This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
File:                     V1jLEehCvK8TI2R_O-_u4vxvDiw.mft (raw, json)
Hash identifier:          Ez/1POg8DRITI8+LSv17tLRsw911HWppmccxAimGcp0=
Subject key identifier:   29:DF:D9:08:B5:DA:3F:D8:56:F1:EE:6F:2A:61:1F:65:E0:E4:D4:FD
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Certificate issuer:       /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial:       019B3EA322FC7301D1867C5284F371B37623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
Manifest number:          067F
Signing time:             Sun 21 Dec 2025 02:00:37 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:37 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:37 +0000
Files and hashes:         1: DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa (hash: mIWQtuRUYMAIMNWTk2R94Vc9M/vD3qRf+T1I/Wud7SU=)
                          2: GuwUdDFQjBufx1Rw2XvyCI5KCLY.roa (hash: gUEwC/edl/xfPxryFYxMx6Htdh7hvRtXE9Fd/Bp9SoY=)
                          3: V1jLEehCvK8TI2R_O-_u4vxvDiw.crl (hash: McJREOENEMLASZJQh3OIdp0Y5udnU6uthJzg+WitLes=)
                          4: mdhPoB9Xi_SvHQW0Npo5tBiYYRw.roa (hash: N1Pm29zQ5qNztRCN8wb+WCQ/lCg8dOrqcVoxO2AK6Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:22:fc:73:01:d1:86:7c:52:84:f3:71:b3:76:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
        Validity
            Not Before: Dec 21 02:00:37 2025 GMT
            Not After : Dec 22 02:00:37 2025 GMT
        Subject: CN=29dfd908b5da3fd856f1ee6f2a611f65e0e4d4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:c8:05:0c:b5:0e:a6:94:d5:c6:04:35:ec:
                    66:f2:b8:63:d2:58:4f:58:90:a4:8f:c7:d9:04:6d:
                    01:0a:8f:fa:5e:33:d3:34:57:6e:64:bb:23:4b:27:
                    58:de:bb:53:e9:98:f1:1e:a2:e8:a6:82:97:5e:cc:
                    2b:11:30:ec:31:72:9f:b5:dc:cd:2e:41:d6:3a:af:
                    28:d4:b2:cf:89:88:5a:1d:68:e2:74:ff:16:31:d4:
                    55:0b:fa:af:94:a0:27:af:fd:67:b4:c9:5d:e8:42:
                    ac:33:57:4a:89:a0:6e:37:18:5e:a8:94:71:1c:5d:
                    2c:59:e2:b4:eb:69:e4:85:cf:0f:8e:cb:e5:1d:48:
                    91:45:4e:c6:d7:da:07:83:ef:e8:f9:53:4a:e0:a2:
                    29:21:cc:ce:bc:90:17:50:be:12:65:6d:56:f8:d5:
                    c7:f1:e2:90:25:47:16:5f:51:b8:28:77:10:fc:f3:
                    3f:74:51:19:49:86:b2:cb:aa:ba:e3:35:a9:bf:7f:
                    27:4b:9a:48:77:51:cb:3e:2f:c5:eb:a3:6f:e4:0d:
                    45:70:6f:22:54:8f:5d:5f:bb:37:ac:21:b6:e6:1e:
                    97:7b:b3:86:f7:ea:da:cc:6b:17:d5:c9:bc:ae:27:
                    2a:56:88:70:d4:ea:99:02:e7:7c:a5:cf:e1:35:d6:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:D9:08:B5:DA:3F:D8:56:F1:EE:6F:2A:61:1F:65:E0:E4:D4:FD
            X509v3 Authority Key Identifier:
                keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:1b:45:11:51:86:5a:5d:94:63:2c:54:eb:0f:26:e5:35:
         35:dc:d6:90:e9:12:d3:91:5f:75:73:74:5b:ab:6a:48:b6:ef:
         9a:26:31:42:fd:f4:f2:c0:1e:5e:01:13:7a:1b:4e:66:57:aa:
         e0:2e:45:53:16:34:ce:ac:4a:d2:ae:46:6c:c6:0e:c1:90:d0:
         4a:94:11:e4:7d:f3:39:b2:aa:71:f3:23:d5:05:6e:86:6d:04:
         1c:07:6d:6b:4a:f1:6a:b6:29:0e:2d:35:e3:7c:14:d0:1b:d9:
         25:e0:45:44:d8:3f:43:52:c2:d2:3c:47:a6:34:d7:9e:ef:16:
         77:a7:c3:47:5f:ee:17:53:7a:2f:52:9a:dc:e3:0c:6d:e8:50:
         83:9c:c2:b1:e6:da:1b:e1:cb:ed:74:0b:06:b1:8d:18:60:0e:
         a1:d0:04:ea:38:7a:d5:4b:7d:ae:d4:72:63:cb:6d:71:5e:2e:
         dd:66:f8:73:5d:c6:9c:d8:91:d4:49:4c:c7:c2:de:48:9c:8f:
         b3:7c:6e:84:c2:c1:5c:ac:1e:2d:ac:1a:a1:62:f4:86:36:28:
         a9:74:6d:0c:fe:d3:78:82:f3:48:db:d2:49:89:80:ff:3b:74:
         77:11:61:55:02:15:6a:62:5c:86:e5:3a:f7:8e:c5:bd:57:d5:
         ff:1e:99:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+oyL8cwHRhnxShPNxs3YjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2
ZjBlMmMwHhcNMjUxMjIxMDIwMDM3WhcNMjUxMjIyMDIwMDM3WjAzMTEwLwYDVQQD
EygyOWRmZDkwOGI1ZGEzZmQ4NTZmMWVlNmYyYTYxMWY2NWUwZTRkNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5DIBQy1DqaU1cYENexm8rhj0lhP
WJCkj8fZBG0BCo/6XjPTNFduZLsjSydY3rtT6ZjxHqLopoKXXswrETDsMXKftdzN
LkHWOq8o1LLPiYhaHWjidP8WMdRVC/qvlKAnr/1ntMld6EKsM1dKiaBuNxheqJRx
HF0sWeK062nkhc8PjsvlHUiRRU7G19oHg+/o+VNK4KIpIczOvJAXUL4SZW1W+NXH
8eKQJUcWX1G4KHcQ/PM/dFEZSYayy6q64zWpv38nS5pId1HLPi/F66Nv5A1FcG8i
VI9dX7s3rCG25h6Xe7OG9+razGsX1cm8ricqVohw1OqZAud8pc/hNdaKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnf2Qi12j/YVvHubyphH2Xg5NT9MB8GA1UdIwQY
MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt
OGJiZjhiZmM2ZDhlLzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl
LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkj8bRRFR
hlpdlGMsVOsPJuU1NdzWkOkS05FfdXN0W6tqSLbvmiYxQv308sAeXgETehtOZleq
4C5FUxY0zqxK0q5GbMYOwZDQSpQR5H3zObKqcfMj1QVuhm0EHAdta0rxarYpDi01
43wU0BvZJeBFRNg/Q1LC0jxHpjTXnu8Wd6fDR1/uF1N6L1Ka3OMMbehQg5zCseba
G+HL7XQLBrGNGGAOodAE6jh61Ut9rtRyY8ttcV4u3Wb4c13GnNiR1ElMx8LeSJyP
s3xuhMLBXKweLawaoWL0hjYoqXRtDP7TeILzSNvSSYmA/zt0dxFhVQIVamJchuU6
947FvVfV/x6ZuA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:58 2025 by rpki-client