61940EBD2A64EAD20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:01:34 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:34 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:34 +0000
Files and hashes:         1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
                          2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
                          3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: 0pwfRrVxgStVTPy+kd7EHqAuJEE3SxjBnxzQxvGybvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:8b:e2:0e:0c:ad:61:94:0e:bd:2a:64:ea:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
        Validity
            Not Before: Dec  6 03:01:34 2025 GMT
            Not After : Dec  7 03:01:34 2025 GMT
        Subject: CN=4ff91c8855347019abfdff806e34e8279639f10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:dd:a4:fb:88:95:f2:0d:fd:bf:b4:d7:57:
                    22:fa:99:50:73:79:da:53:69:71:0a:76:ae:42:dc:
                    b5:93:92:85:4f:8d:08:4f:f0:7f:f8:1b:e5:5a:53:
                    8a:6f:33:24:ee:0d:e0:31:a0:b5:4f:e2:fe:b3:cb:
                    7b:69:f9:27:be:dd:e7:ca:9a:87:95:b7:c4:1a:8c:
                    dc:f9:9a:a6:9f:30:62:59:ac:20:cc:13:98:b7:45:
                    84:2b:2d:10:e6:9a:c5:c2:0a:2c:66:33:2a:77:3b:
                    c3:c6:9e:3e:dc:93:ae:fc:15:e5:bb:83:9d:1f:23:
                    e4:9e:48:1d:3e:4e:c0:a1:79:13:17:85:ef:fe:50:
                    f5:4b:1a:e2:9f:c5:e3:be:6b:3e:db:c2:cb:68:c4:
                    e7:9d:b2:14:d4:54:8d:f5:0a:e3:19:8c:c8:6b:f5:
                    d6:14:07:ea:8a:a9:06:4b:35:70:57:64:f8:b7:cf:
                    34:ff:bd:aa:fe:8a:a3:c7:e2:b6:a1:94:c6:89:c8:
                    41:0a:7f:e8:e0:57:76:a9:36:24:c8:85:44:7c:c5:
                    24:5f:cf:1f:d4:af:db:40:92:6d:9b:b0:9e:04:a3:
                    f8:d9:ad:05:36:07:40:65:10:30:5d:e8:86:ac:13:
                    7a:71:18:00:b8:6a:51:80:24:4f:00:42:95:af:de:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F9:1C:88:55:34:70:19:AB:FD:FF:80:6E:34:E8:27:96:39:F1:0A
            X509v3 Authority Key Identifier:
                keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:57:5b:9e:39:05:4e:8d:cf:aa:51:bd:36:d2:b4:ac:7c:
         0c:8a:35:3d:8c:ff:bd:d8:dd:e8:b4:f8:48:b9:ce:c6:67:bb:
         bb:5f:9d:37:30:eb:f2:2d:86:85:bb:c1:69:32:74:1b:cc:38:
         7e:b9:69:47:13:f0:76:22:d7:a0:7d:00:ee:78:f7:09:7f:27:
         ac:c8:3b:4d:d2:b8:87:87:ea:1a:aa:61:02:7a:51:71:61:ad:
         eb:1e:36:f3:58:d2:c4:e1:5d:05:63:2e:ed:87:4a:0e:0f:72:
         18:61:3b:d3:ca:45:05:14:5c:6a:1c:b6:c8:73:e1:08:8a:d1:
         00:f7:68:75:99:07:b3:76:d4:5d:62:68:57:3b:b6:9f:57:d1:
         93:27:99:42:d4:42:67:63:d0:bc:8b:d3:29:4b:18:8f:dc:ff:
         81:75:d3:6e:8d:6d:77:d9:f0:e4:fa:5c:d0:90:5e:b4:8e:b9:
         d2:17:21:65:56:17:71:64:21:a8:be:09:48:ee:d4:97:21:87:
         1b:fe:41:10:ee:db:c5:a6:fe:e9:20:3d:f1:8b:5e:fa:63:fa:
         9b:aa:7a:8d:bc:d3:bb:b1:1a:18:a1:2e:c9:0c:61:91:81:9f:
         c8:93:f9:4a:0c:01:29:c0:8a:14:0f:87:ab:cd:03:b8:f9:42:
         0b:fa:17:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm4viDgytYZQOvSpk6tILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD
Eyg0ZmY5MWM4ODU1MzQ3MDE5YWJmZGZmODA2ZTM0ZTgyNzk2MzlmMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+DdpPuIlfIN/b+011ci+plQc3na
U2lxCnauQty1k5KFT40IT/B/+BvlWlOKbzMk7g3gMaC1T+L+s8t7afknvt3nypqH
lbfEGozc+ZqmnzBiWawgzBOYt0WEKy0Q5prFwgosZjMqdzvDxp4+3JOu/BXlu4Od
HyPknkgdPk7AoXkTF4Xv/lD1Sxrin8Xjvms+28LLaMTnnbIU1FSN9QrjGYzIa/XW
FAfqiqkGSzVwV2T4t880/72q/oqjx+K2oZTGichBCn/o4Fd2qTYkyIVEfMUkX88f
1K/bQJJtm7CeBKP42a0FNgdAZRAwXeiGrBN6cRgAuGpRgCRPAEKVr97IRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/5HIhVNHAZq/3/gG406CeWOfEKMB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM9XW545
BU6Nz6pRvTbStKx8DIo1PYz/vdjd6LT4SLnOxme7u1+dNzDr8i2GhbvBaTJ0G8w4
frlpRxPwdiLXoH0A7nj3CX8nrMg7TdK4h4fqGqphAnpRcWGt6x4281jSxOFdBWMu
7YdKDg9yGGE708pFBRRcahy2yHPhCIrRAPdodZkHs3bUXWJoVzu2n1fRkyeZQtRC
Z2PQvIvTKUsYj9z/gXXTbo1td9nw5Ppc0JBetI650hchZVYXcWQhqL4JSO7UlyGH
G/5BEO7bxab+6SA98Yte+mP6m6p6jbzTu7EaGKEuyQxhkYGfyJP5SgwBKcCKFA+H
q80DuPlCC/oX6Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:07:32 2025 by rpki-client