This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File:                     BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier:          5+EqE57tXMsF0SUmwhfXrmiQX54L4GsHFDa8blAVvXA=
Subject key identifier:   58:EA:2F:DB:89:A2:EE:61:C6:4C:C5:51:12:79:90:19:61:DC:72:E7
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer:       /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial:       019B522A6E1B174E34E981AA20D482B80F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number:          1798
Signing time:             Wed 24 Dec 2025 21:01:10 +0000
Manifest this update:     Wed 24 Dec 2025 21:01:10 +0000
Manifest next update:     Thu 25 Dec 2025 21:01:10 +0000
Files and hashes:         1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=)
                          2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: T4TWBSl45W285tufUlF2G/vpEkRPF5z/2HllVg1M6qg=)
                          3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=)
                          4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:2a:6e:1b:17:4e:34:e9:81:aa:20:d4:82:b8:0f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
        Validity
            Not Before: Dec 24 21:01:10 2025 GMT
            Not After : Dec 25 21:01:10 2025 GMT
        Subject: CN=58ea2fdb89a2ee61c64cc5511279901961dc72e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:3b:68:71:25:a9:32:b3:2a:43:fe:41:94:
                    fe:b3:92:f6:61:e3:97:55:d4:23:8f:c9:41:fc:da:
                    a0:38:af:8c:73:e4:08:fb:04:7e:62:8f:7c:af:57:
                    56:af:35:e6:52:23:4a:8e:7f:17:59:54:f8:64:5a:
                    63:90:a2:1d:50:21:d0:9f:de:13:61:ec:d5:da:d9:
                    f1:b9:dd:80:e6:40:cb:b6:9e:5d:a9:a0:b6:99:3b:
                    1e:48:fb:17:3e:89:72:32:bb:47:cc:a4:7b:56:6e:
                    e8:99:48:c1:6b:af:c9:f4:2f:e3:bc:01:c7:41:05:
                    20:3a:68:e7:4f:cb:12:2b:af:5c:3a:ac:bd:7f:1e:
                    ad:36:ef:52:81:e0:2d:34:15:55:6c:12:38:dd:b4:
                    e1:32:02:85:eb:ce:56:9f:69:c6:95:08:74:e3:b7:
                    a3:96:d0:3e:b2:68:f2:e4:82:bd:3f:81:aa:0f:48:
                    05:1a:0f:9c:9e:56:fe:c0:52:8b:5f:f9:f2:61:46:
                    af:87:1f:60:f1:81:58:23:3c:e0:87:df:2d:d4:c7:
                    98:68:b5:c9:4e:d6:69:28:76:e6:44:74:73:b3:46:
                    ac:93:a4:e1:ee:3a:16:d3:b0:f8:13:9f:76:2a:78:
                    72:63:05:f0:92:98:6b:18:e0:e5:0d:24:34:35:f0:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:2F:DB:89:A2:EE:61:C6:4C:C5:51:12:79:90:19:61:DC:72:E7
            X509v3 Authority Key Identifier:
                keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:71:3d:f1:f0:69:46:72:77:67:eb:75:dd:f4:7f:dd:ef:ae:
         97:65:8c:05:23:d1:e4:30:37:80:e4:04:13:dc:46:f9:d0:db:
         28:a3:10:30:fc:26:0e:a4:50:2a:f0:b8:18:ea:af:fc:2a:fc:
         96:14:7f:19:fd:5e:bf:36:39:17:4b:a0:51:2d:01:57:48:81:
         47:19:f0:70:f3:bd:c3:20:5a:92:e7:0a:ca:78:38:7a:9a:7c:
         68:08:c6:a4:a6:b2:27:e1:cb:9d:c8:43:cb:77:b3:3b:5f:2d:
         2f:a4:42:83:82:b2:b2:e3:ba:ef:6f:3f:d0:de:6f:39:05:d7:
         28:5a:af:d9:6e:e0:2c:72:97:49:2b:af:72:4f:3e:55:68:35:
         8e:46:30:29:02:de:28:54:67:1b:52:72:55:64:7e:c3:2d:01:
         9e:9d:ab:a4:97:2d:f4:22:f8:2d:bc:ee:95:2b:48:10:e4:b4:
         be:c7:f9:39:83:cb:40:50:39:93:31:a3:5d:19:a6:e6:5c:b9:
         09:b4:73:ad:cf:88:85:f2:18:29:0f:3e:e1:90:10:e5:d2:d4:
         ba:94:cd:41:1c:63:80:71:b9:85:4d:3e:21:6b:60:e1:82:df:
         21:f2:eb:3e:c6:01:24:03:a4:b8:75:f8:c9:e3:c5:7d:82:be:
         db:88:b7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtSKm4bF0406YGqINSCuA+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0
ZTJjOWMwHhcNMjUxMjI0MjEwMTEwWhcNMjUxMjI1MjEwMTEwWjAzMTEwLwYDVQQD
Eyg1OGVhMmZkYjg5YTJlZTYxYzY0Y2M1NTExMjc5OTAxOTYxZGM3MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aw7aHElqTKzKkP+QZT+s5L2YeOX
VdQjj8lB/NqgOK+Mc+QI+wR+Yo98r1dWrzXmUiNKjn8XWVT4ZFpjkKIdUCHQn94T
YezV2tnxud2A5kDLtp5dqaC2mTseSPsXPolyMrtHzKR7Vm7omUjBa6/J9C/jvAHH
QQUgOmjnT8sSK69cOqy9fx6tNu9SgeAtNBVVbBI43bThMgKF685Wn2nGlQh047ej
ltA+smjy5IK9P4GqD0gFGg+cnlb+wFKLX/nyYUavhx9g8YFYIzzgh98t1MeYaLXJ
TtZpKHbmRHRzs0ask6Th7joW07D4E592KnhyYwXwkphrGODlDSQ0NfACmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjqL9uJou5hxkzFURJ5kBlh3HLnMB8GA1UdIwQY
MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt
YWVhYzVkOWNkYzdiLzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi
LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHE98fBp
RnJ3Z+t13fR/3e+ul2WMBSPR5DA3gOQEE9xG+dDbKKMQMPwmDqRQKvC4GOqv/Cr8
lhR/Gf1evzY5F0ugUS0BV0iBRxnwcPO9wyBakucKyng4epp8aAjGpKayJ+HLnchD
y3ezO18tL6RCg4KysuO6728/0N5vOQXXKFqv2W7gLHKXSSuvck8+VWg1jkYwKQLe
KFRnG1JyVWR+wy0Bnp2rpJct9CL4LbzulStIEOS0vsf5OYPLQFA5kzGjXRmm5ly5
CbRzrc+IhfIYKQ8+4ZAQ5dLUupTNQRxjgHG5hU0+IWtg4YLfIfLrPsYBJAOkuHX4
yePFfYK+24i3Mg==
-----END CERTIFICATE-----
Generated at Thu Dec 25 05:16:35 2025 by rpki-client