This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          VxV7CEbgLkPBmmkHog0DIzq3doMN131Bem52vCOBQAY=
Subject key identifier:   18:94:3D:2C:D5:D5:BE:FC:5D:8D:5A:A4:62:AC:99:25:8A:5B:16:37
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019B27AE60D80401344566AE38DB01119BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          16EC
Signing time:             Tue 16 Dec 2025 15:01:38 +0000
Manifest this update:     Tue 16 Dec 2025 15:01:38 +0000
Manifest next update:     Wed 17 Dec 2025 15:01:38 +0000
Files and hashes:         1: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: Mh2MmK020YtBGImYuJyufW49dVJ8oi/ycPOxBHtP1m8=)
                          3: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=)
                          4: fHwbuKmo2CK36Zvix3cU0fytdMg.roa (hash: 837DuOduNlriLHDjUbJ8NtGNUf2LQkcWK+CE6Nfv/to=)
                          5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:ae:60:d8:04:01:34:45:66:ae:38:db:01:11:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Dec 16 15:01:38 2025 GMT
            Not After : Dec 17 15:01:38 2025 GMT
        Subject: CN=18943d2cd5d5befc5d8d5aa462ac99258a5b1637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:11:7e:eb:99:27:da:65:0e:af:33:96:e5:
                    85:05:24:74:bc:3b:44:c9:bc:e6:d8:83:56:1d:87:
                    81:44:0f:a9:a0:1c:83:61:82:a2:c9:3c:d1:79:1c:
                    f1:c0:05:c2:14:dc:39:25:0d:4a:e8:7c:26:f9:d7:
                    03:25:50:2d:cd:79:10:ce:b0:f4:ba:59:f4:15:0a:
                    92:e3:91:20:94:f5:57:5c:89:b7:6e:8a:33:5d:b8:
                    60:d8:ca:15:78:e8:bf:51:b1:db:f8:68:48:2e:1d:
                    3a:6e:1a:9f:95:0c:e1:6d:6e:3f:21:97:68:b9:de:
                    ac:34:3e:b3:71:4b:19:1c:4b:06:a1:64:42:b0:06:
                    b8:53:1e:60:96:3f:20:76:1d:5b:6d:79:b9:14:dc:
                    49:c5:6f:3f:d7:6c:79:ee:d5:1c:bd:d2:ea:16:22:
                    4b:3f:0f:92:25:27:21:e6:b0:60:0b:19:34:c1:c2:
                    81:41:6e:a1:15:76:2d:2c:4a:0f:bf:8b:1c:2f:4b:
                    1d:99:01:65:8e:f6:b9:36:77:8b:2e:fb:53:c2:33:
                    a5:77:1e:9f:09:1e:04:d7:32:49:08:c0:2a:da:dd:
                    11:c2:94:cd:5a:05:b7:e9:47:13:e4:25:8f:22:66:
                    05:fa:31:0b:0a:79:30:13:12:9f:d1:0e:99:ae:6d:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:3D:2C:D5:D5:BE:FC:5D:8D:5A:A4:62:AC:99:25:8A:5B:16:37
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:17:9d:80:6e:c8:c2:b4:93:67:13:0e:eb:8e:14:68:ac:
         2a:dd:cd:f6:af:43:30:30:6c:af:00:bd:bd:f1:03:a4:ef:68:
         6d:38:e1:47:7f:93:34:cb:d3:60:5b:4b:56:c6:4d:f0:51:83:
         d7:c4:95:13:dd:d3:2d:84:2e:5d:3d:24:5a:9b:72:a9:3b:f4:
         3d:69:8b:26:33:72:69:6a:fc:e3:80:30:42:64:c7:a8:cd:71:
         d2:f4:b9:dc:fd:1d:36:32:ae:a7:fe:92:ac:f9:24:37:69:91:
         82:11:98:3f:02:29:77:6e:bd:40:d0:b6:96:ba:86:fc:d8:34:
         2a:5d:21:4d:4d:0e:65:6f:a6:45:07:6e:97:18:e7:77:61:71:
         3f:05:01:d0:f6:c5:a1:d7:73:0b:ee:62:66:3a:59:7b:57:f6:
         bb:87:6e:75:06:46:e7:80:09:5b:41:06:84:93:f4:6c:58:c1:
         8b:7a:df:99:b0:de:b4:cb:9d:a8:3a:5c:2b:e7:33:ad:08:07:
         de:e6:18:fb:f1:ab:4a:1a:b8:be:ab:f1:0d:69:68:8b:ea:66:
         2f:27:7a:e3:4a:61:a0:13:ed:95:00:7c:54:d3:f5:9d:fe:d0:
         db:47:ab:68:d7:83:14:e8:50:18:3a:fb:8a:a2:59:ba:fd:6c:
         8e:0f:c8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsnrmDYBAE0RWauONsBEZvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh
MDMxMTIwHhcNMjUxMjE2MTUwMTM4WhcNMjUxMjE3MTUwMTM4WjAzMTEwLwYDVQQD
EygxODk0M2QyY2Q1ZDViZWZjNWQ4ZDVhYTQ2MmFjOTkyNThhNWIxNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy58RfuuZJ9plDq8zluWFBSR0vDtE
ybzm2INWHYeBRA+poByDYYKiyTzReRzxwAXCFNw5JQ1K6Hwm+dcDJVAtzXkQzrD0
uln0FQqS45EglPVXXIm3boozXbhg2MoVeOi/UbHb+GhILh06bhqflQzhbW4/IZdo
ud6sND6zcUsZHEsGoWRCsAa4Ux5glj8gdh1bbXm5FNxJxW8/12x57tUcvdLqFiJL
Pw+SJSch5rBgCxk0wcKBQW6hFXYtLEoPv4scL0sdmQFljva5NneLLvtTwjOldx6f
CR4E1zJJCMAq2t0RwpTNWgW36UcT5CWPImYF+jELCnkwExKf0Q6Zrm0XjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiUPSzV1b78XY1apGKsmSWKWxY3MB8GA1UdIwQY
MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt
ZDYyZmE2MzE5ZmQ0LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0
LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOewXnYBu
yMK0k2cTDuuOFGisKt3N9q9DMDBsrwC9vfEDpO9obTjhR3+TNMvTYFtLVsZN8FGD
18SVE93TLYQuXT0kWptyqTv0PWmLJjNyaWr844AwQmTHqM1x0vS53P0dNjKup/6S
rPkkN2mRghGYPwIpd269QNC2lrqG/Ng0Kl0hTU0OZW+mRQdulxjnd2FxPwUB0PbF
oddzC+5iZjpZe1f2u4dudQZG54AJW0EGhJP0bFjBi3rfmbDetMudqDpcK+czrQgH
3uYY+/GrShq4vqvxDWloi+pmLyd640phoBPtlQB8VNP1nf7Q20eraNeDFOhQGDr7
iqJZuv1sjg/IBg==
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:31:44 2025 by rpki-client