This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
File:                     b56WltzPbBpDIJBAhRSuzcP2Bzk.mft (raw, json)
Hash identifier:          /2eDj3bcZsvN8BX9Chi99R+Eqr5rx6squsRLWBAgSAk=
Subject key identifier:   C9:0B:61:8C:D5:5E:67:60:45:97:49:0F:0C:EB:EB:54:99:6D:FB:67
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019B3CEC81C707A7B71AE8D30D0091EEC336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
Manifest number:          0E9E
Signing time:             Sat 20 Dec 2025 18:01:31 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:31 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:31 +0000
Files and hashes:         1: 1-NiC19PFJdVr-VuE1N7tWrIBE9Q.roa (hash: 0HAHPWXREzbwDwtij8FRpFriyrnHpfOye4GKnuxuEBo=)
                          2: 2ZJdZlNQngRUDvl5p6RXSIppK54.roa (hash: 5/RI/0rZcz+9JmaJZqOiKNXlkXj8pJBz9ZQmlsLnR54=)
                          3: 6nWnFXyS5F1ASwTmxTI-OKrVInw.roa (hash: nIb7NvpCUlKnok0WYLAdZJHgh2sr4DtEdqaSpiUSP2U=)
                          4: IV7k3Tjdhy4ZX_pfulT7j2N4neg.roa (hash: bOlJxw58BeHAyOfR0fMmgPMaYfohjFrYpoO6kc7FZd4=)
                          5: JepVTVOXgV6-PNcYm4B25-og_Bw.roa (hash: VKqDemplzQ4s9jiGQQ+ztyQv75PYRo6TWHvEcx19U2s=)
                          6: MncpHd9QqX2ka0is5mCmp6Ls4EE.roa (hash: rNntJON3CyCfJy9LGsF58CLKoNGRCBJyCvrP9s3kE9g=)
                          7: PlNj2d6nJdCalfpN6r_rJytfYJI.roa (hash: 0wdTzkVtCGDZ5ADOoR8XnEMg9MH672ZEq8atlwavEHU=)
                          8: Vx78BtYZth8fkOAc3-R4JCOAWDQ.roa (hash: bCA21gOWhnMn30bvClWd1qAWHLtWkJnH/m+zGg0euus=)
                          9: b56WltzPbBpDIJBAhRSuzcP2Bzk.crl (hash: XP1CBpcsoHfaHloq3hL6o6A8Nb+A8VX+8C0/1gIFW0s=)
                          10: eF9lTSZjCnQxVBcCyaZ2_iTyyL4.roa (hash: C2f9yp+5cS9RVlmylbg05LRT6roHKpucks8wQ6aDfQ4=)
                          11: m861Xc-eiVog3f6I2l4jMFpfKnI.roa (hash: bz8DvDySjSOvcI2wBT0l0sJFxCwbCuCeVaGQ7jMEnBc=)
                          12: r0y4_p3v5Qi0zsEH8MZwCFHKVHo.roa (hash: +N6f1cYwDaozp4bPuRyYm+W73Qzi4a3F93O+XbdQ/No=)
                          13: yHWUmeMzyGZrJ1tbuLlTdARQBVM.roa (hash: OtFX28r4iu73s34n8DPvcMtSjAQCfr4M7hCbMX4XwLI=)
                          14: yRCpMkJ705selkT08I36IMmYIlY.roa (hash: hloxziWwUtIN0Koepq/2gYgoxDx7Sw8NWk4nK4ub/I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:81:c7:07:a7:b7:1a:e8:d3:0d:00:91:ee:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Dec 20 18:01:31 2025 GMT
            Not After : Dec 21 18:01:31 2025 GMT
        Subject: CN=c90b618cd55e67604597490f0cebeb54996dfb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:23:44:fd:1f:aa:84:02:af:36:e1:42:ed:
                    9d:c8:7e:e9:67:65:5c:1b:b1:8c:af:18:3a:15:89:
                    79:8f:ba:10:ce:66:56:3d:0b:49:16:44:bc:19:60:
                    ab:4b:4e:1f:95:ea:3a:9b:e7:9f:84:97:6b:6c:23:
                    46:20:e9:d1:98:cd:f7:6e:6f:11:22:f8:5c:c1:94:
                    0c:36:bb:1c:f5:2a:20:d0:0f:6a:6d:ef:3e:73:87:
                    9c:ba:d3:13:04:e9:30:66:44:7f:48:1a:63:a8:eb:
                    56:1a:e0:7a:e6:1f:09:29:23:47:c2:9a:0a:d3:54:
