This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File:                     M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier:          cJB8L2Olm4vrs+GqfdoBmOEQ5A0yTU6z2UW9hYfPrJ4=
Subject key identifier:   0E:9C:EB:B8:03:75:C9:C6:7B:DE:06:4A:53:E7:52:5F:BB:13:17:FE
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer:       /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial:       019AF38A0F203D770EE204908F22655E2751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number:          16B9
Signing time:             Sat 06 Dec 2025 12:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:42 +0000
Files and hashes:         1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
                          2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: TTN7fMNiK87kX0X+hWT/sQDDiTbQfHtadxnIbQSccZc=)
                          3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:0f:20:3d:77:0e:e2:04:90:8f:22:65:5e:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
        Validity
            Not Before: Dec  6 12:01:42 2025 GMT
            Not After : Dec  7 12:01:42 2025 GMT
        Subject: CN=0e9cebb80375c9c67bde064a53e7525fbb1317fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:6d:02:20:bf:b8:c0:a8:99:ba:26:71:9b:
                    f6:bb:c9:30:f0:64:8a:c3:51:9a:0f:00:5f:d4:80:
                    36:e0:01:d8:02:d7:6b:d7:c2:47:b3:4b:06:82:35:
                    ab:d1:99:41:73:f3:a6:c8:de:ad:40:19:5a:c6:6a:
                    a5:04:4e:e9:66:97:54:90:ac:43:7c:2e:b4:f8:d4:
                    4d:27:79:7a:25:5f:b8:0a:fa:5f:56:cb:53:ff:a0:
                    52:cd:81:8e:2a:af:e6:58:3e:0b:15:2a:d8:db:6e:
                    f7:5f:ca:b7:49:cb:e2:8c:fb:a6:db:78:a1:ff:56:
                    91:f3:82:fc:d6:41:6a:db:19:76:0e:f0:b0:54:93:
                    d3:cf:07:9d:59:59:61:3a:ed:92:94:a6:84:17:32:
                    6a:16:2c:4e:47:ca:90:d9:d5:71:83:1a:1b:7e:1b:
                    1b:37:d8:f8:3b:97:a4:c6:dc:48:31:3f:ae:6c:81:
                    96:20:c1:ee:59:cd:63:1f:5e:66:f7:7f:a9:52:11:
                    69:13:35:8c:9d:fb:e3:de:10:4c:18:58:12:81:ed:
                    3b:7f:37:ac:bb:83:64:ea:bd:8e:aa:7a:99:d3:31:
                    9b:ff:11:33:5b:bb:59:18:13:2c:0b:83:c0:19:c3:
                    db:2b:3c:d1:e2:15:9a:fd:0c:a0:68:52:21:8e:0f:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:EB:B8:03:75:C9:C6:7B:DE:06:4A:53:E7:52:5F:BB:13:17:FE
            X509v3 Authority Key Identifier:
                keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:f0:f0:f7:15:be:72:22:99:d4:74:39:7e:04:3a:65:9d:
         ea:bd:01:1e:2d:34:0b:e8:e1:e6:f6:57:8f:0a:9a:32:83:be:
         50:ff:2f:ce:67:4f:84:51:39:30:cd:77:fa:80:50:ae:1c:1b:
         ec:34:77:4c:ca:7d:3d:5d:bb:8b:f6:e5:68:c4:df:96:40:95:
         9d:32:53:b9:c3:aa:57:56:59:07:f1:65:7b:85:c3:bf:80:f7:
         63:7c:0a:e8:8f:2e:a2:45:76:c6:9d:6e:16:43:9f:4e:4f:81:
         1a:42:a7:c3:b2:2f:d3:a8:d3:73:0f:63:31:28:61:6a:51:71:
         ea:31:74:7a:17:c3:3c:67:22:78:5e:ed:1e:f9:07:6a:91:2f:
         ad:0d:9c:7b:10:2a:99:fa:bd:a2:4d:28:48:ce:11:e4:51:e7:
         cb:7d:41:f2:a1:62:c4:ad:c8:cb:5e:41:14:d7:bf:67:94:00:
         ed:3c:79:a8:85:90:e1:49:d6:21:ff:95:50:eb:ab:b1:4a:bd:
         01:18:79:63:05:2e:f9:28:08:d5:18:92:5b:6c:5f:05:d7:54:
         4b:38:97:07:15:ce:58:de:c6:49:58:31:45:ff:96:7f:01:c5:
         cf:8b:4d:d2:18:7b:80:86:63:69:86:f7:b3:d7:d8:f1:b8:34:
         2c:69:5a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzig8gPXcO4gSQjyJlXidRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUxMjA2MTIwMTQyWhcNMjUxMjA3MTIwMTQyWjAzMTEwLwYDVQQD
EygwZTljZWJiODAzNzVjOWM2N2JkZTA2NGE1M2U3NTI1ZmJiMTMxN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe1tAiC/uMCombomcZv2u8kw8GSK
w1GaDwBf1IA24AHYAtdr18JHs0sGgjWr0ZlBc/OmyN6tQBlaxmqlBE7pZpdUkKxD
fC60+NRNJ3l6JV+4CvpfVstT/6BSzYGOKq/mWD4LFSrY2273X8q3ScvijPum23ih
/1aR84L81kFq2xl2DvCwVJPTzwedWVlhOu2SlKaEFzJqFixOR8qQ2dVxgxobfhsb
N9j4O5ekxtxIMT+ubIGWIMHuWc1jH15m93+pUhFpEzWMnfvj3hBMGFgSge07fzes
u4Nk6r2OqnqZ0zGb/xEzW7tZGBMsC4PAGcPbKzzR4hWa/QygaFIhjg/p7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6c67gDdcnGe94GSlPnUl+7Exf+MB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTLw8PcV
vnIimdR0OX4EOmWd6r0BHi00C+jh5vZXjwqaMoO+UP8vzmdPhFE5MM13+oBQrhwb
7DR3TMp9PV27i/blaMTflkCVnTJTucOqV1ZZB/Fle4XDv4D3Y3wK6I8uokV2xp1u
FkOfTk+BGkKnw7Iv06jTcw9jMShhalFx6jF0ehfDPGcieF7tHvkHapEvrQ2cexAq
mfq9ok0oSM4R5FHny31B8qFixK3Iy15BFNe/Z5QA7Tx5qIWQ4UnWIf+VUOursUq9
ARh5YwUu+SgI1RiSW2xfBddUSziXBxXOWN7GSVgxRf+WfwHFz4tN0hh7gIZjaYb3
s9fY8bg0LGlaZQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:03:12 2025 by rpki-client