This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File:                     mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier:          mt6dwJI4vgDmD/tqWYhbhPPrWXOE2CCa1ihGlbT/C/U=
Subject key identifier:   D9:8A:26:58:B5:5A:80:94:A0:EC:0D:CA:D2:E4:C1:7B:A7:A1:C6:99
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer:       /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial:       019AF2ADCE3FB0FEE41AC4B6ECD05EDA4F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number:          04D7
Signing time:             Sat 06 Dec 2025 08:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:08 +0000
Files and hashes:         1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
                          2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: re1lXojiuX2kWUXgBkoyXDJyUw0M1CU8XF0TEbY9jIA=)
                          3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:ce:3f:b0:fe:e4:1a:c4:b6:ec:d0:5e:da:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
        Validity
            Not Before: Dec  6 08:01:08 2025 GMT
            Not After : Dec  7 08:01:08 2025 GMT
        Subject: CN=d98a2658b55a8094a0ec0dcad2e4c17ba7a1c699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d3:c7:4c:26:71:24:0f:13:6e:e4:70:19:a8:
                    25:12:4c:87:5f:25:97:4a:63:fd:78:e4:55:68:57:
                    eb:6f:e4:25:f1:36:3e:24:b2:e8:7e:89:1f:b9:29:
                    c5:f5:b9:b7:7e:f7:0f:fe:21:af:05:10:1f:41:82:
                    a4:b3:3c:23:81:78:f2:e6:50:a7:16:06:bc:89:c0:
                    90:9e:1c:c7:65:16:66:dc:6b:d9:19:de:8b:9a:a0:
                    00:ee:69:65:2a:56:20:9a:2a:50:bc:a8:2c:f1:9c:
                    44:fa:cc:fa:2a:c9:52:cf:e7:9d:c6:49:47:d8:9a:
                    ae:4c:59:83:40:f2:cb:93:aa:16:40:7e:5e:00:8e:
                    f8:74:8c:76:46:69:0c:50:80:95:7e:57:c0:68:2e:
                    d3:96:ce:55:a7:94:23:1f:96:1e:73:7d:de:30:a8:
                    8e:f2:46:ba:f8:ac:97:de:73:91:2f:86:a7:61:cf:
                    41:f8:bf:6a:dc:2c:42:b1:2f:2f:6d:b5:d1:e9:bc:
                    7d:96:57:41:7d:a9:52:02:f9:9c:86:4e:18:fd:69:
                    92:97:cb:af:e3:a1:51:8d:1b:1f:93:b3:0d:4c:9e:
                    2a:0e:2b:ee:c4:94:2d:79:f8:d9:68:17:c4:63:d1:
                    16:7f:a7:77:66:59:4e:46:90:c7:f3:f6:ee:d1:ab:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8A:26:58:B5:5A:80:94:A0:EC:0D:CA:D2:E4:C1:7B:A7:A1:C6:99
            X509v3 Authority Key Identifier:
                keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:30:73:42:d4:5d:eb:3d:f2:71:15:b2:0e:a4:2f:c1:b8:cf:
         0e:42:8a:84:2e:09:84:1d:ec:0e:ee:63:6a:4f:f1:d2:8d:90:
         e9:72:b8:89:3d:81:b9:97:57:0c:66:b9:f5:1c:33:72:ee:ab:
         1d:65:c3:4e:93:e8:46:8b:95:bf:f4:ed:c6:c6:25:e0:78:bb:
         5e:db:85:5c:94:18:ab:8f:d1:c9:e5:b0:1b:74:66:4c:64:34:
         e3:f4:b3:78:ab:53:7a:d4:96:55:c7:cc:32:2c:eb:ae:c2:60:
         5b:2b:b3:9a:2c:73:54:4f:64:b0:94:b8:5a:e5:5a:a3:96:05:
         54:b5:b8:ef:2a:ef:af:64:f4:50:28:4e:0e:db:d4:74:9d:5d:
         9f:6e:b7:8a:ba:8a:2b:ed:c1:96:9d:47:22:21:46:9b:d7:c0:
         76:e6:a1:83:13:ee:60:a7:ad:ae:1b:35:f5:b7:71:c1:76:72:
         32:5b:b4:fb:17:d9:a6:53:5c:f8:70:48:36:11:3d:23:d9:db:
         f6:c4:62:26:07:11:39:11:51:7d:fa:3f:45:a0:ff:9f:d5:dc:
         2f:7e:42:7b:15:af:65:0a:12:3c:c6:15:1f:89:90:04:dd:4d:
         e8:4c:8c:32:61:48:db:dd:90:88:b5:57:11:28:27:2b:69:13:
         01:fe:b6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrc4/sP7kGsS27NBe2k90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD
EyhkOThhMjY1OGI1NWE4MDk0YTBlYzBkY2FkMmU0YzE3YmE3YTFjNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9PHTCZxJA8TbuRwGaglEkyHXyWX
SmP9eORVaFfrb+Ql8TY+JLLofokfuSnF9bm3fvcP/iGvBRAfQYKkszwjgXjy5lCn
Fga8icCQnhzHZRZm3GvZGd6LmqAA7mllKlYgmipQvKgs8ZxE+sz6KslSz+edxklH
2JquTFmDQPLLk6oWQH5eAI74dIx2RmkMUICVflfAaC7Tls5Vp5QjH5Yec33eMKiO
8ka6+KyX3nORL4anYc9B+L9q3CxCsS8vbbXR6bx9lldBfalSAvmchk4Y/WmSl8uv
46FRjRsfk7MNTJ4qDivuxJQtefjZaBfEY9EWf6d3ZllORpDH8/bu0asThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmKJli1WoCUoOwNytLkwXunocaZMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzBzQtRd
6z3ycRWyDqQvwbjPDkKKhC4JhB3sDu5jak/x0o2Q6XK4iT2BuZdXDGa59Rwzcu6r
HWXDTpPoRouVv/TtxsYl4Hi7XtuFXJQYq4/RyeWwG3RmTGQ04/SzeKtTetSWVcfM
MizrrsJgWyuzmixzVE9ksJS4WuVao5YFVLW47yrvr2T0UChODtvUdJ1dn263irqK
K+3Blp1HIiFGm9fAduahgxPuYKetrhs19bdxwXZyMlu0+xfZplNc+HBINhE9I9nb
9sRiJgcRORFRffo/RaD/n9XcL35CexWvZQoSPMYVH4mQBN1N6EyMMmFI292QiLVX
ESgnK2kTAf62Hw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:14:43 2025 by rpki-client