This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File:                     MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier:          K/lUv1ZzDjP8FkGtnyPsttOXqaxtgcAMHoxxl2ntpPg=
Subject key identifier:   B2:88:56:18:92:47:95:83:26:5B:66:6A:40:5C:0C:25:E9:C3:51:1B
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer:       /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial:       019B3FECA4E8C23F0A0F1ED117C157E055A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number:          15FE
Signing time:             Sun 21 Dec 2025 08:00:31 +0000
Manifest this update:     Sun 21 Dec 2025 08:00:31 +0000
Manifest next update:     Mon 22 Dec 2025 08:00:31 +0000
Files and hashes:         1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
                          2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
                          3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: 22s3U9xlG/9uRGMIw0vTGzHQHQji8L1Pfjh/3EnZ3J8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:ec:a4:e8:c2:3f:0a:0f:1e:d1:17:c1:57:e0:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
        Validity
            Not Before: Dec 21 08:00:31 2025 GMT
            Not After : Dec 22 08:00:31 2025 GMT
        Subject: CN=b288561892479583265b666a405c0c25e9c3511b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:45:2b:03:99:27:2d:3f:95:05:4a:a1:1d:
                    3a:c1:20:16:51:0c:b5:d0:e2:1d:de:0c:7b:3b:af:
                    a9:4c:ca:ec:de:35:ad:99:cb:95:72:6b:2d:3e:b2:
                    c2:31:98:5f:7f:8a:1a:96:ed:23:92:ce:23:bd:a4:
                    00:36:b6:6a:50:e1:70:ac:d3:e6:4f:af:a4:b7:c2:
                    0c:ef:e4:8d:34:24:a9:af:11:74:2f:79:70:82:c9:
                    42:68:b7:ff:8c:6e:59:93:37:54:7c:b3:cd:51:b4:
                    fc:22:c3:f2:52:c0:8a:ff:30:46:6f:4b:1e:20:b3:
                    c7:98:ae:ce:e0:1b:f8:22:8e:19:4d:d2:7e:5a:eb:
                    70:c3:da:fa:ce:25:00:82:70:f6:80:d3:73:af:5c:
                    62:a6:cc:4c:75:be:98:e7:02:fe:24:b2:42:e7:6b:
                    55:17:2c:d8:be:48:e9:d9:91:4c:87:f9:c5:63:a7:
                    90:d0:d1:53:0e:fc:93:69:d9:f4:e7:aa:94:7d:af:
                    73:be:7b:d6:89:9d:83:68:97:1b:00:85:3f:40:eb:
                    51:e2:54:be:71:76:ca:e6:4c:00:e6:d8:79:0f:85:
                    8e:9e:bb:e2:61:8f:69:77:28:66:23:96:1f:17:34:
                    c5:28:a8:67:e2:e3:b8:e2:ca:47:b2:6a:6b:a7:2e:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:88:56:18:92:47:95:83:26:5B:66:6A:40:5C:0C:25:E9:C3:51:1B
            X509v3 Authority Key Identifier:
                keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:37:03:c4:07:5d:26:77:65:47:57:22:bd:3f:e8:75:0d:2a:
         a9:13:48:3b:76:4d:6a:e3:b8:7a:1a:f1:95:80:a7:59:53:aa:
         70:c6:2d:46:c3:5d:e5:86:78:30:af:a5:47:c6:9e:99:86:4e:
         37:8d:7a:14:b4:9a:b5:a9:d1:09:ea:dc:57:4b:b8:ca:01:20:
         47:5a:e0:13:e6:b5:df:17:f5:61:ed:d7:d2:49:2d:80:4b:f7:
         26:8a:4b:c6:30:28:4f:f7:43:bf:ba:e1:61:a3:82:a0:7b:4f:
         3c:a5:a0:19:ed:d8:91:2c:13:2f:bd:f1:08:be:d2:53:37:6e:
         04:b8:b6:d9:c3:06:95:e0:9f:8f:27:ad:cc:6c:91:ee:f5:06:
         3c:53:27:ad:49:c2:d9:ea:9a:c9:9a:a9:87:54:27:c3:26:7f:
         1f:fd:14:90:1e:7c:10:06:76:ed:4e:b4:ff:99:4a:96:e5:0b:
         e8:a5:70:6e:4b:5a:8a:59:d0:aa:cd:82:4f:10:77:80:d3:dc:
         9b:1c:9f:1e:1b:6f:b5:d4:01:fb:69:03:37:dd:91:89:c0:76:
         e6:df:53:44:75:b7:32:6f:76:16:93:bb:59:18:22:85:7f:db:
         95:39:20:bb:be:10:f4:0e:d2:92:38:44:74:2d:eb:c3:8a:92:
         e1:0c:f8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/7KTowj8KDx7RF8FX4FWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjgzY2ZmYTA2MWYyOGE5ZTExMzVjOWZjMzAzNzZhNjQ3
NGNiZjQwHhcNMjUxMjIxMDgwMDMxWhcNMjUxMjIyMDgwMDMxWjAzMTEwLwYDVQQD
EyhiMjg4NTYxODkyNDc5NTgzMjY1YjY2NmE0MDVjMGMyNWU5YzM1MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w5FKwOZJy0/lQVKoR06wSAWUQy1
0OId3gx7O6+pTMrs3jWtmcuVcmstPrLCMZhff4oalu0jks4jvaQANrZqUOFwrNPm
T6+kt8IM7+SNNCSprxF0L3lwgslCaLf/jG5ZkzdUfLPNUbT8IsPyUsCK/zBGb0se
ILPHmK7O4Bv4Io4ZTdJ+Wutww9r6ziUAgnD2gNNzr1xipsxMdb6Y5wL+JLJC52tV
FyzYvkjp2ZFMh/nFY6eQ0NFTDvyTadn056qUfa9zvnvWiZ2DaJcbAIU/QOtR4lS+
cXbK5kwA5th5D4WOnrviYY9pdyhmI5YfFzTFKKhn4uO44spHsmprpy5eUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKIVhiSR5WDJltmakBcDCXpw1EbMB8GA1UdIwQY
MBaAFDBoPP+gYfKKnhE1yfwwN2pkdMv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYt
NGUxOTIzOWYwYzM1LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYtNGUxOTIzOWYwYzM1
LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzcDxAdd
JndlR1civT/odQ0qqRNIO3ZNauO4ehrxlYCnWVOqcMYtRsNd5YZ4MK+lR8aemYZO
N416FLSatanRCercV0u4ygEgR1rgE+a13xf1Ye3X0kktgEv3JopLxjAoT/dDv7rh
YaOCoHtPPKWgGe3YkSwTL73xCL7SUzduBLi22cMGleCfjyetzGyR7vUGPFMnrUnC
2eqayZqph1QnwyZ/H/0UkB58EAZ27U60/5lKluUL6KVwbktailnQqs2CTxB3gNPc
mxyfHhtvtdQB+2kDN92RicB25t9TRHW3Mm92FpO7WRgihX/blTkgu74Q9A7SkjhE
dC3rw4qS4Qz4eQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:26:34 2025 by rpki-client