This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File:                     AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier:          PAkIU8VRIM3PdsR2fsVtximsx4538gXXm38sAHFkPZ0=
Subject key identifier:   C4:4F:20:93:EC:46:D1:04:9B:BA:7F:A5:8A:7C:61:A3:93:2D:F2:51
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer:       /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial:       019B360E0D32E2B51C877C0195DC98F512B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number:          085B
Signing time:             Fri 19 Dec 2025 10:00:49 +0000
Manifest this update:     Fri 19 Dec 2025 10:00:49 +0000
Manifest next update:     Sat 20 Dec 2025 10:00:49 +0000
Files and hashes:         1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: L7tZE9n/8IjDxzDrpfz2KcutAicByEi9berggvTRM5Y=)
                          2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
                          3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:0e:0d:32:e2:b5:1c:87:7c:01:95:dc:98:f5:12:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
        Validity
            Not Before: Dec 19 10:00:49 2025 GMT
            Not After : Dec 20 10:00:49 2025 GMT
        Subject: CN=c44f2093ec46d1049bba7fa58a7c61a3932df251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:cb:1b:c0:69:76:17:cd:ec:e6:01:93:44:
                    0a:67:ba:e8:e5:9d:52:7b:60:b8:20:88:d3:0f:47:
                    e5:e0:1f:be:75:19:e1:cc:56:84:8a:ad:a3:48:eb:
                    f2:4c:17:35:46:88:e3:5b:96:97:8e:38:94:dd:56:
                    96:98:e6:ce:8a:66:96:5c:4a:75:c8:9d:ad:63:e6:
                    a3:d8:00:8e:e0:ed:fe:63:9e:7f:56:39:bb:c4:e4:
                    b4:e4:4f:e1:d2:1d:9a:b2:92:49:81:bd:77:d8:21:
                    ca:2c:51:7c:2d:75:87:e7:f5:10:33:f6:0a:74:5c:
                    ee:b8:63:23:bf:e8:e0:c6:58:54:e4:ab:df:f6:10:
                    9e:b3:30:12:29:04:2d:c6:94:7c:ec:60:f5:c9:f3:
                    d0:90:12:e6:db:52:ee:64:a2:83:5f:8c:5f:5a:d4:
                    22:40:19:58:6f:35:0d:4d:92:8d:a8:ba:5e:fe:2d:
                    f7:06:5b:1b:c3:01:03:a7:83:05:0b:7f:95:c3:ac:
                    cd:01:b0:c4:65:ed:25:0b:13:40:7f:92:84:f4:cc:
                    66:f1:80:01:26:54:a9:37:8c:da:ee:99:65:cf:80:
                    53:a9:02:a2:9d:a5:ba:4e:66:b8:1b:b9:66:96:f2:
                    c9:93:eb:f2:1b:11:c0:e9:b8:06:92:9d:e6:d8:2c:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4F:20:93:EC:46:D1:04:9B:BA:7F:A5:8A:7C:61:A3:93:2D:F2:51
            X509v3 Authority Key Identifier:
                keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c5:9e:1d:2e:1a:b7:ac:50:91:57:f8:73:5b:50:46:9d:57:
         94:c0:4b:24:0a:07:0d:2c:52:21:fe:34:50:73:a4:76:5a:b1:
         7d:a5:68:ab:f8:00:b4:cf:23:5d:b5:b2:41:40:b5:15:c1:08:
         9a:6e:57:78:20:ec:d4:25:35:d5:f5:2e:18:77:43:3c:6e:2d:
         1d:d0:92:9a:c5:36:e8:b3:94:af:7e:14:09:6b:f2:2d:98:45:
         27:05:3c:e9:b9:04:29:62:ac:a4:27:4c:e2:f4:a5:69:94:20:
         82:ac:27:b5:cd:ab:49:97:49:53:17:42:f0:99:b6:2b:b8:c0:
         21:7a:b5:5e:0d:77:35:66:6e:2b:db:49:54:21:49:49:87:50:
         dc:d1:b0:1c:74:34:3c:90:f2:29:eb:b7:06:66:b8:7c:24:45:
         1b:fc:fc:c0:52:fd:ff:2a:06:18:1e:31:cc:b1:aa:d2:ca:ac:
         f4:7c:f8:c6:b1:99:f0:66:ec:2b:78:4f:5b:f1:99:62:23:b6:
         c4:af:c2:cf:06:21:8d:34:c1:71:c1:79:ec:88:76:fb:f2:3c:
         45:5d:6d:76:9d:2b:e7:16:ca:5d:58:52:67:33:0f:58:98:e0:
         c0:42:5b:5c:6b:64:19:b9:86:ed:02:68:b0:c7:6d:e8:12:5c:
         95:d8:3a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2Dg0y4rUch3wBldyY9RK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjUxMjE5MTAwMDQ5WhcNMjUxMjIwMTAwMDQ5WjAzMTEwLwYDVQQD
EyhjNDRmMjA5M2VjNDZkMTA0OWJiYTdmYTU4YTdjNjFhMzkzMmRmMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzArLG8BpdhfN7OYBk0QKZ7ro5Z1S
e2C4IIjTD0fl4B++dRnhzFaEiq2jSOvyTBc1RojjW5aXjjiU3VaWmObOimaWXEp1
yJ2tY+aj2ACO4O3+Y55/Vjm7xOS05E/h0h2aspJJgb132CHKLFF8LXWH5/UQM/YK
dFzuuGMjv+jgxlhU5Kvf9hCeszASKQQtxpR87GD1yfPQkBLm21LuZKKDX4xfWtQi
QBlYbzUNTZKNqLpe/i33BlsbwwEDp4MFC3+Vw6zNAbDEZe0lCxNAf5KE9Mxm8YAB
JlSpN4za7pllz4BTqQKinaW6Tma4G7lmlvLJk+vyGxHA6bgGkp3m2CwF2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRPIJPsRtEEm7p/pYp8YaOTLfJRMB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsWeHS4a
t6xQkVf4c1tQRp1XlMBLJAoHDSxSIf40UHOkdlqxfaVoq/gAtM8jXbWyQUC1FcEI
mm5XeCDs1CU11fUuGHdDPG4tHdCSmsU26LOUr34UCWvyLZhFJwU86bkEKWKspCdM
4vSlaZQggqwntc2rSZdJUxdC8Jm2K7jAIXq1Xg13NWZuK9tJVCFJSYdQ3NGwHHQ0
PJDyKeu3Bma4fCRFG/z8wFL9/yoGGB4xzLGq0sqs9Hz4xrGZ8GbsK3hPW/GZYiO2
xK/CzwYhjTTBccF57Ih2+/I8RV1tdp0r5xbKXVhSZzMPWJjgwEJbXGtkGbmG7QJo
sMdt6BJcldg6ZQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:56 2025 by rpki-client