This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          T4vHTU/FpUE64VRZcd5QrbieXfkVhYorU82T0xJiHCk=
Subject key identifier:   C0:3D:E8:E6:04:98:F3:F4:C4:31:13:35:12:17:56:E6:61:EF:9E:E9
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019B514E9CD1277BE0F7E854030415AC64C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          11F4
Signing time:             Wed 24 Dec 2025 17:01:04 +0000
Manifest this update:     Wed 24 Dec 2025 17:01:04 +0000
Manifest next update:     Thu 25 Dec 2025 17:01:04 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: O7wZsdvEcKS+84Oq7JqU4Jl6kEWKLi/zfDeEOA3o5FI=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 14:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:4e:9c:d1:27:7b:e0:f7:e8:54:03:04:15:ac:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Dec 24 17:01:04 2025 GMT
            Not After : Dec 25 17:01:04 2025 GMT
        Subject: CN=c03de8e60498f3f4c4311335121756e661ef9ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:6f:af:ec:bd:a4:22:e6:cd:21:fa:b7:b2:
                    d3:44:f8:2c:a6:e6:18:6e:ca:c0:61:26:f2:69:99:
                    fc:4a:84:6d:88:f6:2b:9e:3a:b5:94:60:2a:3a:d5:
                    71:4a:44:dc:55:cc:72:1d:c7:8f:d6:d1:f6:a7:61:
                    8b:e4:47:dd:a6:e6:86:95:49:77:59:f5:d5:eb:d0:
                    9f:f6:ed:cd:67:7e:4b:70:eb:01:ba:7b:ef:ef:8a:
                    86:d3:eb:bc:d3:5c:d1:e8:0b:97:68:3f:7c:82:95:
                    cb:85:74:58:88:6b:46:fe:e1:cb:71:48:39:86:73:
                    13:3f:44:45:e4:3f:0d:c0:6b:18:04:e3:1d:26:72:
                    9f:2f:cf:e8:91:d0:d7:70:98:8a:ee:88:b1:bd:f7:
                    88:88:a0:37:be:29:ff:aa:62:32:05:f6:9a:0e:81:
                    2d:9f:45:38:1b:c1:0f:34:18:ae:aa:e4:06:4a:ee:
                    06:58:d3:e1:9b:ae:6c:cc:81:bd:fa:bd:41:bc:dc:
                    f7:7c:fd:a2:0c:df:3f:62:ae:0e:2c:42:8e:c3:da:
                    91:04:d6:11:b4:c4:d9:4a:ad:81:7b:30:16:90:0e:
                    4c:ce:8d:7c:05:d7:dc:0e:0f:fa:f7:1b:ba:d6:94:
                    73:8b:22:d0:0a:eb:f4:0a:e7:c2:e0:9b:7e:19:ff:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:E8:E6:04:98:F3:F4:C4:31:13:35:12:17:56:E6:61:EF:9E:E9
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:10:40:da:0f:59:4d:ab:a4:e7:3c:67:b0:01:48:a0:b9:a1:
         2f:31:76:7d:3b:61:3c:a3:fd:17:0d:d0:69:c5:f8:d4:c5:00:
         99:b2:8b:96:14:1e:79:24:91:0d:d4:72:20:87:1e:30:23:43:
         18:94:11:69:b9:1c:71:ae:7f:ca:8c:a1:64:9d:23:d0:ef:50:
         9d:3a:da:c7:6c:26:94:10:9c:98:e8:57:85:36:f2:67:c8:1a:
         16:77:dc:70:3c:ee:fa:7b:db:be:02:bb:9f:83:a4:eb:f9:d1:
         11:b5:18:23:94:f5:66:83:cf:7b:79:29:59:52:b9:07:86:e4:
         b5:1c:3f:34:78:1f:c4:52:c2:4d:f1:4e:35:32:40:9e:8b:0d:
         e9:47:ac:1f:05:e2:b6:d0:be:ee:72:7a:ee:0a:8d:0a:27:79:
         fb:f4:53:1b:24:7d:dc:dc:14:41:26:f1:cc:b1:51:8c:8c:7b:
         da:42:7b:15:32:81:81:c5:18:67:6d:1f:25:86:1b:73:c6:d0:
         45:36:5d:e6:c0:0d:b7:40:46:71:23:a7:5b:1c:d7:ff:56:46:
         90:e4:a9:97:ba:31:4d:98:37:cc:5d:25:58:f0:fb:bb:75:52:
         cf:4c:80:6d:ce:83:ff:b4:fd:a9:c0:5a:eb:fe:25:d9:31:28:
         d5:d4:e7:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtRTpzRJ3vg9+hUAwQVrGTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjczZGFhZDZkOTMxN2YwMTAxZDQxYTA0MmE2MWU1NzY4
OTQ1M2EwHhcNMjUxMjI0MTcwMTA0WhcNMjUxMjI1MTcwMTA0WjAzMTEwLwYDVQQD
EyhjMDNkZThlNjA0OThmM2Y0YzQzMTEzMzUxMjE3NTZlNjYxZWY5ZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt1vr+y9pCLmzSH6t7LTRPgspuYY
bsrAYSbyaZn8SoRtiPYrnjq1lGAqOtVxSkTcVcxyHceP1tH2p2GL5EfdpuaGlUl3
WfXV69Cf9u3NZ35LcOsBunvv74qG0+u801zR6AuXaD98gpXLhXRYiGtG/uHLcUg5
hnMTP0RF5D8NwGsYBOMdJnKfL8/okdDXcJiK7oixvfeIiKA3vin/qmIyBfaaDoEt
n0U4G8EPNBiuquQGSu4GWNPhm65szIG9+r1BvNz3fP2iDN8/Yq4OLEKOw9qRBNYR
tMTZSq2BezAWkA5Mzo18BdfcDg/69xu61pRziyLQCuv0CufC4Jt+Gf9QuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA96OYEmPP0xDETNRIXVuZh757pMB8GA1UdIwQY
MBaAFHxnParW2TF/AQHUGgQqYeV2iUU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEt
MDRlNDZlZjBjZDIxLzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEtMDRlNDZlZjBjZDIx
LzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRBA2g9Z
Tauk5zxnsAFIoLmhLzF2fTthPKP9Fw3QacX41MUAmbKLlhQeeSSRDdRyIIceMCND
GJQRabkcca5/yoyhZJ0j0O9QnTrax2wmlBCcmOhXhTbyZ8gaFnfccDzu+nvbvgK7
n4Ok6/nREbUYI5T1ZoPPe3kpWVK5B4bktRw/NHgfxFLCTfFONTJAnosN6UesHwXi
ttC+7nJ67gqNCid5+/RTGyR93NwUQSbxzLFRjIx72kJ7FTKBgcUYZ20fJYYbc8bQ
RTZd5sANt0BGcSOnWxzX/1ZGkOSpl7oxTZg3zF0lWPD7u3VSz0yAbc6D/7T9qcBa
6/4l2TEo1dTn8g==
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:59:31 2025 by rpki-client