                    12:d7:94:42:fd:d0:e6:25:70:a6:89:64:97:fd:75:
                    9c:4d:86:49:0e:28:46:56:fb:ff:c4:76:86:1b:e9:
                    d5:e4:ce:5e:1e:06:80:65:86:56:c3:d9:f7:e2:51:
                    05:43:46:65:69:c9:80:9e:ea:ca:5a:4e:b7:1b:72:
                    61:09:60:40:2e:91:58:3f:70:a9:37:06:5b:38:bf:
                    1b:c2:ab:15:d7:5c:0c:12:53:a1:19:81:eb:b5:91:
                    5e:ae:6b:fc:46:62:44:74:49:90:f8:65:1b:5b:62:
                    70:98:3b:2b:20:0b:ef:92:13:14:d8:3b:20:b9:34:
                    49:91:1c:f0:16:f8:e1:e3:00:01:1e:70:1e:3e:64:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:61:8C:D5:5E:67:60:45:97:49:0F:0C:EB:EB:54:99:6D:FB:67
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:df:07:22:ef:5a:76:23:3f:4e:08:fc:40:65:2b:39:17:43:
         24:52:76:a9:af:42:6b:f5:f6:6a:13:d5:21:fd:b0:d7:09:74:
         19:9a:ea:d4:0f:ab:73:32:80:3c:b5:6e:33:72:f8:52:9f:da:
         0d:2d:79:9d:00:0d:f8:1c:8f:4a:54:bc:31:76:34:58:02:c1:
         3a:a1:03:7b:74:23:3a:2d:2e:ef:37:dc:a7:30:26:32:98:c5:
         13:9f:2e:02:46:e2:f8:cb:68:5f:b4:c3:a1:0d:8e:c0:ee:21:
         91:d7:88:63:2e:1b:a7:6d:d8:6d:c6:8b:34:e7:48:88:20:97:
         6b:ff:5f:02:41:cc:3f:dd:73:3e:57:af:ea:d8:00:da:57:19:
         51:02:17:ee:f7:26:4a:b4:e7:8d:2f:2a:03:09:24:b2:8c:b7:
         f5:1a:89:bb:77:f7:2b:66:f9:cf:f7:50:ad:e9:5e:39:f4:d6:
         cf:b9:40:73:4a:e8:69:8c:e5:fb:7b:02:f5:16:f7:1f:5e:36:
         5b:12:7a:ab:bf:7e:2c:1a:07:d0:43:31:c6:43:56:20:53:63:
         2f:67:1a:9f:da:f2:1b:4f:9c:d2:f4:49:13:a2:fe:15:98:fa:
         17:06:14:de:ce:f9:4f:a4:fc:2f:ef:ba:ca:a2:3d:73:24:21:
         f4:68:f2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs87IHHB6e3GujTDQCR7sM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm
NjA3MzkwHhcNMjUxMjIwMTgwMTMxWhcNMjUxMjIxMTgwMTMxWjAzMTEwLwYDVQQD
EyhjOTBiNjE4Y2Q1NWU2NzYwNDU5NzQ5MGYwY2ViZWI1NDk5NmRmYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOMjRP0fqoQCrzbhQu2dyH7pZ2Vc
G7GMrxg6FYl5j7oQzmZWPQtJFkS8GWCrS04fleo6m+efhJdrbCNGIOnRmM33bm8R
IvhcwZQMNrsc9Sog0A9qbe8+c4ecutMTBOkwZkR/SBpjqOtWGuB65h8JKSNHwpoK
01QS15RC/dDmJXCmiWSX/XWcTYZJDihGVvv/xHaGG+nV5M5eHgaAZYZWw9n34lEF
Q0ZlacmAnurKWk63G3JhCWBALpFYP3CpNwZbOL8bwqsV11wMElOhGYHrtZFermv8
RmJEdEmQ+GUbW2JwmDsrIAvvkhMU2DsguTRJkRzwFvjh4wABHnAePmSt/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkLYYzVXmdgRZdJDwzr61SZbftnMB8GA1UdIwQY
MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt
YmFmNGUwYjRhNjllLzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll
LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt8HIu9a
diM/Tgj8QGUrORdDJFJ2qa9Ca/X2ahPVIf2w1wl0GZrq1A+rczKAPLVuM3L4Up/a
DS15nQAN+ByPSlS8MXY0WALBOqEDe3QjOi0u7zfcpzAmMpjFE58uAkbi+MtoX7TD
oQ2OwO4hkdeIYy4bp23YbcaLNOdIiCCXa/9fAkHMP91zPlev6tgA2lcZUQIX7vcm
SrTnjS8qAwkksoy39RqJu3f3K2b5z/dQreleOfTWz7lAc0roaYzl+3sC9Rb3H142
WxJ6q79+LBoH0EMxxkNWIFNjL2can9ryG0+c0vRJE6L+FZj6FwYU3s75T6T8L++6
yqI9cyQh9GjyTA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:38:12 2025 by rpki-client