This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          CdHmrGWecK8FsskOKeM8xVxd1jh8lDr2mG0Q1djBn2k=
Subject key identifier:   F7:0E:EE:02:A5:CF:52:83:F4:8A:1E:B8:71:C2:18:A7:7C:8C:92:E6
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       019AF2772A917FEC12B8136C025A136A294C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 07:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:27 +0000
Files and hashes:         1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: ybZx6an+LBGF0bGXhWx7o7uIeHyUbj1s2IZWQ9vGOVg=)
                          3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:2a:91:7f:ec:12:b8:13:6c:02:5a:13:6a:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Dec  6 07:01:27 2025 GMT
            Not After : Dec  7 07:01:27 2025 GMT
        Subject: CN=f70eee02a5cf5283f48a1eb871c218a77c8c92e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:46:2e:9e:73:d7:f2:e3:70:a4:f7:e9:68:
                    cd:59:96:8b:3a:36:33:ca:25:92:fc:76:c1:56:7d:
                    80:77:b8:70:4e:e5:cf:75:f8:18:cf:18:6c:f6:8a:
                    c9:34:0e:4c:67:a5:4e:65:ca:fe:c1:af:4c:ed:0f:
                    e7:95:34:86:6d:54:bc:76:ce:2f:64:db:75:33:e8:
                    ee:c1:80:e7:43:4e:5e:ff:67:6f:61:83:8b:cf:35:
                    03:74:ec:12:32:ee:af:e4:dd:ab:0b:66:a0:58:1e:
                    c0:16:ab:2d:a9:5b:c6:77:3e:fc:16:d6:2a:56:c2:
                    1d:e2:1b:85:5a:13:24:86:c7:b2:29:c3:f3:0b:b0:
                    9f:bf:b6:65:5c:74:7d:af:ea:95:c5:05:ec:3f:31:
                    a3:2c:7f:9d:96:48:1b:45:f7:c1:c0:d1:f7:ca:5a:
                    29:11:2a:ec:88:3c:bc:74:00:0e:cd:bd:f3:79:22:
                    06:52:3f:6e:21:7f:1e:12:1a:34:f8:d7:44:f6:85:
                    6e:05:88:c6:f4:3d:a2:69:b4:af:ac:d7:8e:bd:5c:
                    d2:72:58:cc:4c:fd:fa:55:b3:ea:60:eb:9a:a3:40:
                    cf:5e:a2:83:3b:24:b9:fc:f7:e3:5f:37:42:7a:4e:
                    c1:ac:44:e0:32:92:9d:3e:7d:42:c4:1c:b4:f4:ca:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0E:EE:02:A5:CF:52:83:F4:8A:1E:B8:71:C2:18:A7:7C:8C:92:E6
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:3e:4e:db:18:ca:97:8b:83:61:f4:ec:3a:bb:93:a9:9a:
         cc:c1:63:ef:b4:eb:21:68:9c:b0:d5:9b:38:3d:35:66:3a:f3:
         fc:85:aa:b1:fb:7f:25:b8:5f:52:e5:52:ee:c5:7e:54:51:49:
         e3:ba:ee:b3:32:c1:78:5f:05:d5:4e:02:78:61:61:de:c0:b1:
         f5:64:58:d4:95:96:94:d3:bb:6e:5d:97:5e:12:30:d6:dc:77:
         a1:9d:02:62:86:0d:8c:ce:39:21:51:60:2b:09:4c:7e:da:9e:
         37:ac:c8:01:d5:81:fa:bd:12:cb:0e:ab:2a:12:aa:4a:07:5a:
         a6:d6:bd:a3:44:e9:83:1d:ec:32:9d:53:43:d4:47:f5:22:7b:
         dd:dc:28:94:79:0c:9a:42:2a:7a:b5:23:ab:73:9a:2e:22:1e:
         47:04:3b:61:a0:db:00:07:45:10:10:8f:40:b7:f9:38:de:87:
         2e:56:38:1a:e2:ed:28:ea:61:80:af:ed:56:7e:0c:1f:2e:f9:
         49:0d:c1:cb:a9:63:12:3e:11:d3:15:15:08:88:c6:b2:fe:87:
         29:a7:15:0a:2a:27:b9:5f:41:7a:33:46:ca:8a:09:d1:e1:4f:
         51:cd:22:54:0e:e5:eb:15:63:f2:80:6f:3c:47:da:35:52:4c:
         8c:49:74:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydyqRf+wSuBNsAloTailMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5
MWRiYTIwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD
EyhmNzBlZWUwMmE1Y2Y1MjgzZjQ4YTFlYjg3MWMyMThhNzdjOGM5MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5GLp5z1/LjcKT36WjNWZaLOjYz
yiWS/HbBVn2Ad7hwTuXPdfgYzxhs9orJNA5MZ6VOZcr+wa9M7Q/nlTSGbVS8ds4v
ZNt1M+juwYDnQ05e/2dvYYOLzzUDdOwSMu6v5N2rC2agWB7AFqstqVvGdz78FtYq
VsId4huFWhMkhseyKcPzC7Cfv7ZlXHR9r+qVxQXsPzGjLH+dlkgbRffBwNH3ylop
ESrsiDy8dAAOzb3zeSIGUj9uIX8eEho0+NdE9oVuBYjG9D2iabSvrNeOvVzScljM
TP36VbPqYOuao0DPXqKDOyS5/PfjXzdCek7BrETgMpKdPn1CxBy09Mp57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcO7gKlz1KD9IoeuHHCGKd8jJLmMB8GA1UdIwQY
MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt
M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2
LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9s+TtsY
ypeLg2H07Dq7k6mazMFj77TrIWicsNWbOD01Zjrz/IWqsft/JbhfUuVS7sV+VFFJ
47ruszLBeF8F1U4CeGFh3sCx9WRY1JWWlNO7bl2XXhIw1tx3oZ0CYoYNjM45IVFg
KwlMftqeN6zIAdWB+r0Syw6rKhKqSgdapta9o0Tpgx3sMp1TQ9RH9SJ73dwolHkM
mkIqerUjq3OaLiIeRwQ7YaDbAAdFEBCPQLf5ON6HLlY4GuLtKOphgK/tVn4MHy75
SQ3By6ljEj4R0xUVCIjGsv6HKacVCionuV9BejNGyooJ0eFPUc0iVA7l6xVj8oBv
PEfaNVJMjEl0Cg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:15:12 2025 by rpki-client