This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File:                     MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier:          ln+sokmAyG+q1E2cgzsvOKH0+caRlU9DZcZmCXnCuBQ=
Subject key identifier:   08:89:73:7B:DC:15:A3:36:6D:51:37:AD:23:19:09:1C:32:0D:3A:60
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer:       /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial:       019B5D53DFB1B6A63555EB6C825503B55DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number:          1799
Signing time:             Sat 27 Dec 2025 01:02:16 +0000
Manifest this update:     Sat 27 Dec 2025 01:02:16 +0000
Manifest next update:     Sun 28 Dec 2025 01:02:16 +0000
Files and hashes:         1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: YZP01i4u81GrVfavwvdC1fnmZO2EiybRyvn5lpXIauU=)
                          2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
                          3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:53:df:b1:b6:a6:35:55:eb:6c:82:55:03:b5:5d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
        Validity
            Not Before: Dec 27 01:02:16 2025 GMT
            Not After : Dec 28 01:02:16 2025 GMT
        Subject: CN=0889737bdc15a3366d5137ad2319091c320d3a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:24:ed:01:09:58:33:fe:84:49:25:b9:09:
                    90:e4:6e:18:99:b4:a4:fe:0c:3a:73:a2:cc:2b:8c:
                    c1:28:a9:6c:5d:d5:6f:a1:1d:84:0a:2d:2e:15:4a:
                    41:11:81:02:d2:e6:d5:49:ca:2f:f9:1a:2a:4b:90:
                    79:dc:d7:6e:25:f8:e2:72:d5:fe:40:f0:cb:72:a0:
                    3a:ec:0a:1b:93:e4:0f:79:36:d9:74:05:e7:39:1d:
                    5a:86:0e:fc:df:12:f1:82:a5:a9:34:9b:7a:43:ad:
                    d3:00:8f:6b:a6:86:5c:df:c7:3e:61:27:b9:e6:d3:
                    f7:13:65:d8:bd:22:ef:2b:ae:03:7f:54:cf:b1:6c:
                    ff:3d:b3:d5:b0:e8:7b:a5:a4:db:48:9d:fb:de:6e:
                    40:1f:ca:c5:26:f4:47:66:2a:05:e5:d1:72:11:34:
                    a2:e6:5e:f3:e2:93:a3:ae:c1:aa:d0:3a:73:77:16:
                    db:d0:8b:2b:e3:e7:8f:4f:0b:21:cf:a2:7a:1c:f6:
                    21:e3:4c:7f:61:dc:91:9e:16:68:f2:56:1f:c9:0e:
                    da:55:63:26:1d:fc:32:33:ff:ac:68:4d:69:92:eb:
                    49:81:b8:73:04:94:24:06:76:5b:f6:66:72:37:eb:
                    6d:a0:de:bf:e8:3b:ae:28:ae:5b:1f:f8:1e:75:db:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:89:73:7B:DC:15:A3:36:6D:51:37:AD:23:19:09:1C:32:0D:3A:60
            X509v3 Authority Key Identifier:
                keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:52:ab:5d:81:12:bb:ad:d0:b8:d3:64:0e:00:38:7a:50:21:
         cb:d0:33:cb:f2:9a:b0:70:96:e1:55:9a:60:69:9e:4a:d9:e3:
         c8:4f:79:6b:10:18:47:a5:48:dd:bb:3d:7e:11:83:1a:24:b5:
         6c:78:0a:a7:16:4a:f7:10:98:be:52:de:b4:32:10:88:07:e0:
         58:80:3b:23:73:ee:1f:70:9f:ed:b9:c1:ce:47:ef:20:64:be:
         24:37:26:78:e9:82:4c:21:31:6c:7e:25:d4:6c:d4:71:3e:a5:
         a9:70:07:10:65:ae:4e:ae:c4:0c:aa:8e:18:81:85:42:1e:1e:
         93:b4:d0:00:98:6b:a7:8e:26:23:7d:7d:43:50:4e:3e:9f:e0:
         3d:8b:67:a5:ba:7c:29:5d:4a:3c:05:0f:6a:fb:dd:0a:51:62:
         ab:b3:bb:da:d6:1e:3a:7b:36:2b:a2:39:84:7e:fb:ea:b2:83:
         4b:5f:31:bd:f3:9f:64:dd:ff:e0:74:64:94:9f:c7:01:3e:37:
         1e:b4:a0:15:48:db:10:e3:15:a6:b9:18:9e:fd:fc:aa:fc:68:
         fe:07:25:5d:d8:aa:ee:11:8c:df:38:bb:2c:0f:98:96:5c:c4:
         0e:f2:77:35:37:e2:5d:d3:79:d3:9d:87:98:5f:fa:12:01:16:
         63:e2:a7:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtdU9+xtqY1VetsglUDtV3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw
ZGFhM2UwHhcNMjUxMjI3MDEwMjE2WhcNMjUxMjI4MDEwMjE2WjAzMTEwLwYDVQQD
EygwODg5NzM3YmRjMTVhMzM2NmQ1MTM3YWQyMzE5MDkxYzMyMGQzYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoEk7QEJWDP+hEkluQmQ5G4YmbSk
/gw6c6LMK4zBKKlsXdVvoR2ECi0uFUpBEYEC0ubVScov+RoqS5B53NduJfjictX+
QPDLcqA67Aobk+QPeTbZdAXnOR1ahg783xLxgqWpNJt6Q63TAI9rpoZc38c+YSe5
5tP3E2XYvSLvK64Df1TPsWz/PbPVsOh7paTbSJ373m5AH8rFJvRHZioF5dFyETSi
5l7z4pOjrsGq0Dpzdxbb0Isr4+ePTwshz6J6HPYh40x/YdyRnhZo8lYfyQ7aVWMm
HfwyM/+saE1pkutJgbhzBJQkBnZb9mZyN+ttoN6/6DuuKK5bH/gedds4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiJc3vcFaM2bVE3rSMZCRwyDTpgMB8GA1UdIwQY
MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt
M2UzMGE0YzRiODI2LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2
LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1KrXYES
u63QuNNkDgA4elAhy9Azy/KasHCW4VWaYGmeStnjyE95axAYR6VI3bs9fhGDGiS1
bHgKpxZK9xCYvlLetDIQiAfgWIA7I3PuH3Cf7bnBzkfvIGS+JDcmeOmCTCExbH4l
1GzUcT6lqXAHEGWuTq7EDKqOGIGFQh4ek7TQAJhrp44mI319Q1BOPp/gPYtnpbp8
KV1KPAUPavvdClFiq7O72tYeOns2K6I5hH776rKDS18xvfOfZN3/4HRklJ/HAT43
HrSgFUjbEOMVprkYnv38qvxo/gclXdiq7hGM3zi7LA+YllzEDvJ3NTfiXdN5052H
mF/6EgEWY+KnTg==
-----END CERTIFICATE-----
Generated at Sat Dec 27 08:10:27 2025 by rpki-client