This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File:                     a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier:          RLUZzb8fM7z1hPtUMMB2fVcALYnHUb2iW00wsU3uhC0=
Subject key identifier:   FC:0F:72:13:AA:F2:FF:64:A7:B0:7B:D8:C1:95:AE:C9:B5:26:DF:35
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer:       /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial:       019B4280299306AD000E4B1696A6A26710A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number:          1788
Signing time:             Sun 21 Dec 2025 20:00:53 +0000
Manifest this update:     Sun 21 Dec 2025 20:00:53 +0000
Manifest next update:     Mon 22 Dec 2025 20:00:53 +0000
Files and hashes:         1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
                          2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: RpFHPRqyERFVvyZCicnhKjFZXs9sETS3vHs10mSPpVc=)
                          3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:80:29:93:06:ad:00:0e:4b:16:96:a6:a2:67:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
        Validity
            Not Before: Dec 21 20:00:53 2025 GMT
            Not After : Dec 22 20:00:53 2025 GMT
        Subject: CN=fc0f7213aaf2ff64a7b07bd8c195aec9b526df35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:db:e7:bb:ec:17:e6:8e:f5:12:15:70:02:
                    6c:0d:3d:6a:6f:ab:6c:e5:3c:ba:55:d1:c7:66:8d:
                    2f:67:f1:0d:d1:15:0f:7f:8c:ad:ec:08:94:81:3c:
                    0e:73:c8:2c:a2:e8:49:c2:b4:30:9f:db:db:a7:97:
                    45:df:fb:3d:b4:ad:f6:fc:15:19:0a:7b:80:16:99:
                    dc:56:f6:68:30:ba:ba:f7:84:cf:9b:8e:5e:8b:fb:
                    8e:5c:b3:e1:29:f0:f7:1b:f5:84:00:86:2c:fe:a8:
                    e7:3f:14:34:8c:6e:da:f3:30:19:28:d7:c5:66:7d:
                    e2:ca:fb:8a:34:fe:ca:a0:23:be:5b:dd:3e:3f:f7:
                    16:d5:ce:3d:d9:4b:98:90:4b:75:4d:65:44:d6:a6:
                    fb:d2:e9:e7:43:2e:49:3c:ef:75:bb:13:40:db:fc:
                    8e:68:61:9a:ab:b7:56:2b:25:3a:11:a9:f8:49:af:
                    d4:e0:1a:01:be:ba:21:45:d4:34:65:0a:dc:90:bd:
                    ae:05:4d:73:91:67:b6:98:7d:85:c0:6b:28:1e:32:
                    85:ec:b3:e2:f9:0c:65:60:a8:6d:21:e8:cc:54:1d:
                    96:a9:86:64:b2:84:1d:d6:0c:cc:2d:8f:97:80:09:
                    c6:f4:18:24:16:fd:bf:49:da:99:64:fd:c3:34:1c:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0F:72:13:AA:F2:FF:64:A7:B0:7B:D8:C1:95:AE:C9:B5:26:DF:35
            X509v3 Authority Key Identifier:
                keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:6e:22:a7:cf:cb:82:d3:1d:29:ac:8e:d9:c6:e6:24:3b:
         63:b5:24:d3:02:23:d1:98:b9:5b:23:e7:60:94:7d:a8:94:4b:
         ea:d1:d3:e5:78:2f:55:4e:ed:fe:63:4f:ce:e0:28:a8:4c:85:
         25:33:56:a8:5f:7e:10:7b:76:fe:67:9e:a2:fc:a1:47:b4:a3:
         be:a0:9b:94:82:1b:51:42:34:09:94:5a:9b:37:22:a1:35:83:
         b8:7a:5c:a1:c9:0a:52:76:d6:fb:fb:71:76:4e:9e:93:6c:a9:
         b4:bf:ab:b1:bd:d2:8c:03:55:fb:97:65:a1:21:0e:93:88:c1:
         40:d7:f9:e8:b4:34:17:a6:d9:8f:16:bb:3e:1f:2a:a2:36:59:
         97:74:e2:c6:d9:94:4c:08:ac:bd:11:47:c1:16:4e:92:d9:7b:
         49:25:0b:9b:ab:96:95:01:e2:88:7a:07:12:39:da:96:89:1f:
         dd:0d:f2:48:3c:92:94:a8:c9:18:01:5a:12:5a:41:34:c5:57:
         2f:3e:26:b2:01:58:a7:bb:87:d8:a3:ac:b6:5d:b2:86:1d:b0:
         6f:bd:28:0f:7f:52:e8:e4:9f:f8:33:68:f1:58:bc:30:4c:f2:
         53:0a:94:34:8c:cb:7f:d1:8b:6c:7c:84:99:c7:a5:8f:c9:11:
         09:ef:20:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtCgCmTBq0ADksWlqaiZxCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOWE3NDA1YTYwODVjOWFiYWNmMDgzZGM5MGE0OTVmY2Qy
NjhjZjgwHhcNMjUxMjIxMjAwMDUzWhcNMjUxMjIyMjAwMDUzWjAzMTEwLwYDVQQD
EyhmYzBmNzIxM2FhZjJmZjY0YTdiMDdiZDhjMTk1YWVjOWI1MjZkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMjb57vsF+aO9RIVcAJsDT1qb6ts
5Ty6VdHHZo0vZ/EN0RUPf4yt7AiUgTwOc8gsouhJwrQwn9vbp5dF3/s9tK32/BUZ
CnuAFpncVvZoMLq694TPm45ei/uOXLPhKfD3G/WEAIYs/qjnPxQ0jG7a8zAZKNfF
Zn3iyvuKNP7KoCO+W90+P/cW1c492UuYkEt1TWVE1qb70unnQy5JPO91uxNA2/yO
aGGaq7dWKyU6Ean4Sa/U4BoBvrohRdQ0ZQrckL2uBU1zkWe2mH2FwGsoHjKF7LPi
+QxlYKhtIejMVB2WqYZksoQd1gzMLY+XgAnG9BgkFv2/SdqZZP3DNBx3YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwPchOq8v9kp7B72MGVrsm1Jt81MB8GA1UdIwQY
MBaAFGuadAWmCFyaus8IPckKSV/NJoz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMt
MmUxZWU5NDcxZWVjLzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMtMmUxZWU5NDcxZWVj
LzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9luIqfP
y4LTHSmsjtnG5iQ7Y7Uk0wIj0Zi5WyPnYJR9qJRL6tHT5XgvVU7t/mNPzuAoqEyF
JTNWqF9+EHt2/meeovyhR7SjvqCblIIbUUI0CZRamzcioTWDuHpcockKUnbW+/tx
dk6ek2yptL+rsb3SjANV+5dloSEOk4jBQNf56LQ0F6bZjxa7Ph8qojZZl3TixtmU
TAisvRFHwRZOktl7SSULm6uWlQHiiHoHEjnalokf3Q3ySDySlKjJGAFaElpBNMVX
Lz4msgFYp7uH2KOstl2yhh2wb70oD39S6OSf+DNo8Vi8MEzyUwqUNIzLf9GLbHyE
mcelj8kRCe8gow==
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:16:29 2025 by rpki-client