This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File:                     Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier:          rJP8FLIqcQeR5ijJraZlEUhZqIWh35L4wU1cJy6Gg08=
Subject key identifier:   66:60:83:E6:24:FD:E6:7D:45:AB:F7:D9:B1:7D:5D:D7:8B:FF:E1:13
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer:       /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial:       019B4A0292C463E71A49B7100FE16740DEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number:          1792
Signing time:             Tue 23 Dec 2025 07:00:41 +0000
Manifest this update:     Tue 23 Dec 2025 07:00:41 +0000
Manifest next update:     Wed 24 Dec 2025 07:00:41 +0000
Files and hashes:         1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: q1GiHfYg8lX+Warvo9aCadkIMXxUHqwFO9f/Vg+CJoI=)
                          2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
                          3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:02:92:c4:63:e7:1a:49:b7:10:0f:e1:67:40:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
        Validity
            Not Before: Dec 23 07:00:41 2025 GMT
            Not After : Dec 24 07:00:41 2025 GMT
        Subject: CN=666083e624fde67d45abf7d9b17d5dd78bffe113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:81:8b:35:4b:e0:18:1d:4c:3e:41:c7:4c:
                    99:4a:87:f0:9a:32:d1:48:c7:b5:07:e8:91:13:0a:
                    f1:d2:63:00:37:37:8c:28:ee:e4:c6:1b:52:0d:2b:
                    06:5f:12:b8:87:70:40:a5:24:ff:b9:18:a6:3d:95:
                    2f:b8:e6:e4:53:a7:5c:44:a3:ff:68:5b:a3:4b:fc:
                    56:d7:de:b3:64:4d:87:d1:ff:18:5a:d0:84:11:20:
                    eb:0e:78:50:fc:32:54:13:72:e4:92:df:70:cf:69:
                    b1:a6:ff:90:41:44:c5:20:a8:27:4b:ca:df:c0:d5:
                    ed:70:79:22:88:91:00:3d:05:41:eb:88:79:f4:57:
                    f0:9c:a5:d0:a7:15:58:33:df:8c:54:c7:ab:05:72:
                    1c:9d:94:37:8a:a2:3f:bb:b0:a3:38:70:22:44:32:
                    23:28:f4:56:69:89:8f:0b:eb:47:02:89:2f:75:6d:
                    ac:3f:25:c1:e4:10:ef:2e:a4:f2:07:f8:66:bf:f8:
                    0b:d1:7e:3b:d5:cc:79:2a:6a:de:d6:ab:59:2c:1f:
                    e1:5b:de:0d:81:2b:9b:92:f0:66:ce:db:2e:00:d1:
                    90:5b:e8:6a:ce:67:d7:00:70:f4:01:cf:08:7e:e0:
                    9b:8e:75:fc:df:2c:2b:80:bc:59:0b:d0:4e:62:8e:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:83:E6:24:FD:E6:7D:45:AB:F7:D9:B1:7D:5D:D7:8B:FF:E1:13
            X509v3 Authority Key Identifier:
                keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9e:34:bc:7c:f6:0a:01:11:42:34:fd:1d:0a:3e:d7:d1:92:
         d1:93:b2:7a:6d:ff:a7:c0:23:c7:23:2c:16:76:5e:a1:ce:5b:
         3b:57:8c:d3:32:40:55:cc:5d:97:73:9e:71:60:d1:99:3a:f5:
         1b:f6:4f:06:d3:12:61:a3:34:b6:fb:c0:7f:ec:ad:4c:36:bd:
         1e:63:dd:9c:b6:88:3f:5a:c2:cd:16:ef:6d:57:2e:ab:34:d0:
         c4:c7:0a:6c:7c:51:9c:0e:7f:f7:b2:25:0a:90:c8:b2:66:1b:
         6b:21:df:be:54:fd:5b:de:40:bf:75:de:a8:e7:7b:97:b5:3d:
         93:71:6b:0e:d9:53:38:26:d7:76:3f:13:57:3a:bb:85:ed:ae:
         95:56:96:29:70:b6:03:a2:e2:c7:ab:5b:2d:69:ae:c8:14:8c:
         ef:1d:d7:b2:09:e1:93:31:1a:9f:0d:8c:50:7b:3f:54:81:7b:
         c0:36:2c:e0:ee:16:61:ee:76:8f:25:25:15:27:78:91:fb:36:
         91:d6:03:96:64:c5:4a:0a:f6:13:1c:01:bd:1a:66:cd:bd:b5:
         47:58:42:62:31:2d:71:f7:ba:3e:58:44:e9:44:f4:ef:ea:8e:
         66:0d:38:06:bf:fa:28:58:79:91:b8:ae:d8:08:b4:4e:47:f6:
         ba:46:93:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtKApLEY+caSbcQD+FnQN75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OWY0ZWQ2NjIwYzg5NjA1MjFmYmI4MWZmNzJlODM3ZGMw
MDM4YWYwHhcNMjUxMjIzMDcwMDQxWhcNMjUxMjI0MDcwMDQxWjAzMTEwLwYDVQQD
Eyg2NjYwODNlNjI0ZmRlNjdkNDVhYmY3ZDliMTdkNWRkNzhiZmZlMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj2BizVL4BgdTD5Bx0yZSofwmjLR
SMe1B+iREwrx0mMANzeMKO7kxhtSDSsGXxK4h3BApST/uRimPZUvuObkU6dcRKP/
aFujS/xW196zZE2H0f8YWtCEESDrDnhQ/DJUE3Lkkt9wz2mxpv+QQUTFIKgnS8rf
wNXtcHkiiJEAPQVB64h59FfwnKXQpxVYM9+MVMerBXIcnZQ3iqI/u7CjOHAiRDIj
KPRWaYmPC+tHAokvdW2sPyXB5BDvLqTyB/hmv/gL0X471cx5Kmre1qtZLB/hW94N
gSubkvBmztsuANGQW+hqzmfXAHD0Ac8IfuCbjnX83ywrgLxZC9BOYo5HCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZgg+Yk/eZ9Rav32bF9XdeL/+ETMB8GA1UdIwQY
MBaAFBafTtZiDIlgUh+7gf9y6DfcADivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnA5TzFtSU1pV0JTSDd1Ql8zTG9OOXdBT0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iYzZkMWUtMDE0Ni00YTM1LThlOWIt
Y2Y1ZmIwNDI1NjZhLzEvRnA5TzFtSU1pV0JTSDd1Ql8zTG9OOXdBT0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9iYzZkMWUtMDE0Ni00YTM1LThlOWItY2Y1ZmIwNDI1NjZh
LzEvRnA5TzFtSU1pV0JTSDd1Ql8zTG9OOXdBT0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv540vHz2
CgERQjT9HQo+19GS0ZOyem3/p8AjxyMsFnZeoc5bO1eM0zJAVcxdl3OecWDRmTr1
G/ZPBtMSYaM0tvvAf+ytTDa9HmPdnLaIP1rCzRbvbVcuqzTQxMcKbHxRnA5/97Il
CpDIsmYbayHfvlT9W95Av3XeqOd7l7U9k3FrDtlTOCbXdj8TVzq7he2ulVaWKXC2
A6Lix6tbLWmuyBSM7x3XsgnhkzEanw2MUHs/VIF7wDYs4O4WYe52jyUlFSd4kfs2
kdYDlmTFSgr2ExwBvRpmzb21R1hCYjEtcfe6PlhE6UT07+qOZg04Br/6KFh5kbiu
2Ai0Tkf2ukaTlQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 15:23:11 2025 by rpki-client