This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          bgGs8AqibISAzAmMel75sIjotAaDpNFyidzHKGJCAG4=
Subject key identifier:   92:B9:6B:BE:44:42:E6:4C:EF:96:78:0E:FB:FB:5A:B8:93:62:5C:35
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019B3C7F138D4BA91AB74CCF9F009981D126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0D91
Signing time:             Sat 20 Dec 2025 16:01:59 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:59 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:59 +0000
Files and hashes:         1: Sj80T0ZscSHQioJGKuWyuIDWdMY.roa (hash: WY9jZ6uCG8EibKZZR1R4Ju7ioSD/EDvW46cJnpe1OBA=)
                          2: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: fmL5Todv1dUcA9g1aD3iwKGLwAMj8jxPRfVFpLsIGTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:13:8d:4b:a9:1a:b7:4c:cf:9f:00:99:81:d1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Dec 20 16:01:59 2025 GMT
            Not After : Dec 21 16:01:59 2025 GMT
        Subject: CN=92b96bbe4442e64cef96780efbfb5ab893625c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:04:e3:0e:0e:f1:81:16:e1:a9:46:ba:4a:
                    ae:0b:02:80:f1:cb:91:e2:cc:06:98:52:f8:ff:0a:
                    ff:5e:1b:23:93:b0:8f:42:a5:0b:27:64:44:15:1b:
                    9e:c9:49:92:ec:99:62:83:59:28:80:3f:e3:0b:b9:
                    95:a9:e1:67:ed:b1:d5:0f:f7:53:15:e2:9f:d0:b8:
                    de:7f:17:12:ea:93:bf:9e:7f:58:ae:9c:a7:4d:b8:
                    79:5a:49:cf:fa:f5:8d:19:e5:c0:c9:bb:2b:1b:88:
                    f1:e9:91:35:c2:37:d7:6a:3d:02:13:a5:1f:6f:37:
                    ec:79:5a:0f:ad:a1:b6:21:e2:3b:35:41:e1:57:41:
                    da:f9:1d:cf:39:f9:14:5b:8c:29:c4:72:d2:5a:51:
                    8a:ef:d4:ad:b9:a6:4d:7e:d8:e3:fa:50:a7:43:7e:
                    d4:20:2a:96:47:1b:48:b2:b6:0d:06:4a:0b:fe:b1:
                    2c:3a:7c:41:e2:23:a0:7a:8a:2d:ad:7b:a8:dc:f4:
                    37:1b:f5:4c:a9:8f:4e:e3:d7:0d:9d:94:7d:40:da:
                    48:07:32:af:5b:78:db:cf:78:0d:a2:5e:c4:a9:ed:
                    50:fb:de:18:c4:41:c0:68:dc:5f:a3:ef:0f:0f:b4:
                    48:79:f6:5c:e5:83:ea:c6:c3:44:b5:eb:fc:55:9c:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B9:6B:BE:44:42:E6:4C:EF:96:78:0E:FB:FB:5A:B8:93:62:5C:35
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:28:ab:e8:f1:e2:18:b9:6f:a8:83:09:20:e4:51:5d:b0:
         8e:11:6f:b4:02:b1:06:07:dc:7c:3c:47:47:59:47:06:50:6e:
         6c:2a:ff:6b:02:6f:b0:20:be:d1:f8:77:e4:ee:01:56:46:97:
         ef:a8:86:d8:73:9f:15:96:b7:06:d7:57:8b:1b:c3:7e:1b:14:
         80:0b:a8:7f:74:ed:a2:92:39:24:be:75:e9:ed:33:0b:0b:88:
         75:eb:a1:f7:ad:10:4e:11:eb:84:b1:84:09:87:11:2c:1f:20:
         cf:c2:77:3d:9c:c4:e2:28:68:90:43:22:50:56:47:4e:06:c1:
         13:e7:95:48:20:5d:7a:81:bd:b7:8c:cb:ee:78:a0:f8:4d:6e:
         45:83:58:68:f2:35:03:e1:83:a6:ea:48:89:d7:a6:7e:51:52:
         fe:85:4f:96:49:97:38:11:c9:24:4d:62:c1:7b:15:30:b8:f0:
         27:d4:e4:90:eb:a6:83:24:b2:e8:e8:3f:f3:f0:ea:40:7c:5b:
         e6:b2:30:a4:d0:6c:98:38:a6:8e:de:db:dd:2f:ff:41:0d:60:
         97:01:c7:6f:59:d5:e9:03:a1:e5:6f:be:c6:6f:5f:5e:49:46:
         55:cd:df:94:2d:f6:06:ff:0f:6a:57:35:62:80:69:31:9a:f9:
         07:57:64:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8fxONS6kat0zPnwCZgdEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDE4Y2M2NTUwZGZkYjE4OTk5NjlhNjAyN2U0MzVhMWIw
YjEzNDEwHhcNMjUxMjIwMTYwMTU5WhcNMjUxMjIxMTYwMTU5WjAzMTEwLwYDVQQD
Eyg5MmI5NmJiZTQ0NDJlNjRjZWY5Njc4MGVmYmZiNWFiODkzNjI1YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV0E4w4O8YEW4alGukquCwKA8cuR
4swGmFL4/wr/Xhsjk7CPQqULJ2REFRueyUmS7Jlig1kogD/jC7mVqeFn7bHVD/dT
FeKf0LjefxcS6pO/nn9YrpynTbh5WknP+vWNGeXAybsrG4jx6ZE1wjfXaj0CE6Uf
bzfseVoPraG2IeI7NUHhV0Ha+R3POfkUW4wpxHLSWlGK79StuaZNftjj+lCnQ37U
ICqWRxtIsrYNBkoL/rEsOnxB4iOgeootrXuo3PQ3G/VMqY9O49cNnZR9QNpIBzKv
W3jbz3gNol7Eqe1Q+94YxEHAaNxfo+8PD7RIefZc5YPqxsNEtev8VZwXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK5a75EQuZM75Z4Dvv7WriTYlw1MB8GA1UdIwQY
MBaAFJhBjMZVDf2xiZlppgJ+Q1obCxNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMt
ZmQ1ZDc5ZWM1YjE3LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMtZmQ1ZDc5ZWM1YjE3
LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxAoq+jx
4hi5b6iDCSDkUV2wjhFvtAKxBgfcfDxHR1lHBlBubCr/awJvsCC+0fh35O4BVkaX
76iG2HOfFZa3BtdXixvDfhsUgAuof3TtopI5JL516e0zCwuIdeuh960QThHrhLGE
CYcRLB8gz8J3PZzE4ihokEMiUFZHTgbBE+eVSCBdeoG9t4zL7nig+E1uRYNYaPI1
A+GDpupIidemflFS/oVPlkmXOBHJJE1iwXsVMLjwJ9TkkOumgySy6Og/8/DqQHxb
5rIwpNBsmDimjt7b3S//QQ1glwHHb1nV6QOh5W++xm9fXklGVc3flC32Bv8Palc1
YoBpMZr5B1dkDA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:15:07 2025 by rpki-client