This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File:                     RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier:          b+R5HMASWGpHWGKepSqZOguK42bisBS+2KL2rrm41Qs=
Subject key identifier:   03:D2:3E:FE:DA:1C:4A:05:C9:79:CB:8E:8D:7E:CA:55:70:8B:1A:E1
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer:       /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial:       019B443764C4C3AB64BC00094C0071021EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number:          03F2
Signing time:             Mon 22 Dec 2025 04:00:39 +0000
Manifest this update:     Mon 22 Dec 2025 04:00:39 +0000
Manifest next update:     Tue 23 Dec 2025 04:00:39 +0000
Files and hashes:         1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
                          2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
                          3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: 7+NihANAAruC8rIvOWC2HBqQQ38a49tQcko0lPGs8jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:64:c4:c3:ab:64:bc:00:09:4c:00:71:02:1e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
        Validity
            Not Before: Dec 22 04:00:39 2025 GMT
            Not After : Dec 23 04:00:39 2025 GMT
        Subject: CN=03d23efeda1c4a05c979cb8e8d7eca55708b1ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:54:dc:dd:b7:97:f0:49:e9:a4:69:7d:6e:b0:
                    4a:74:af:43:ff:f5:c2:45:59:45:5b:84:7a:5d:b6:
                    83:42:87:ca:44:c9:45:f5:cb:43:49:cf:e9:40:47:
                    a0:1b:c0:74:71:d0:be:5c:22:47:23:3d:c4:25:67:
                    de:be:f4:56:65:26:d5:55:14:b0:74:58:b0:bc:54:
                    da:ac:84:43:c1:d2:18:da:5a:74:ca:a9:fa:65:b8:
                    b2:ce:d8:0c:ad:8a:5b:c2:6e:35:d1:00:b6:48:eb:
                    fa:90:ea:cf:a5:6a:d4:21:ae:3f:ad:fe:13:f9:94:
                    55:75:6b:96:41:ae:2d:d3:7b:e9:87:5e:6f:f2:73:
                    17:c7:d0:29:ce:bb:95:d3:c2:df:df:32:13:20:68:
                    dd:30:02:e5:f9:b1:b9:d2:b3:f6:0d:e7:9d:06:4f:
                    5b:96:2e:d1:03:3b:5a:3a:fb:d7:ba:a7:2a:7a:98:
                    d4:12:a1:50:a3:0c:0d:a2:f4:87:be:28:bf:2f:c5:
                    e9:5d:db:86:80:4d:b3:32:3f:ec:25:51:5f:92:fd:
                    4a:02:78:9f:d5:c8:87:90:a1:c5:33:f1:90:14:8b:
                    d1:51:dd:07:88:01:10:f2:79:9e:82:91:0c:c4:99:
                    94:73:82:68:59:bb:aa:bb:ad:a8:91:f6:dc:48:dd:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:3E:FE:DA:1C:4A:05:C9:79:CB:8E:8D:7E:CA:55:70:8B:1A:E1
            X509v3 Authority Key Identifier:
                keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:7f:a6:ac:1a:44:e2:4a:7a:19:19:15:9d:e2:35:b3:1a:
         a6:d3:22:7c:65:fa:e7:a1:58:a8:16:15:7c:22:60:66:4f:9e:
         86:88:c0:12:b1:20:01:a8:62:61:a3:c1:51:22:59:0d:c3:98:
         fc:0f:3d:43:4c:53:73:ec:39:66:e0:62:4b:6c:a4:48:e5:a5:
         33:0e:a1:94:ef:94:f4:59:d3:21:2c:03:ff:0e:4c:a1:de:ef:
         25:59:45:61:1f:c4:4b:81:fa:f1:1e:2c:2b:5f:fb:e1:93:fc:
         02:fd:ce:54:8d:57:57:06:51:7e:df:a5:65:e0:79:95:94:e9:
         f2:3a:6e:81:8b:c0:4f:1d:02:e8:d2:c0:ee:92:4c:d6:e2:04:
         73:99:b5:96:c6:bd:b0:33:8f:83:c7:13:ca:f3:71:24:23:75:
         c6:42:95:00:b9:74:f8:a4:25:87:db:07:99:c8:94:31:36:5c:
         48:95:6f:d3:ef:d0:4d:ef:7a:5d:7c:8d:75:90:fa:7a:f6:0c:
         2e:60:b6:1a:2e:f4:67:8c:a2:61:d0:5c:06:50:e5:be:27:fc:
         1a:6c:2b:26:4a:c0:9d:5b:99:20:6a:86:0b:07:31:24:55:7a:
         02:27:00:ce:94:69:94:7e:97:21:2c:9e:4e:79:ac:20:31:4e:
         b6:0a:d5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEN2TEw6tkvAAJTABxAh79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmJjZmMxM2Q0ZDVmZjZkMzdjMjI2ZjExZTEyMTIwNGMz
NjdkMTcwHhcNMjUxMjIyMDQwMDM5WhcNMjUxMjIzMDQwMDM5WjAzMTEwLwYDVQQD
EygwM2QyM2VmZWRhMWM0YTA1Yzk3OWNiOGU4ZDdlY2E1NTcwOGIxYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lTc3beX8EnppGl9brBKdK9D//XC
RVlFW4R6XbaDQofKRMlF9ctDSc/pQEegG8B0cdC+XCJHIz3EJWfevvRWZSbVVRSw
dFiwvFTarIRDwdIY2lp0yqn6ZbiyztgMrYpbwm410QC2SOv6kOrPpWrUIa4/rf4T
+ZRVdWuWQa4t03vph15v8nMXx9ApzruV08Lf3zITIGjdMALl+bG50rP2DeedBk9b
li7RAztaOvvXuqcqepjUEqFQowwNovSHvii/L8XpXduGgE2zMj/sJVFfkv1KAnif
1ciHkKHFM/GQFIvRUd0HiAEQ8nmegpEMxJmUc4JoWbuqu62okfbcSN0wOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPSPv7aHEoFyXnLjo1+ylVwixrhMB8GA1UdIwQY
MBaAFEb7z8E9TV/203wibxHhISBMNn0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2It
ZmFjYTBlYjMzNTdkLzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2ItZmFjYTBlYjMzNTdk
LzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9h/pqwa
ROJKehkZFZ3iNbMaptMifGX656FYqBYVfCJgZk+ehojAErEgAahiYaPBUSJZDcOY
/A89Q0xTc+w5ZuBiS2ykSOWlMw6hlO+U9FnTISwD/w5Mod7vJVlFYR/ES4H68R4s
K1/74ZP8Av3OVI1XVwZRft+lZeB5lZTp8jpugYvATx0C6NLA7pJM1uIEc5m1lsa9
sDOPg8cTyvNxJCN1xkKVALl0+KQlh9sHmciUMTZcSJVv0+/QTe96XXyNdZD6evYM
LmC2Gi70Z4yiYdBcBlDlvif8GmwrJkrAnVuZIGqGCwcxJFV6AicAzpRplH6XISye
TnmsIDFOtgrV4g==
-----END CERTIFICATE-----
Generated at Mon Dec 22 13:55:22 2025 by rpki-client