This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          3ZYpqJbKUdDWN1TEKAw8tciRPq5AOl0y1DtSt2FlmDM=
Subject key identifier:   AE:D9:76:5A:A6:61:48:E1:D3:4B:76:6F:25:44:00:36:C3:32:FE:D9
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019B397D93DF84978FAC8F34433886C36E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          06E6
Signing time:             Sat 20 Dec 2025 02:01:29 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:29 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:29 +0000
Files and hashes:         1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=)
                          2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
                          3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: o8ktbYcXjb0BJTW1Z9dskSI6UfYV0lSERVZEjrMmtBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:93:df:84:97:8f:ac:8f:34:43:38:86:c3:6e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Dec 20 02:01:29 2025 GMT
            Not After : Dec 21 02:01:29 2025 GMT
        Subject: CN=aed9765aa66148e1d34b766f25440036c332fed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:75:c0:9b:21:0e:88:4b:63:f6:71:d8:17:
                    45:5b:e5:c1:33:c1:7c:21:7c:91:98:47:40:21:a0:
                    59:c3:fe:25:93:05:1d:dd:55:84:df:cf:a7:2c:66:
                    67:50:ac:2b:75:97:89:d3:a8:8b:e4:20:78:8c:54:
                    92:a3:ef:77:60:f4:f5:c8:14:e8:14:1f:76:c0:6a:
                    cb:4a:d4:6a:89:cc:9c:e9:ad:6b:d7:dd:29:3c:92:
                    f1:1c:5f:79:0a:f0:85:33:79:bd:44:e6:98:d5:5e:
                    91:54:70:44:8e:bd:93:7b:87:bc:2a:28:0d:ce:e0:
                    94:71:44:ac:85:1d:23:1e:69:e2:fa:80:cb:2c:33:
                    43:1d:b2:7a:54:16:1b:15:dd:85:d6:fb:c8:37:51:
                    6b:a8:59:43:a2:95:3c:c0:0c:82:de:bb:ac:1e:a7:
                    89:68:fb:63:e7:c4:90:8b:74:9a:fd:2f:24:b8:b6:
                    26:a8:4b:65:c2:70:9f:b2:77:d5:93:50:49:78:0e:
                    2b:9d:e6:a4:04:eb:53:a5:8b:cf:ec:fb:92:4f:f7:
                    5d:d1:bd:7d:04:af:a5:92:11:8a:45:36:b9:10:c4:
                    59:3e:8f:bf:9e:f9:b7:77:d8:84:db:d2:19:ca:a0:
                    ef:3c:7e:a9:c3:0c:1c:10:6a:b1:da:b0:01:bf:a4:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:76:5A:A6:61:48:E1:D3:4B:76:6F:25:44:00:36:C3:32:FE:D9
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:f3:12:f6:36:81:32:1a:1c:32:0a:07:b7:f4:25:69:0b:
         5b:3c:8c:a5:3b:b8:d2:be:a5:87:ea:7b:83:6b:6b:65:72:f3:
         4c:26:1e:80:b9:37:50:52:f2:c3:ff:f0:cd:53:27:5a:58:85:
         40:b3:c5:2a:17:46:8b:ae:71:14:a4:e0:2e:ee:7d:72:c7:b2:
         ed:ff:29:85:96:ff:72:45:95:83:83:e7:f2:9e:9e:cc:df:1a:
         e5:38:0d:dd:8f:53:a7:5a:ee:f1:2f:c7:a8:7c:8e:76:24:01:
         22:7e:31:a0:fb:49:d6:04:d3:7f:dc:31:36:bb:66:77:41:34:
         0f:d5:b3:65:65:3d:ef:6f:9e:9b:eb:fe:6a:79:65:e7:44:d5:
         b8:3f:ec:35:23:c3:ad:86:a8:d2:bc:34:19:a2:52:7f:3d:d0:
         38:4a:61:22:40:01:45:78:17:87:d3:0e:20:6b:5b:93:fd:0c:
         15:0b:5c:19:d6:9b:13:c4:41:95:14:5b:21:db:5e:2b:e0:15:
         4c:4a:b6:54:87:15:b2:03:d6:df:4f:09:19:f8:96:1c:34:98:
         da:b0:31:d7:b2:58:78:86:b2:62:df:42:d6:fc:bd:1b:10:cb:
         b8:de:81:8d:a4:46:9b:8d:59:a3:d6:16:79:2c:93:89:04:77:
         ba:b7:9b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5fZPfhJePrI80QziGw26fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjUxMjIwMDIwMTI5WhcNMjUxMjIxMDIwMTI5WjAzMTEwLwYDVQQD
EyhhZWQ5NzY1YWE2NjE0OGUxZDM0Yjc2NmYyNTQ0MDAzNmMzMzJmZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZh1wJshDohLY/Zx2BdFW+XBM8F8
IXyRmEdAIaBZw/4lkwUd3VWE38+nLGZnUKwrdZeJ06iL5CB4jFSSo+93YPT1yBTo
FB92wGrLStRqicyc6a1r190pPJLxHF95CvCFM3m9ROaY1V6RVHBEjr2Te4e8KigN
zuCUcUSshR0jHmni+oDLLDNDHbJ6VBYbFd2F1vvIN1FrqFlDopU8wAyC3rusHqeJ
aPtj58SQi3Sa/S8kuLYmqEtlwnCfsnfVk1BJeA4rneakBOtTpYvP7PuST/dd0b19
BK+lkhGKRTa5EMRZPo+/nvm3d9iE29IZyqDvPH6pwwwcEGqx2rABv6RbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7ZdlqmYUjh00t2byVEADbDMv7ZMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzfzEvY2
gTIaHDIKB7f0JWkLWzyMpTu40r6lh+p7g2trZXLzTCYegLk3UFLyw//wzVMnWliF
QLPFKhdGi65xFKTgLu59csey7f8phZb/ckWVg4Pn8p6ezN8a5TgN3Y9Tp1ru8S/H
qHyOdiQBIn4xoPtJ1gTTf9wxNrtmd0E0D9WzZWU972+em+v+anll50TVuD/sNSPD
rYao0rw0GaJSfz3QOEphIkABRXgXh9MOIGtbk/0MFQtcGdabE8RBlRRbIdteK+AV
TEq2VIcVsgPW308JGfiWHDSY2rAx17JYeIayYt9C1vy9GxDLuN6BjaRGm41Zo9YW
eSyTiQR3ureb4w==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:09:26 2025 by rpki-client