This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File:                     IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier:          rb4KdCyOZci69WgCrDRbw602bb/biufLE5Kpu+gRFq0=
Subject key identifier:   01:56:3A:E4:27:0A:F8:9C:D0:23:31:87:FF:47:AA:C8:FF:56:2E:82
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer:       /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial:       019B446EE0955D44E9AD9D81057BFA8F32F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number:          0413
Signing time:             Mon 22 Dec 2025 05:01:15 +0000
Manifest this update:     Mon 22 Dec 2025 05:01:15 +0000
Manifest next update:     Tue 23 Dec 2025 05:01:15 +0000
Files and hashes:         1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
                          2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: N+qVH0E/YBPwl2Lc0EcApNpGyfT30UJFd6DLWQ7DcbU=)
                          3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:6e:e0:95:5d:44:e9:ad:9d:81:05:7b:fa:8f:32:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
        Validity
            Not Before: Dec 22 05:01:15 2025 GMT
            Not After : Dec 23 05:01:15 2025 GMT
        Subject: CN=01563ae4270af89cd0233187ff47aac8ff562e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:5a:0e:d5:f1:35:13:7e:a5:d9:aa:29:be:
                    bf:fc:2c:f5:5c:f3:66:32:d3:bd:08:ee:9f:d0:89:
                    10:b2:35:f3:70:0b:48:de:46:e1:67:19:d8:33:d9:
                    74:71:37:c6:a7:78:19:0b:62:d4:65:98:fb:a6:ca:
                    fd:4a:6d:dc:4e:b9:22:3c:a8:14:8e:b3:5e:96:ea:
                    57:82:81:6a:31:7a:29:21:5e:e1:e7:9c:e7:e2:42:
                    12:c9:42:4f:d3:c9:d9:ff:63:08:cd:1f:d4:03:48:
                    d5:0b:64:15:e6:4d:59:91:b8:a9:f8:1a:fc:f6:f7:
                    58:48:62:af:05:ef:45:de:53:e3:97:fb:44:7e:25:
                    85:eb:ea:e7:0e:76:bf:81:65:7b:63:83:42:10:eb:
                    d2:b3:8a:de:ec:b6:53:dc:0a:c8:a8:1a:72:b2:cf:
                    ec:ab:e1:5a:ab:70:41:9f:16:8d:0b:d3:ee:93:bc:
                    cc:89:bb:44:2d:70:8f:82:ca:35:e3:9b:01:c8:a3:
                    33:86:47:8d:cd:1d:8c:2c:2c:33:22:4f:ac:b7:62:
                    68:45:94:d4:7f:53:75:72:36:66:aa:2a:19:cd:37:
                    8a:ee:ef:53:27:c2:29:b0:af:dc:e8:36:bc:da:9a:
                    77:c2:7b:5a:bd:e0:fb:aa:bf:20:05:39:e1:9b:a4:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:3A:E4:27:0A:F8:9C:D0:23:31:87:FF:47:AA:C8:FF:56:2E:82
            X509v3 Authority Key Identifier:
                keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:74:ef:e5:6a:b8:19:1d:16:6b:95:75:68:32:73:bf:ef:18:
         87:00:a2:ce:93:b1:b7:b8:95:b0:c8:a4:97:5a:1b:7a:18:bb:
         1d:b9:d2:a3:14:4f:e2:59:e8:7f:cb:06:7e:c1:73:87:fe:dc:
         55:3c:4f:23:3f:a2:de:b1:f2:47:94:b6:5f:26:87:9b:5d:8e:
         20:b5:ba:42:6a:c7:01:72:2a:d9:21:a0:02:2b:af:63:bf:bd:
         76:96:41:09:31:7f:50:d4:1f:cc:b6:86:32:44:fc:c0:14:75:
         48:89:c0:50:28:2b:ba:12:6a:c3:9c:36:1c:3e:85:fe:28:5d:
         a6:3c:88:10:f8:88:2b:c3:d2:b2:96:d4:a2:9e:bc:bc:4e:3b:
         2f:81:09:81:5a:5e:fe:d3:32:af:06:7a:1c:7e:f3:55:ff:ac:
         ec:17:d9:dd:ff:78:a9:5c:18:17:83:6f:b8:56:23:0d:99:12:
         90:bc:72:0b:51:8f:ab:e8:fb:f9:08:56:8b:19:d9:8a:2a:f6:
         3a:29:43:7a:60:66:e4:fd:c6:fb:e1:89:6a:13:09:98:25:f5:
         28:8c:05:1c:2c:3c:f5:f0:e4:f4:7a:4d:60:c5:30:4f:eb:04:
         ca:f0:57:12:7f:91:01:71:90:97:8a:7c:e8:6d:5d:2d:64:dc:
         ea:bd:d5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEbuCVXUTprZ2BBXv6jzL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGE5ODU5ZmJmMmU2YmMzZWQ4MjczOTExNzYyYmQ4ZmE1
ZTgwMmUwHhcNMjUxMjIyMDUwMTE1WhcNMjUxMjIzMDUwMTE1WjAzMTEwLwYDVQQD
EygwMTU2M2FlNDI3MGFmODljZDAyMzMxODdmZjQ3YWFjOGZmNTYyZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RxaDtXxNRN+pdmqKb6//Cz1XPNm
MtO9CO6f0IkQsjXzcAtI3kbhZxnYM9l0cTfGp3gZC2LUZZj7psr9Sm3cTrkiPKgU
jrNelupXgoFqMXopIV7h55zn4kISyUJP08nZ/2MIzR/UA0jVC2QV5k1Zkbip+Br8
9vdYSGKvBe9F3lPjl/tEfiWF6+rnDna/gWV7Y4NCEOvSs4re7LZT3ArIqBpyss/s
q+Faq3BBnxaNC9Puk7zMibtELXCPgso145sByKMzhkeNzR2MLCwzIk+st2JoRZTU
f1N1cjZmqioZzTeK7u9TJ8IpsK/c6Da82pp3wntaveD7qr8gBTnhm6RXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFWOuQnCvic0CMxh/9Hqsj/Vi6CMB8GA1UdIwQY
MBaAFCIKmFn78ua8PtgnORF2K9j6XoAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdxWVdmdnk1cnctMkNjNUVYWXIyUHBlZ0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lODI4MWYtY2QxNy00ZTAyLThmY2Et
OGM1YWMwNmMxNGE4LzEvSWdxWVdmdnk1cnctMkNjNUVYWXIyUHBlZ0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lODI4MWYtY2QxNy00ZTAyLThmY2EtOGM1YWMwNmMxNGE4
LzEvSWdxWVdmdnk1cnctMkNjNUVYWXIyUHBlZ0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3Tv5Wq4
GR0Wa5V1aDJzv+8YhwCizpOxt7iVsMikl1obehi7HbnSoxRP4lnof8sGfsFzh/7c
VTxPIz+i3rHyR5S2XyaHm12OILW6QmrHAXIq2SGgAiuvY7+9dpZBCTF/UNQfzLaG
MkT8wBR1SInAUCgruhJqw5w2HD6F/ihdpjyIEPiIK8PSspbUop68vE47L4EJgVpe
/tMyrwZ6HH7zVf+s7BfZ3f94qVwYF4NvuFYjDZkSkLxyC1GPq+j7+QhWixnZiir2
OilDemBm5P3G++GJahMJmCX1KIwFHCw89fDk9HpNYMUwT+sEyvBXEn+RAXGQl4p8
6G1dLWTc6r3V4g==
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:31:20 2025 by rpki-client