This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File:                     493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier:          AMWCfm5Ay6bC1S6LGudOzw2zsGyUb46Fd0DUQ8Qn1C0=
Subject key identifier:   9C:36:D2:24:CD:83:1F:BF:9C:45:96:00:94:BF:82:E7:99:B2:49:EA
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer:       /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial:       019B541933C95021520DA3E2C021AADC5823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number:          0FFC
Signing time:             Thu 25 Dec 2025 06:01:36 +0000
Manifest this update:     Thu 25 Dec 2025 06:01:36 +0000
Manifest next update:     Fri 26 Dec 2025 06:01:36 +0000
Files and hashes:         1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: jlfHqwGtZLUSinfcfUZYZEqSryBdqcgBqo/XyaGKX78=)
                          2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:54:19:33:c9:50:21:52:0d:a3:e2:c0:21:aa:dc:58:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
        Validity
            Not Before: Dec 25 06:01:36 2025 GMT
            Not After : Dec 26 06:01:36 2025 GMT
        Subject: CN=9c36d224cd831fbf9c45960094bf82e799b249ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:5c:2b:51:2c:2d:e6:61:26:25:b8:a8:3e:
                    a7:a5:45:4b:d1:81:06:a8:07:f5:08:06:c1:da:14:
                    cf:45:23:5c:94:d9:63:36:75:3e:ce:c1:40:79:30:
                    a0:c5:e9:12:2b:0f:87:0c:ac:d3:c7:41:5d:c3:96:
                    4f:6e:bd:3e:78:60:b3:6e:53:aa:b6:f5:47:74:5d:
                    3d:75:9f:a2:91:54:21:1a:d3:33:75:e8:32:87:7d:
                    1a:ef:aa:97:2a:57:33:01:1c:a5:fe:ae:b3:0e:93:
                    4d:95:64:29:85:96:d2:b3:97:87:be:9d:3a:2f:80:
                    29:55:f7:5c:02:56:84:9c:93:61:d0:56:f5:8d:bd:
                    5e:65:9b:e2:f0:f6:30:d4:e0:87:7f:f3:b0:96:39:
                    78:51:9e:a2:c6:8c:8a:5d:1b:64:7b:ec:c4:4f:31:
                    68:90:37:a1:2a:79:bc:a5:09:da:2e:c1:bc:d1:fa:
                    c0:6a:22:14:af:87:d5:5b:3b:9d:ec:6e:c7:53:20:
                    89:75:56:2d:db:bb:77:21:58:53:9e:44:95:89:49:
                    90:b4:a0:13:a2:88:67:7f:58:5b:c2:e6:d0:8d:62:
                    e2:2f:c0:94:7e:39:9d:eb:a0:c1:5f:11:6d:81:e6:
                    fc:bb:f3:6f:57:bf:08:68:9e:26:ee:87:5f:17:f9:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:D2:24:CD:83:1F:BF:9C:45:96:00:94:BF:82:E7:99:B2:49:EA
            X509v3 Authority Key Identifier:
                keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:cb:f2:a2:7c:c7:0b:85:c7:ab:77:9c:be:bc:fe:36:50:
         61:ce:04:db:44:aa:27:22:20:49:81:c6:0b:76:c0:e4:68:2c:
         bb:87:12:59:ff:bd:a0:b6:f9:eb:14:4a:8d:26:fc:3c:be:b6:
         e9:04:5b:11:5b:2f:6f:33:a9:1f:88:9c:85:3d:9a:d1:02:b6:
         c3:45:7e:7f:f4:b3:4e:98:62:83:65:11:3a:5e:f6:70:2c:53:
         ed:8b:7e:66:d1:40:f7:7b:0e:57:8d:86:3b:60:4c:07:26:36:
         aa:51:ab:75:ac:a1:73:4d:3c:3e:74:09:93:b7:38:4a:b5:1e:
         69:80:c5:df:c8:4a:8a:8c:4d:db:12:d4:6f:c5:5e:40:e0:98:
         2d:ff:57:1f:b0:24:26:74:9c:1c:db:e6:d5:17:0d:fc:e4:b5:
         da:2c:8e:3e:44:b1:79:39:ac:fe:94:f8:a2:9e:85:a4:8e:04:
         5a:9d:71:a0:e4:ed:28:01:da:47:61:d6:76:a6:88:f9:4c:7a:
         cc:b4:f6:3c:df:07:f2:75:50:f7:4b:1d:d8:ba:99:ac:71:a2:
         8e:47:14:89:a0:a3:04:3d:5a:c8:09:15:c4:0d:cb:f0:58:2a:
         af:f8:57:f2:bd:d1:21:ce:93:8a:0f:8e:e5:0d:7b:8b:1e:ef:
         81:b9:88:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtUGTPJUCFSDaPiwCGq3FgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjUxMjI1MDYwMTM2WhcNMjUxMjI2MDYwMTM2WjAzMTEwLwYDVQQD
Eyg5YzM2ZDIyNGNkODMxZmJmOWM0NTk2MDA5NGJmODJlNzk5YjI0OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqadcK1EsLeZhJiW4qD6npUVL0YEG
qAf1CAbB2hTPRSNclNljNnU+zsFAeTCgxekSKw+HDKzTx0Fdw5ZPbr0+eGCzblOq
tvVHdF09dZ+ikVQhGtMzdegyh30a76qXKlczARyl/q6zDpNNlWQphZbSs5eHvp06
L4ApVfdcAlaEnJNh0Fb1jb1eZZvi8PYw1OCHf/Owljl4UZ6ixoyKXRtke+zETzFo
kDehKnm8pQnaLsG80frAaiIUr4fVWzud7G7HUyCJdVYt27t3IVhTnkSViUmQtKAT
oohnf1hbwubQjWLiL8CUfjmd66DBXxFtgeb8u/NvV78IaJ4m7odfF/lZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw20iTNgx+/nEWWAJS/gueZsknqMB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1HL8qJ8
xwuFx6t3nL68/jZQYc4E20SqJyIgSYHGC3bA5Ggsu4cSWf+9oLb56xRKjSb8PL62
6QRbEVsvbzOpH4ichT2a0QK2w0V+f/SzTphig2UROl72cCxT7Yt+ZtFA93sOV42G
O2BMByY2qlGrdayhc008PnQJk7c4SrUeaYDF38hKioxN2xLUb8VeQOCYLf9XH7Ak
JnScHNvm1RcN/OS12iyOPkSxeTms/pT4op6FpI4EWp1xoOTtKAHaR2HWdqaI+Ux6
zLT2PN8H8nVQ90sd2LqZrHGijkcUiaCjBD1ayAkVxA3L8Fgqr/hX8r3RIc6Tig+O
5Q17ix7vgbmIvg==
-----END CERTIFICATE-----
Generated at Thu Dec 25 09:07:02 2025 by rpki-client